g_setup(0x7cad, &(0x7f0000000a00)={0x0, 0xe093, 0x4, 0x0, 0x263}, &(0x7f0000000a80), &(0x7f0000000ac0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7}, 0x0)

05:16:35 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:35 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x20000000}, 0x0)

05:16:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x0)

05:16:35 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x700, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x34000000}, 0x0)

05:16:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9}, 0x0)

05:16:35 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:35 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:35 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x900, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf}, 0x0)

05:16:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x40000000}, 0x0)

05:16:35 executing program 0:
syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80}, 0x0, 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x80000, 0x0)
syz_io_uring_setup(0x591b, &(0x7f00000000c0)={0x0, 0x6dbf, 0x8, 0x0, 0x45, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000180))

05:16:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c}, 0x0)

05:16:35 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0xa00, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x5d230000}, 0x0)

05:16:35 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:35 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:35 executing program 4:
syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80}, 0x0, 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x80000, 0x0)
syz_io_uring_setup(0x591b, &(0x7f00000000c0)={0x0, 0x6dbf, 0x8, 0x0, 0x45, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80}, 0x0, 0x0) (async)
openat$zero(0xffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async)
syz_io_uring_setup(0x591b, &(0x7f00000000c0)={0x0, 0x6dbf, 0x8, 0x0, 0x45, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000180)) (async)

05:16:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x0)

05:16:35 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0xe00, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x60000000}, 0x0)

05:16:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7e}, 0x0)

05:16:36 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:36 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0xf00, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:36 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x61a8, &(0x7f0000000080)={0x0, 0x48c2, 0x8, 0x2, 0x130}, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140))
syz_io_uring_complete(r0)

05:16:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x79c528f7}, 0x0)

05:16:36 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa9}, 0x0)

05:16:36 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:36 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xaa}, 0x0)

05:16:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x8b000000}, 0x0)

05:16:36 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
syz_io_uring_setup(0x61a8, &(0x7f0000000080)={0x0, 0x48c2, 0x8, 0x2, 0x130}, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140))
syz_io_uring_complete(r0)

05:16:36 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40}, &(0x7f0000000580), &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:36 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:36 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x2100, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x300}, 0x0)

05:16:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x8c000000}, 0x0)

05:16:36 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:36 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40}, &(0x7f0000000580), &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:36 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40}, &(0x7f0000000580), &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:36 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x2100, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x500}, 0x0)

05:16:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0xf0ffffff}, 0x0)

05:16:36 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x2100, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:36 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x3f00, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:36 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40}, &(0x7f0000000580), &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

05:16:37 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x2100, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:37 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0xf728c579}, 0x0)

05:16:37 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:37 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x850000, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:37 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x700}, 0x0)

05:16:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0xffffff7f}, 0x0)

05:16:37 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2100, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:37 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:37 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0xfffffff0}, 0x0)

05:16:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x900}, 0x0)

05:16:37 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x4a970000, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:37 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2100, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)

05:16:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf00}, 0x0)

05:16:37 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:37 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0xce840000, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:37 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2100, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:37 executing program 3:
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r0}, &(0x7f0000000580), &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:37 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x2}, 0x0)

05:16:37 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0xcf840000, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c00}, 0x0)

05:16:37 executing program 0:
syz_io_uring_setup(0x79ed, 0x0, &(0x7f0000000080), &(0x7f00000000c0))

05:16:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x3}, 0x0)

05:16:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

05:16:37 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:37 executing program 2:
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r0}, &(0x7f0000000580), &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:37 executing program 0:
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r0}, &(0x7f0000000580), &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:37 executing program 4:
syz_io_uring_setup(0x79ed, 0x0, &(0x7f0000000080), &(0x7f00000000c0))

05:16:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x4}, 0x0)

05:16:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000}, 0x0)

05:16:38 executing program 1:
syz_io_uring_setup(0x79ed, 0x0, &(0x7f0000000080), &(0x7f00000000c0))

05:16:38 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x5}, 0x0)

05:16:38 executing program 2:
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r0}, &(0x7f0000000580), &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:38 executing program 3:
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r0}, &(0x7f0000000580), &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:38 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:38 executing program 0:
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r0}, &(0x7f0000000580), &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7e00}, 0x0)

05:16:38 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:38 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:38 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:38 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa900}, 0x0)

05:16:38 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:38 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xaa00}, 0x0)

05:16:38 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:38 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:38 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x3}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:38 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x30000}, 0x0)

05:16:39 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x4}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:39 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x2100}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:39 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:39 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:39 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:39 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x2100}, 0x0, &(0x7f00000000c0))

05:16:39 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x34000}, 0x0)

05:16:39 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x2100}, 0x0, 0x0)

05:16:39 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:39 executing program 3:
r0 = syz_io_uring_setup(0x79ed, 0x0, &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:39 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400300}, 0x0)

[ 3311.569598][T28510] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 3311.580094][T28510] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 3311.599803][T28510] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 3311.618957][T28510] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 3311.627318][T28510] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 3311.640599][T28510] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 3311.654520][ T1105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
05:16:39 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x5}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:39 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

[ 3311.760740][ T1105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
05:16:39 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:39 executing program 0:
r0 = syz_io_uring_setup(0x79ed, 0x0, &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:40 executing program 1:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x303e81, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xf764, 0x80, 0x0, 0x0, 0x0, r0}, 0x0, 0x0)

05:16:40 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x6}, &(0x7f0000000080), &(0x7f00000000c0))

[ 3311.909930][ T1105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
05:16:40 executing program 2:
r0 = syz_io_uring_setup(0x79ed, 0x0, &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:40 executing program 0:
r0 = syz_io_uring_setup(0x79ed, 0x0, &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3312.045726][ T1105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
05:16:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

05:16:40 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:40 executing program 2:
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3}, &(0x7f0000000880), &(0x7f00000008c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:40 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)

05:16:40 executing program 0:
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3}, &(0x7f0000000880), &(0x7f00000008c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3312.487051][T22561] chnl_net:caif_netlink_parms(): no params data found
05:16:40 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x7}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:40 executing program 1:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x303e81, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xf764, 0x80, 0x0, 0x0, 0x0, r0}, 0x0, 0x0)

[ 3312.587697][ T1105] bridge_slave_1: left allmulticast mode
[ 3312.611294][ T1105] bridge_slave_1: left promiscuous mode
[ 3312.622316][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3312.641191][ T1105] bridge_slave_0: left allmulticast mode
[ 3312.652779][ T1105] bridge_slave_0: left promiscuous mode
[ 3312.662751][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state
05:16:40 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:40 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x374, &(0x7f0000000080)={0x0, 0x92ee, 0x4, 0x1, 0x1e9, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:16:40 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x8}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:40 executing program 3:
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3}, &(0x7f0000000880), &(0x7f00000008c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:41 executing program 1:
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3}, &(0x7f0000000880), &(0x7f00000008c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:41 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), 0x0, &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3312.968102][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
05:16:41 executing program 3:
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3}, &(0x7f0000000880), &(0x7f00000008c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3313.016247][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3313.050700][ T1105] bond0 (unregistering): Released all slaves
05:16:41 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)

05:16:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

05:16:41 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), 0x0, &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:41 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x9}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0)

05:16:41 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:41 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x374, &(0x7f0000000080)={0x0, 0x92ee, 0x4, 0x1, 0x1e9, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:16:41 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0xa}, &(0x7f0000000080), &(0x7f00000000c0))

[ 3313.651075][T22561] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3313.681890][T22561] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3313.703255][T22561] bridge_slave_0: entered allmulticast mode
[ 3313.712701][ T3480] Bluetooth: hci2: command tx timeout
[ 3313.715623][T22561] bridge_slave_0: entered promiscuous mode
[ 3313.727839][T22561] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3313.736272][T22561] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3313.743908][T22561] bridge_slave_1: entered allmulticast mode
[ 3313.751554][T22561] bridge_slave_1: entered promiscuous mode
05:16:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0)

05:16:41 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa302, 0xa00, 0xffffffff}, 0x0, 0x0)
syz_io_uring_setup(0x793b, &(0x7f0000000180)={0x0, 0xa090, 0x80, 0x0, 0x9, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240))
r1 = openat$zero(0xffffff9c, &(0x7f0000000280), 0x1, 0x0)
syz_io_uring_setup(0x4c1f, &(0x7f00000002c0)={0x0, 0x8a67, 0x10, 0x1, 0x17d, 0x0, r1}, &(0x7f0000000340), &(0x7f0000000380))
syz_io_uring_setup(0x6f6d, &(0x7f0000000080)={0x0, 0x67f7, 0x10, 0x0, 0x321, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:16:41 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), 0x0, &(0x7f0000000900))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:42 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0xe}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:42 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:42 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3314.116116][ T1105] hsr_slave_0: left promiscuous mode
05:16:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)

05:16:42 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0xf}, &(0x7f0000000080), &(0x7f00000000c0))

[ 3314.172717][ T1105] hsr_slave_1: left promiscuous mode
[ 3314.215324][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3314.252768][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3314.282802][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3314.290286][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1
05:16:42 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:42 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x10}, &(0x7f0000000080), &(0x7f00000000c0))

[ 3314.324109][ T1105] veth1_macvtap: left promiscuous mode
[ 3314.329714][ T1105] veth0_macvtap: left promiscuous mode
[ 3314.349010][ T1105] veth1_vlan: left promiscuous mode
[ 3314.367475][ T1105] veth0_vlan: left promiscuous mode
05:16:42 executing program 0:
r0 = syz_io_uring_setup(0x79ed, 0x0, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:42 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa302, 0xa00, 0xffffffff}, 0x0, 0x0)
syz_io_uring_setup(0x793b, &(0x7f0000000180)={0x0, 0xa090, 0x80, 0x0, 0x9, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240)) (async)
r1 = openat$zero(0xffffff9c, &(0x7f0000000280), 0x1, 0x0)
syz_io_uring_setup(0x4c1f, &(0x7f00000002c0)={0x0, 0x8a67, 0x10, 0x1, 0x17d, 0x0, r1}, &(0x7f0000000340), &(0x7f0000000380)) (async)
syz_io_uring_setup(0x6f6d, &(0x7f0000000080)={0x0, 0x67f7, 0x10, 0x0, 0x321, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:16:42 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x15}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:42 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:42 executing program 2:
r0 = syz_io_uring_setup(0x2b30, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
r1 = syz_io_uring_setup(0x6f06, &(0x7f0000000000)={0x0, 0x89b0, 0x80, 0x1, 0x356, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x3487, &(0x7f0000000180)={0x0, 0x5199, 0x2000, 0x3, 0x14b, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240))

05:16:42 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x16}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:42 executing program 2:
r0 = syz_io_uring_setup(0x79ed, 0x0, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:42 executing program 0:
r0 = syz_io_uring_setup(0x2b30, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
r1 = syz_io_uring_setup(0x6f06, &(0x7f0000000000)={0x0, 0x89b0, 0x80, 0x1, 0x356, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x3487, &(0x7f0000000180)={0x0, 0x5199, 0x2000, 0x3, 0x14b, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240))

05:16:43 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x1e}, &(0x7f0000000080), &(0x7f00000000c0))

[ 3314.977683][ T1105] team0 (unregistering): Port device team_slave_1 removed
05:16:43 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:43 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x538d, &(0x7f0000000080)={0x0, 0x8797, 0x10, 0x3, 0x3b9}, &(0x7f0000000100), &(0x7f0000000140))

[ 3315.019409][ T1105] team0 (unregistering): Port device team_slave_0 removed
05:16:43 executing program 3:
r0 = syz_io_uring_setup(0x79ed, 0x0, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:43 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x21}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:43 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x538d, &(0x7f0000000080)={0x0, 0x8797, 0x10, 0x3, 0x3b9}, &(0x7f0000000100), &(0x7f0000000140))

05:16:43 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:43 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:43 executing program 3:
r0 = syz_io_uring_setup(0x79ed, 0x0, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3315.373850][T22561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
05:16:43 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x23}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:43 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)

[ 3315.477357][T22561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
05:16:43 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:43 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, 0x0, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:43 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3315.674548][T22561] team0: Port device team_slave_0 added
[ 3315.712278][T22561] team0: Port device team_slave_1 added
05:16:43 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x16000}, &(0x7f0000000080), &(0x7f00000000c0))

[ 3315.793155][ T3480] Bluetooth: hci2: command tx timeout
[ 3315.938199][T22561] batman_adv: batadv0: Adding interface: batadv_slave_0
05:16:44 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0)

05:16:44 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

[ 3315.967267][T22561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
05:16:44 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3316.023912][T22561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
05:16:44 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, 0x0, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3316.077776][T22561] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3316.084961][T22561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
05:16:44 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, 0x0, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3316.200013][T22561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
05:16:44 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x2}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0)

05:16:44 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:44 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, 0x0, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3316.521163][T22561] hsr_slave_0: entered promiscuous mode
[ 3316.570968][T22561] hsr_slave_1: entered promiscuous mode
05:16:44 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:44 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x3}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c000000}, 0x0)

05:16:44 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:44 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:45 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x4}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)

05:16:45 executing program 3:
r0 = openat$apparmor_task_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=@profile={'stack ', '/proc/self/attr/current\x00'}, 0x1e)
write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="737461e36b207d0075d40972a4e087f62e83f9a9d679f902d54f12fcfc4f35d721650a682641ea40a317ff6d68b5602b4d8d9f3418994dd5de21a8495631adeca647f49eb6c1f9429d3609bc4fb78c30531294deab06e16577893cf0ec2b5bf8dd46c43b2ad86b4df9930e564948368cf743ce74b73a07a3ed4521526e2f0d8e07a8b17aed777f91015141bdc9913bd96f1cfb6c1ec2357ca15a058fc31ede266b50884871475e3bf31b9e71a9b92da46ab51b37913e38dd9719c6ca14f55ac0cbe2d0b1af"], 0x8)

05:16:45 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x5}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:45 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:45 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000000}, 0x0)

05:16:45 executing program 1:
r0 = openat$apparmor_task_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=@profile={'stack ', '/proc/self/attr/current\x00'}, 0x1e)
write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="737461e36b207d0075d40972a4e087f62e83f9a9d679f902d54f12fcfc4f35d721650a682641ea40a317ff6d68b5602b4d8d9f3418994dd5de21a8495631adeca647f49eb6c1f9429d3609bc4fb78c30531294deab06e16577893cf0ec2b5bf8dd46c43b2ad86b4df9930e564948368cf743ce74b73a07a3ed4521526e2f0d8e07a8b17aed777f91015141bdc9913bd96f1cfb6c1ec2357ca15a058fc31ede266b50884871475e3bf31b9e71a9b92da46ab51b37913e38dd9719c6ca14f55ac0cbe2d0b1af"], 0x8)
openat$apparmor_task_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=@profile={'stack ', '/proc/self/attr/current\x00'}, 0x1e) (async)
write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="737461e36b207d0075d40972a4e087f62e83f9a9d679f902d54f12fcfc4f35d721650a682641ea40a317ff6d68b5602b4d8d9f3418994dd5de21a8495631adeca647f49eb6c1f9429d3609bc4fb78c30531294deab06e16577893cf0ec2b5bf8dd46c43b2ad86b4df9930e564948368cf743ce74b73a07a3ed4521526e2f0d8e07a8b17aed777f91015141bdc9913bd96f1cfb6c1ec2357ca15a058fc31ede266b50884871475e3bf31b9e71a9b92da46ab51b37913e38dd9719c6ca14f55ac0cbe2d0b1af"], 0x8) (async)

05:16:45 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x6}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:45 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:45 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:45 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, 0x0, &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:45 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:45 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3317.872631][ T3480] Bluetooth: hci2: command tx timeout
05:16:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x79e533f7}, 0x0)

05:16:46 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, 0x0, &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:46 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x0, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7e000000}, 0x0)

05:16:46 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x7}, &(0x7f0000000080), &(0x7f00000000c0))

[ 3318.263783][T22561] netdevsim netdevsim4 netdevsim0: renamed from eth0
05:16:46 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, 0x0, &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3318.319116][T22561] netdevsim netdevsim4 netdevsim1: renamed from eth1
05:16:46 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, 0x0, &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3318.387854][T22561] netdevsim netdevsim4 netdevsim2: renamed from eth2
05:16:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa9000000}, 0x0)

05:16:46 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x0, 0x0, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3318.475715][T22561] netdevsim netdevsim4 netdevsim3: renamed from eth3
05:16:46 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x0, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xaa000000}, 0x0)

05:16:46 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:46 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, 0x0, &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:47 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3318.941157][T22561] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3319.041235][T22561] 8021q: adding VLAN 0 to HW filter on device team0
[ 3319.091151][T26928] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3319.098392][T26928] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3319.169760][T21737] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3319.176959][T21737] bridge0: port 2(bridge_slave_1) entered forwarding state
05:16:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)

05:16:47 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:47 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:47 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x8}, &(0x7f0000000080), &(0x7f00000000c0))

[ 3319.466873][T22561] 8021q: adding VLAN 0 to HW filter on device batadv0
05:16:47 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, 0x0, &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf733e579}, 0x0)

[ 3319.667632][T22561] veth0_vlan: entered promiscuous mode
[ 3319.727663][T22561] veth1_vlan: entered promiscuous mode
05:16:47 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x9}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:47 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3319.889045][T22561] veth0_macvtap: entered promiscuous mode
05:16:48 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x2764, &(0x7f0000000080)={0x0, 0xcda, 0x8, 0x1, 0x37f, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:16:48 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, 0x0, &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3319.934901][T22561] veth1_macvtap: entered promiscuous mode
[ 3319.952710][ T3480] Bluetooth: hci2: command tx timeout
05:16:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

05:16:48 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x2764, &(0x7f0000000080)={0x0, 0xcda, 0x8, 0x1, 0x37f, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
syz_io_uring_setup(0x2764, &(0x7f0000000080)={0x0, 0xcda, 0x8, 0x1, 0x37f, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) (async)

[ 3320.075839][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3320.122719][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3320.152894][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
05:16:48 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xa}, &(0x7f0000000080), &(0x7f00000000c0))

[ 3320.172525][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3320.183195][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3320.206885][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
05:16:48 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3320.232066][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3320.257516][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3320.281275][T22561] batman_adv: batadv0: Interface activated: batadv_slave_0
05:16:48 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:48 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, 0x0, &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:48 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xe}, &(0x7f0000000080), &(0x7f00000000c0))

[ 3320.357210][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3320.430105][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3320.472118][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
05:16:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

[ 3320.513247][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3320.547627][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
05:16:48 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xe}, &(0x7f0000000080), &(0x7f00000000c0))

[ 3320.583633][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3320.614808][T22561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
05:16:48 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:48 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3320.649438][T22561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3320.689371][T22561] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3320.751912][T22561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3320.782015][T22561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3320.802847][T22561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3320.827067][T22561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
05:16:48 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:48 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6563, 0x40000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x6, 0x7, 0x6})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x2, 0x3, 0x0, r1})

05:16:48 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x10}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x0)

05:16:49 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6563, 0x40000) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x6, 0x7, 0x6})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x2, 0x3, 0x0, r1})

05:16:49 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3321.112249][ T5141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
05:16:49 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x15}, &(0x7f0000000080), &(0x7f00000000c0))

[ 3321.152593][ T5141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3321.188735][ T5141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
05:16:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x2)

[ 3321.223811][ T5141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
05:16:49 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000080), 0x0, 0x0)

05:16:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x6}, 0x0)

05:16:49 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x1daa, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x3)

05:16:49 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:49 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x7}, 0x0)

05:16:49 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x21}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x4)

05:16:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x8}, 0x0)

05:16:49 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, 0x0, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:49 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x0, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:49 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x22}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x5)

05:16:50 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080), 0x0, 0x0)

05:16:50 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x9}, 0x0)

05:16:50 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x23}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x6)

05:16:50 executing program 2:
r0 = syz_io_uring_setup(0x1d8c, &(0x7f0000000080)={0x0, 0x9670, 0x40, 0x3, 0x108}, &(0x7f0000000180), &(0x7f0000000140))
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x0, 0x0, r0}, 0x0, 0x0)

05:16:50 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, 0x0, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:50 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x0, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:50 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x0, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x7)

05:16:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xf}, 0x0)

05:16:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x8)

05:16:50 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x41}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:50 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, 0x0, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:50 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x0, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:50 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, 0x0, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:50 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x0, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x9)

05:16:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x34}, 0x0)

05:16:50 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0xf)

05:16:50 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:50 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:51 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, 0x0, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:51 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x0, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x2c)

05:16:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x60}, 0x0)

05:16:51 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x60)

05:16:51 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:51 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x42}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x8b}, 0x0)

05:16:51 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:51 executing program 4:
r0 = syz_io_uring_setup(0x1d8c, &(0x7f0000000080)={0x0, 0x9670, 0x40, 0x3, 0x108}, &(0x7f0000000180), &(0x7f0000000140))
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x0, 0x0, r0}, 0x0, 0x0)
syz_io_uring_setup(0x1d8c, &(0x7f0000000080)={0x0, 0x9670, 0x40, 0x3, 0x108}, &(0x7f0000000180), &(0x7f0000000140)) (async)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x0, 0x0, r0}, 0x0, 0x0) (async)

05:16:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x7e)

05:16:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x8c}, 0x0)

05:16:51 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x60}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:51 executing program 0:
r0 = syz_io_uring_complete(0x0)
syz_io_uring_setup(0x478f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, r0}, 0x0, 0x0)
syz_io_uring_setup(0x7bac, &(0x7f0000000000)={0x0, 0xce62, 0x8, 0x1, 0x2b8, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:16:51 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:51 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0x0, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:51 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0xa9)

05:16:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x300}, 0x0)

05:16:51 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x0, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:51 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x204}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0xaa)

05:16:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x300}, 0x0)

05:16:52 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x300)

05:16:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x500}, 0x0)

05:16:52 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x21e}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:52 executing program 0:
r0 = syz_io_uring_complete(0x0)
syz_io_uring_setup(0x478f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, r0}, 0x0, 0x0) (async)
syz_io_uring_setup(0x7bac, &(0x7f0000000000)={0x0, 0xce62, 0x8, 0x1, 0x2b8, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:16:52 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x0, 0x0, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:52 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa, 0x0, 0x3, 0x1ac}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x500)

05:16:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x600}, 0x0)

05:16:52 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x288}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:52 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x600)

05:16:52 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x700}, 0x0)

05:16:52 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x300}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x700)

05:16:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x900}, 0x0)

05:16:52 executing program 3:
syz_io_uring_setup(0x80000000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3ffffffe, 0x10}, 0x0, 0x0)

05:16:52 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, 0x0, &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:52 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:52 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:52 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x900)

05:16:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xf00}, 0x0)

05:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0xf00)

05:16:53 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, 0x0, &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:53 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:53 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, 0x0, &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x2000}, 0x0)

05:16:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x2c00)

05:16:53 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x340}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:53 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, 0x0, &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x235d}, 0x0)

05:16:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x4000)

05:16:53 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), 0x0, &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:53 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x6000)

05:16:53 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x34a}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x3400}, 0x0)

05:16:53 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x7e00)

05:16:53 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x402}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:53 executing program 2:
syz_io_uring_setup(0x80000000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3ffffffe, 0x10}, 0x0, 0x0)

05:16:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x4000}, 0x0)

05:16:53 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), 0x0, &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0xa900)

05:16:54 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x406}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:54 executing program 1:
r0 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0xc2800, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000000c0))
r1 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x5acb, &(0x7f0000000100)={0x0, 0x847e, 0x40, 0x0, 0x13, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0))

05:16:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x5d23}, 0x0)

05:16:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0xaa00)

05:16:54 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:54 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x500}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x6000}, 0x0)

05:16:54 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), 0x0, &(0x7f00000008c0))
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:54 executing program 0:
r0 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0xc2800, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000000c0))
r1 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x5acb, &(0x7f0000000100)={0x0, 0x847e, 0x40, 0x0, 0x13, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0))

05:16:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x30000)

05:16:54 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x600}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x8b00}, 0x0)

05:16:54 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x34000)

05:16:54 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x604}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:54 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x0, 0x0)

05:16:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x8c00}, 0x0)

05:16:54 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x400300)

05:16:54 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0xcdd4, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:54 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x0, 0x0)

05:16:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x30000}, 0x0)

05:16:54 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x700}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x1000000)

05:16:54 executing program 0:
r0 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[<r1=>0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x2, 0x1, 0x5, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000380)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x1, 0x7, 0x0, r1})
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)

05:16:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x34000}, 0x0)

05:16:54 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x900}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:55 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x2000000)

05:16:55 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, 0x0, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:55 executing program 3:
r0 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[<r1=>0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x2, 0x1, 0x5, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000380)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x1, 0x7, 0x0, r1}) (async)
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)

05:16:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x400300}, 0x0)

05:16:55 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xa00}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x3000000)

05:16:55 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, 0x0, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:55 executing program 1:
r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020)

05:16:55 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:55 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x1000000}, 0x0)

05:16:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x4000000)

05:16:55 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xe00}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x2000000}, 0x0)

05:16:55 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, 0x0, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:55 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x5000000)

05:16:55 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf00}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x3000000}, 0x0)

05:16:55 executing program 3:
r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) (async)
read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020)

05:16:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x6000000)

05:16:55 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x1500}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x4000000}, 0x0)

05:16:55 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:55 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, 0x0, &(0x7f0000000580), &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3327.801926][ T1240] ieee802154 phy0 wpan0: encryption failed: -22
[ 3327.808404][ T1240] ieee802154 phy1 wpan1: encryption failed: -22
05:16:55 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, 0x0, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:56 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000500)={0x0, 0x484, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:56 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, 0x0, &(0x7f0000000580), &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:56 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, 0x0, &(0x7f0000000580), &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:56 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:56 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x7000000)

05:16:56 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, 0x0, &(0x7f0000000580), &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x5000000}, 0x0)

05:16:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x8000000)

05:16:56 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x6000000}, 0x0)

05:16:56 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x0, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:56 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x1e02}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x9000000)

05:16:56 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x33ec, &(0x7f0000000180)={0x0, 0x717a, 0x100, 0x2, 0xb0, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x7fee, &(0x7f0000000380)={0x0, 0x7079, 0x100, 0x1, 0x3e4, 0x0, r0}, &(0x7f0000000400), &(0x7f0000000440))
syz_io_uring_setup(0x3e2b, &(0x7f0000000280)={0x0, 0xb08d, 0x400, 0x0, 0x16d, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340))
syz_io_uring_setup(0x6966, &(0x7f0000000080)={0x0, 0xe9d3, 0x200, 0x0, 0x3d1}, &(0x7f0000000100), &(0x7f0000000140))

05:16:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0xf000000)

05:16:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x7000000}, 0x0)

05:16:56 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x1f00}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:56 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x0, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:56 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x1, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:56 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:56 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x0, 0x20, 0x2, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x2c000000)

05:16:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x8000000}, 0x0)

05:16:57 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4, 0x0, 0x0, 0xc3}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x40000000)

05:16:57 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:57 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x2000}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x9000000}, 0x0)

05:16:57 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x33ec, &(0x7f0000000180)={0x0, 0x717a, 0x100, 0x2, 0xb0, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x7fee, &(0x7f0000000380)={0x0, 0x7079, 0x100, 0x1, 0x3e4, 0x0, r0}, &(0x7f0000000400), &(0x7f0000000440)) (async)
syz_io_uring_setup(0x3e2b, &(0x7f0000000280)={0x0, 0xb08d, 0x400, 0x0, 0x16d, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340)) (async)
syz_io_uring_setup(0x6966, &(0x7f0000000080)={0x0, 0xe9d3, 0x200, 0x0, 0x3d1}, &(0x7f0000000100), &(0x7f0000000140))

05:16:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x60000000)

05:16:57 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x2100}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:57 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xf000000}, 0x0)

05:16:57 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x79e533f7)

05:16:57 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x4055, &(0x7f0000000080)={0x0, 0xc6fa, 0x4, 0x0, 0xc4}, &(0x7f0000000100), &(0x7f0000000140))

05:16:57 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x2200}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x20000000}, 0x0)

05:16:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x7e000000)

05:16:57 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x4055, &(0x7f0000000080)={0x0, 0xc6fa, 0x4, 0x0, 0xc4}, &(0x7f0000000100), &(0x7f0000000140))

05:16:57 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:57 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, 0x0, &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:57 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0xa9000000)

05:16:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x34000000}, 0x0)

[ 3329.872692][T28510] Bluetooth: hci3: command 0x0406 tx timeout
05:16:58 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x2300}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0xaa000000)

05:16:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x40000000}, 0x0)

05:16:58 executing program 4:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x4dec, &(0x7f0000000080)={0x0, 0x605f, 0x200, 0x3, 0x324, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x9, &(0x7f0000000180)={0x0, 0x824a, 0x1000, 0x0, 0x3cd, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240))

05:16:58 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), 0x0, &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:58 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, 0x0, &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:58 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x2300}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0xf0ffffff)

05:16:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x5d230000}, 0x0)

05:16:58 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x4000}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0xf733e579)

05:16:58 executing program 4:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x4dec, &(0x7f0000000080)={0x0, 0x605f, 0x200, 0x3, 0x324, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x9, &(0x7f0000000180)={0x0, 0x824a, 0x1000, 0x0, 0x3cd, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
syz_io_uring_setup(0x4dec, &(0x7f0000000080)={0x0, 0x605f, 0x200, 0x3, 0x324, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_io_uring_setup(0x9, &(0x7f0000000180)={0x0, 0x824a, 0x1000, 0x0, 0x3cd, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240)) (async)

05:16:58 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x60000000}, 0x0)

05:16:58 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), 0x0, &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:58 executing program 1:
r0 = openat$udambuf(0xffffff9c, &(0x7f0000000080), 0x2)
r1 = memfd_create(&(0x7f00000000c0)='\x00', 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
r4 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x2802, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x8000000)
r6 = syz_io_uring_complete(r5)
read$FUSE(r6, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000002340)={0x78, 0xfffffffffffffffe, r7, {0x32c, 0x9, 0x0, {0x0, 0x7, 0x0, 0x2, 0x10001, 0x1ff, 0x2, 0xab, 0x3, 0x8000, 0xb1, r8, r9, 0x89c, 0x100}}}, 0x78)
write$FUSE_ATTR(r2, &(0x7f00000022c0)={0x78, 0x0, r3, {0x4, 0x8, 0x0, {0x1, 0xfffffffffffffffa, 0x8, 0x1, 0x6000000000, 0x3, 0x2, 0x3, 0x3ca4024a, 0x8000, 0x2c, 0xee00, r9, 0x101, 0x3f}}}, 0x78)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x8000000)
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4020013, r2, 0x8000000)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000001000010000000000100", @ANYRES32=r2, @ANYBLOB="00000000001000"/20])
r10 = openat$qrtrtun(0xffffff9c, &(0x7f0000000140), 0x800)
read$qrtrtun(r10, &(0x7f0000000180)=""/68, 0x44)
syz_io_uring_setup(0x3687, &(0x7f0000000200)={0x0, 0x0, 0x2000, 0x4, 0xffffffff, 0x0, r2}, 0x0, 0x0)

05:16:58 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, 0x0, &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:58 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0xffffff7f)

05:16:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x79c528f7}, 0x0)

05:16:58 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x4003}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:58 executing program 0:
r0 = openat$udambuf(0xffffff9c, &(0x7f0000000080), 0x2) (async)
r1 = memfd_create(&(0x7f00000000c0)='\x00', 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000280)={0x2020, 0x0, <r3=>0x0}, 0x2020) (async)
r4 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x2802, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x8000000)
r6 = syz_io_uring_complete(r5)
read$FUSE(r6, 0x0, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000002340)={0x78, 0xfffffffffffffffe, r7, {0x32c, 0x9, 0x0, {0x0, 0x7, 0x0, 0x2, 0x10001, 0x1ff, 0x2, 0xab, 0x3, 0x8000, 0xb1, r8, r9, 0x89c, 0x100}}}, 0x78) (async)
write$FUSE_ATTR(r2, &(0x7f00000022c0)={0x78, 0x0, r3, {0x4, 0x8, 0x0, {0x1, 0xfffffffffffffffa, 0x8, 0x1, 0x6000000000, 0x3, 0x2, 0x3, 0x3ca4024a, 0x8000, 0x2c, 0xee00, r9, 0x101, 0x3f}}}, 0x78) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x8000000) (async)
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4020013, r2, 0x8000000)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000001000010000000000100", @ANYRES32=r2, @ANYBLOB="00000000001000"/20]) (async)
r10 = openat$qrtrtun(0xffffff9c, &(0x7f0000000140), 0x800)
read$qrtrtun(r10, &(0x7f0000000180)=""/68, 0x44)
syz_io_uring_setup(0x3687, &(0x7f0000000200)={0x0, 0x0, 0x2000, 0x4, 0xffffffff, 0x0, r2}, 0x0, 0x0)

05:16:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0xfffffff0)

05:16:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x8b000000}, 0x0)

05:16:58 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:58 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, 0x0, &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:58 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x4100}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x8c000000}, 0x0)

05:16:58 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), 0x0, &(0x7f00000005c0))
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:59 executing program 0:
r0 = fanotify_init(0x0, 0x1000)
r1 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x40080, 0x10)
fanotify_mark(r0, 0x6d6, 0x8, r1, &(0x7f0000000040)='./file0\x00')
r2 = fanotify_init(0x10, 0x101000)
fanotify_mark(r2, 0x8, 0x0, r1, &(0x7f0000000300)='./file0\x00')
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x8000000)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2)
r4 = syz_io_uring_setup(0x5a1b, &(0x7f0000000100)={0x0, 0xce45, 0x0, 0x0, 0x188}, &(0x7f0000000180), &(0x7f00000001c0))
r5 = syz_io_uring_setup(0x59fa, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x2, 0x4, 0x0, r4}, 0x0, 0x0)
syz_io_uring_setup(0x38ec, &(0x7f0000000200)={0x0, 0xd6f0, 0x80, 0x2, 0x245, 0x0, r5}, &(0x7f0000000280), &(0x7f00000002c0))

05:16:59 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:59 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x4200}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xf0ffffff}, 0x0)

05:16:59 executing program 0:
r0 = fanotify_init(0x0, 0x1000)
r1 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x40080, 0x10)
fanotify_mark(r0, 0x6d6, 0x8, r1, &(0x7f0000000040)='./file0\x00')
r2 = fanotify_init(0x10, 0x101000)
fanotify_mark(r2, 0x8, 0x0, r1, &(0x7f0000000300)='./file0\x00')
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x8000000)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2)
r4 = syz_io_uring_setup(0x5a1b, &(0x7f0000000100)={0x0, 0xce45, 0x0, 0x0, 0x188}, &(0x7f0000000180), &(0x7f00000001c0))
r5 = syz_io_uring_setup(0x59fa, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x2, 0x4, 0x0, r4}, 0x0, 0x0)
syz_io_uring_setup(0x38ec, &(0x7f0000000200)={0x0, 0xd6f0, 0x80, 0x2, 0x245, 0x0, r5}, &(0x7f0000000280), &(0x7f00000002c0))
fanotify_init(0x0, 0x1000) (async)
openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x40080, 0x10) (async)
fanotify_mark(r0, 0x6d6, 0x8, r1, &(0x7f0000000040)='./file0\x00') (async)
fanotify_init(0x10, 0x101000) (async)
fanotify_mark(r2, 0x8, 0x0, r1, &(0x7f0000000300)='./file0\x00') (async)
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x8000000) (async)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) (async)
syz_io_uring_setup(0x5a1b, &(0x7f0000000100)={0x0, 0xce45, 0x0, 0x0, 0x188}, &(0x7f0000000180), &(0x7f00000001c0)) (async)
syz_io_uring_setup(0x59fa, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x2, 0x4, 0x0, r4}, 0x0, 0x0) (async)
syz_io_uring_setup(0x38ec, &(0x7f0000000200)={0x0, 0xd6f0, 0x80, 0x2, 0x245, 0x0, r5}, &(0x7f0000000280), &(0x7f00000002c0)) (async)

05:16:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xf728c579}, 0x0)

05:16:59 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x4a03}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:59 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:59 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0)

05:16:59 executing program 3:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x2802, 0x0)
write$FUSE_ATTR(r0, 0x0, 0x0)
syz_io_uring_setup(0x6532, &(0x7f0000000100)={0x0, 0xfffffffe, 0x60, 0xfffffffd}, 0x0, 0x0)

05:16:59 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xffffff7f}, 0x0)

05:16:59 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x6000}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0xfffffff0}, 0x0)

05:16:59 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x406}, 0x0, 0x0)

05:16:59 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:59 executing program 2:
openat$zero(0xffffff9c, &(0x7f0000000000), 0x2802, 0x0) (async)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x2802, 0x0)
write$FUSE_ATTR(r0, 0x0, 0x0)
syz_io_uring_setup(0x6532, &(0x7f0000000100)={0x0, 0xfffffffe, 0x60, 0xfffffffd}, 0x0, 0x0)

05:16:59 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x8802}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:59 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x604}, 0x0, 0x0)

05:16:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)

05:16:59 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000800)={0x0, 0xed7a, 0x800, 0x1, 0xa3, 0x0, r0}, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:16:59 executing program 3:
r0 = syz_io_uring_complete(0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, 0x0, 0x0)

05:16:59 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:16:59 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe00}, 0x0, 0x0)

05:16:59 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf0f5}, &(0x7f0000000080), &(0x7f00000000c0))

05:16:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0)

05:16:59 executing program 1:
r0 = syz_io_uring_complete(0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) (async)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, 0x0, 0x0)

05:16:59 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7f00}, 0x0, 0x0)

05:17:00 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x20000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:00 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:00 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x3}, 0x0)

05:17:00 executing program 4:
r0 = syz_io_uring_setup(0x2926, &(0x7f0000000000)={0x0, 0xd38e, 0x0, 0x1, 0xfdd}, &(0x7f0000000600), &(0x7f0000000640))
r1 = syz_io_uring_setup(0xeac, &(0x7f0000000580)={0x0, 0x40000, 0x80, 0x0, 0xfffffffe, 0x0, r0}, 0x0, 0x0)
r2 = syz_io_uring_setup(0x54b, &(0x7f0000000180)={0x0, 0x52e1, 0x8, 0x2, 0xa5}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x2609, &(0x7f0000000280)={0x0, 0xb692, 0x20, 0x1, 0x48, 0x0, r2}, &(0x7f0000000300), &(0x7f0000000340))
syz_io_uring_setup(0x799, &(0x7f0000000080)={0x0, 0x3329, 0x1000, 0x1, 0x271, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140))
r3 = syz_io_uring_setup(0x7590, &(0x7f0000000380)={0x0, 0x2033, 0x4, 0x0, 0x17d, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440))
syz_io_uring_setup(0x31b, &(0x7f0000000480)={0x0, 0x200d, 0x2000, 0x3, 0x90, 0x0, r3}, &(0x7f0000000500), &(0x7f0000000540))

05:17:00 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0)

05:17:00 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x100000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)

05:17:00 executing program 2:
r0 = syz_io_uring_setup(0x2926, &(0x7f0000000000)={0x0, 0xd38e, 0x0, 0x1, 0xfdd}, &(0x7f0000000600), &(0x7f0000000640))
r1 = syz_io_uring_setup(0xeac, &(0x7f0000000580)={0x0, 0x40000, 0x80, 0x0, 0xfffffffe, 0x0, r0}, 0x0, 0x0)
r2 = syz_io_uring_setup(0x54b, &(0x7f0000000180)={0x0, 0x52e1, 0x8, 0x2, 0xa5}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x2609, &(0x7f0000000280)={0x0, 0xb692, 0x20, 0x1, 0x48, 0x0, r2}, &(0x7f0000000300), &(0x7f0000000340))
syz_io_uring_setup(0x799, &(0x7f0000000080)={0x0, 0x3329, 0x1000, 0x1, 0x271, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)) (async)
r3 = syz_io_uring_setup(0x7590, &(0x7f0000000380)={0x0, 0x2033, 0x4, 0x0, 0x17d, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440))
syz_io_uring_setup(0x31b, &(0x7f0000000480)={0x0, 0x200d, 0x2000, 0x3, 0x90, 0x0, r3}, &(0x7f0000000500), &(0x7f0000000540))

05:17:00 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, 0x0, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:00 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)

05:17:00 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:00 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0)

05:17:00 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x200000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x6}, 0x0)

05:17:00 executing program 3:
r0 = openat$cuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0xa, 0x4, 0x8})
r1 = syz_io_uring_setup(0x213c, &(0x7f0000002240)={0x0, 0xa2b5, 0xc2, 0x3, 0x2ba}, &(0x7f00000022c0), &(0x7f0000002300))
r2 = openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000002180)={0x2020}, 0xfffffd34)
syz_io_uring_setup(0xfffffffe, &(0x7f0000000000)={0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, r1}, 0x0, 0x0)

05:17:00 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, 0x0, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x7}, 0x0)

05:17:00 executing program 1:
r0 = openat$cuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0xa, 0x4, 0x8})
r1 = syz_io_uring_setup(0x213c, &(0x7f0000002240)={0x0, 0xa2b5, 0xc2, 0x3, 0x2ba}, &(0x7f00000022c0), &(0x7f0000002300))
r2 = openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000002180)={0x2020}, 0xfffffd34)
syz_io_uring_setup(0xfffffffe, &(0x7f0000000000)={0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, r1}, 0x0, 0x0)
openat$cuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0xa, 0x4, 0x8}) (async)
syz_io_uring_setup(0x213c, &(0x7f0000002240)={0x0, 0xa2b5, 0xc2, 0x3, 0x2ba}, &(0x7f00000022c0), &(0x7f0000002300)) (async)
openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) (async)
read$FUSE(r2, &(0x7f0000002180)={0x2020}, 0xfffffd34) (async)
syz_io_uring_setup(0xfffffffe, &(0x7f0000000000)={0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) (async)

05:17:00 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x400000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:00 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, 0x0, &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:00 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xf0ff1f}, 0x0, 0x0)

05:17:00 executing program 3:
r0 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$cuse(0xffffff9c, &(0x7f0000002100), 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_ATTR(r1, &(0x7f0000002340)={0x78, 0xfffffffffffffffe, r2, {0x32c, 0x9, 0x0, {0x0, 0x7, 0x0, 0x2, 0x10001, 0x1ff, 0x2, 0xab, 0x3, 0x8000, 0xb1, r3, r4, 0x89c, 0x100}}}, 0x78)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
r7 = openat$cuse(0xffffff9c, &(0x7f0000002100), 0x2, 0x0)
read$FUSE(r7, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
r9 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r10 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000002040))
read$FUSE(r9, &(0x7f0000004140)={0x2020, 0x0, 0x0, <r11=>0x0, <r12=>0x0}, 0x2020)
read$FUSE(r7, &(0x7f000000a200)={0x2020, 0x0, 0x0, <r13=>0x0}, 0x2020)
write$FUSE_ATTR(r7, &(0x7f0000002440)={0x78, 0x0, 0x0, {0x45, 0xffff, 0x0, {0x2, 0x100, 0xa6, 0x6, 0x6, 0x8000000000000002, 0x5ab, 0x0, 0x5, 0x6000, 0x900, r13, r12, 0x3}}}, 0x78)
write$FUSE_ATTR(r0, &(0x7f0000002100)={0x78, 0x0, r2, {0x59ab, 0x9, 0x0, {0x1, 0x100000000, 0x400, 0x4, 0x8, 0x0, 0xffff, 0x8, 0x0, 0xc000, 0x9, r6, r12, 0x5, 0x5a9}}}, 0x78)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000002200)={0x4000001c})
write$FUSE_ATTR(r7, &(0x7f0000002240)={0x78, 0xfffffffffffffffe, r5, {0xc, 0x3ff, 0x0, {0x3, 0x5, 0x3, 0xffffffffffff0001, 0x8, 0x3ff, 0x5, 0xfffffffd, 0x7fffffff, 0x6000, 0x8001, r11, r8, 0x3bc05c7e, 0x2}}}, 0x78)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x4}, 0x0, 0x0)

05:17:00 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0)

05:17:01 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x600000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:01 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, 0x0, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:01 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, 0x0, &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:01 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0)

05:17:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0)

05:17:01 executing program 0:
r0 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$cuse(0xffffff9c, &(0x7f0000002100), 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_ATTR(r1, &(0x7f0000002340)={0x78, 0xfffffffffffffffe, r2, {0x32c, 0x9, 0x0, {0x0, 0x7, 0x0, 0x2, 0x10001, 0x1ff, 0x2, 0xab, 0x3, 0x8000, 0xb1, r3, r4, 0x89c, 0x100}}}, 0x78)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) (async)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
r7 = openat$cuse(0xffffff9c, &(0x7f0000002100), 0x2, 0x0)
read$FUSE(r7, 0x0, 0x0) (async)
read$FUSE(r7, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
r9 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r10 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000002040))
read$FUSE(r9, &(0x7f0000004140)={0x2020}, 0x2020) (async)
read$FUSE(r9, &(0x7f0000004140)={0x2020, 0x0, 0x0, <r11=>0x0, <r12=>0x0}, 0x2020)
read$FUSE(r7, &(0x7f000000a200)={0x2020, 0x0, 0x0, <r13=>0x0}, 0x2020)
write$FUSE_ATTR(r7, &(0x7f0000002440)={0x78, 0x0, 0x0, {0x45, 0xffff, 0x0, {0x2, 0x100, 0xa6, 0x6, 0x6, 0x8000000000000002, 0x5ab, 0x0, 0x5, 0x6000, 0x900, r13, r12, 0x3}}}, 0x78)
write$FUSE_ATTR(r0, &(0x7f0000002100)={0x78, 0x0, r2, {0x59ab, 0x9, 0x0, {0x1, 0x100000000, 0x400, 0x4, 0x8, 0x0, 0xffff, 0x8, 0x0, 0xc000, 0x9, r6, r12, 0x5, 0x5a9}}}, 0x78)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000002200)={0x4000001c}) (async)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000002200)={0x4000001c})
write$FUSE_ATTR(r7, &(0x7f0000002240)={0x78, 0xfffffffffffffffe, r5, {0xc, 0x3ff, 0x0, {0x3, 0x5, 0x3, 0xffffffffffff0001, 0x8, 0x3ff, 0x5, 0xfffffffd, 0x7fffffff, 0x6000, 0x8001, r11, r8, 0x3bc05c7e, 0x2}}}, 0x78)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x4}, 0x0, 0x0) (async)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x4}, 0x0, 0x0)

05:17:01 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0)

05:17:01 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x800000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xf}, 0x0)

05:17:01 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0)

05:17:01 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x80ffff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:01 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:01 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, 0x0, &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:01 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0)

05:17:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x34}, 0x0)

05:17:01 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x95c000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:01 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:01 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6040000}, 0x0, 0x0)

05:17:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x60}, 0x0)

05:17:01 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), 0x0)
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:01 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xc09500}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:01 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe000000}, 0x0, 0x0)

05:17:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8b}, 0x0)

05:17:01 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xc0ffff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:01 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:02 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), 0x0)
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:02 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1fffefff}, 0x0, 0x0)

05:17:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8c}, 0x0)

05:17:02 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x6abc, &(0x7f0000000080)={0x0, 0x3392, 0x4, 0x1, 0xbf, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:17:02 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xe05701}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:02 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), 0x0)
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:02 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:02 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1ffff000}, 0x0, 0x0)

05:17:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x300}, 0x0)

05:17:02 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x6abc, &(0x7f0000000080)={0x0, 0x3392, 0x4, 0x1, 0xbf, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_io_uring_setup(0x6abc, &(0x7f0000000080)={0x0, 0x3392, 0x4, 0x1, 0xbf, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:17:02 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf0bdf5}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x500}, 0x0)

05:17:02 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0)

05:17:02 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0)

05:17:02 executing program 4:
r0 = socket$caif_seqpacket(0x25, 0x5, 0x5)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f00000004c0)=0x2, 0x4)
r1 = openat$zero(0xffffff9c, &(0x7f0000000280), 0x48400, 0x0)
r2 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x10081, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3})
r4 = syz_io_uring_setup(0x6cdb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, r1}, 0x0, 0x0)
syz_io_uring_setup(0x2710, &(0x7f0000000080)={0x0, 0xf1dd, 0x100, 0x2, 0x256, 0x0, r4}, &(0x7f0000000100), &(0x7f0000000140))
r5 = syz_io_uring_setup(0x2800, &(0x7f00000002c0)={0x0, 0xd629, 0x1000, 0x1, 0x3a8}, &(0x7f0000000340), &(0x7f0000000380))
syz_io_uring_setup(0x185c, &(0x7f00000003c0)={0x0, 0x3202, 0x10, 0x3, 0x26f, 0x0, r5}, &(0x7f0000000440), &(0x7f0000000480))

05:17:02 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), 0x0, &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:02 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:02 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x700}, 0x0)

05:17:02 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf0ddf5}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:02 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:02 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), 0x0, &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:03 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x900}, 0x0)

05:17:03 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x1000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:03 executing program 1:
r0 = socket$caif_seqpacket(0x25, 0x5, 0x5)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f00000004c0)=0x2, 0x4) (async)
r1 = openat$zero(0xffffff9c, &(0x7f0000000280), 0x48400, 0x0) (async)
r2 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x10081, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3}) (async)
r4 = syz_io_uring_setup(0x6cdb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, r1}, 0x0, 0x0)
syz_io_uring_setup(0x2710, &(0x7f0000000080)={0x0, 0xf1dd, 0x100, 0x2, 0x256, 0x0, r4}, &(0x7f0000000100), &(0x7f0000000140)) (async)
r5 = syz_io_uring_setup(0x2800, &(0x7f00000002c0)={0x0, 0xd629, 0x1000, 0x1, 0x3a8}, &(0x7f0000000340), &(0x7f0000000380))
syz_io_uring_setup(0x185c, &(0x7f00000003c0)={0x0, 0x3202, 0x10, 0x3, 0x26f, 0x0, r5}, &(0x7f0000000440), &(0x7f0000000480))

05:17:03 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x316d27f7}, 0x0, 0x0)

05:17:03 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:03 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), 0x0, &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xf00}, 0x0)

05:17:03 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x157e000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:03 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7f000000}, 0x0, 0x0)

05:17:03 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000080)={0x0, 0x22d4, 0x2000, 0x0, 0x3a9, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x4cd, &(0x7f0000000180)={0x0, 0x22b8, 0x0, 0x1, 0x1ad, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240))

05:17:03 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, 0x0, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0)

05:17:03 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x2000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:03 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8805e6f5}, 0x0, 0x0)

05:17:03 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:03 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), 0x0, &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x235d}, 0x0)

05:17:03 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000080)={0x0, 0x22d4, 0x2000, 0x0, 0x3a9, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x4cd, &(0x7f0000000180)={0x0, 0x22b8, 0x0, 0x1, 0x1ad, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240)) (async)
syz_io_uring_setup(0x4cd, &(0x7f0000000180)={0x0, 0x22b8, 0x0, 0x1, 0x1ad, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240))

05:17:03 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x2040000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:03 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, 0x0, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x3400}, 0x0)

05:17:03 executing program 0:
syz_io_uring_setup(0x72a9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0)

05:17:03 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe07427f7}, 0x0, 0x0)

05:17:03 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x2040000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:04 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:04 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x3000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:04 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

05:17:04 executing program 1:
syz_io_uring_setup(0x72a9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0)

05:17:04 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, 0x0, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:04 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xf5e60588}, 0x0, 0x0)

05:17:04 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x4000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x5d23}, 0x0)

05:17:04 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x698b, &(0x7f0000000380)={0x0, 0x728a, 0x200, 0x3, 0x256}, &(0x7f0000000400), &(0x7f0000000440))
r1 = syz_io_uring_setup(0x33e2, &(0x7f0000000180)={0x0, 0x100, 0x2000, 0x0, 0x15d, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000480))
syz_io_uring_setup(0x7137, &(0x7f0000000280)={0x0, 0x43ea, 0x8, 0x0, 0xe, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340))
syz_io_uring_setup(0x36fe, &(0x7f0000000080)={0x0, 0x3561, 0x400, 0x3, 0x331}, &(0x7f0000000100), &(0x7f0000000140))

05:17:04 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xf6a61fff}, 0x0, 0x0)

05:17:04 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x6000}, 0x0)

05:17:04 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:04 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, 0x0, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:04 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, 0x0, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:04 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x5000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8b00}, 0x0)

05:17:04 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:04 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:04 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x6000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:04 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8c00}, 0x0)

05:17:04 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:04 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x698b, &(0x7f0000000380)={0x0, 0x728a, 0x200, 0x3, 0x256}, &(0x7f0000000400), &(0x7f0000000440))
r1 = syz_io_uring_setup(0x33e2, &(0x7f0000000180)={0x0, 0x100, 0x2000, 0x0, 0x15d, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000480))
syz_io_uring_setup(0x7137, &(0x7f0000000280)={0x0, 0x43ea, 0x8, 0x0, 0xe, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340))
syz_io_uring_setup(0x36fe, &(0x7f0000000080)={0x0, 0x3561, 0x400, 0x3, 0x331}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
syz_io_uring_setup(0x698b, &(0x7f0000000380)={0x0, 0x728a, 0x200, 0x3, 0x256}, &(0x7f0000000400), &(0x7f0000000440)) (async)
syz_io_uring_setup(0x33e2, &(0x7f0000000180)={0x0, 0x100, 0x2000, 0x0, 0x15d, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000480)) (async)
syz_io_uring_setup(0x7137, &(0x7f0000000280)={0x0, 0x43ea, 0x8, 0x0, 0xe, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340)) (async)
syz_io_uring_setup(0x36fe, &(0x7f0000000080)={0x0, 0x3561, 0x400, 0x3, 0x331}, &(0x7f0000000100), &(0x7f0000000140)) (async)

05:17:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x30000}, 0x0)

05:17:04 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x6040000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:04 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, 0x0, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:05 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xf7276d31}, 0x0, 0x0)

05:17:05 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:05 executing program 1:
r0 = openat$snapshot(0xffffff9c, &(0x7f00000000c0), 0x103000, 0x0)
read$snapshot(r0, &(0x7f0000000100)=""/39, 0x27)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000140))
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x800002)
syz_io_uring_setup(0x5c37, &(0x7f0000000000), 0x0, 0x0)

05:17:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x34000}, 0x0)

05:17:05 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x7000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:05 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xf72774e0}, 0x0, 0x0)

05:17:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x400300}, 0x0)

05:17:05 executing program 3:
r0 = openat$snapshot(0xffffff9c, &(0x7f00000000c0), 0x103000, 0x0)
read$snapshot(r0, &(0x7f0000000100)=""/39, 0x27) (async)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000140)) (async)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x800002) (async)
syz_io_uring_setup(0x5c37, &(0x7f0000000000), 0x0, 0x0)

05:17:05 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, 0x0, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:05 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x0, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:05 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:05 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x8000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

05:17:05 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, 0x0, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:05 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x9000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:05 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_io_uring_setup(0x7997, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000)
syz_io_uring_setup(0x32d5, &(0x7f0000000180)={0x0, 0x7d3, 0x940, 0x2, 0x29c}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x4a76, &(0x7f0000000080)={0x0, 0x9330, 0x80, 0x2, 0x293, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:17:05 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x0, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:05 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x0, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:05 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x0, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

05:17:05 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:05 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_io_uring_setup(0x7997, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000)
syz_io_uring_setup(0x32d5, &(0x7f0000000180)={0x0, 0x7d3, 0x940, 0x2, 0x29c}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x4a76, &(0x7f0000000080)={0x0, 0x9330, 0x80, 0x2, 0x293, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:17:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)

05:17:06 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xa000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:06 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x0, 0x3, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:06 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_io_uring_setup(0x7997, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000)
syz_io_uring_setup(0x32d5, &(0x7f0000000180)={0x0, 0x7d3, 0x940, 0x2, 0x29c}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x4a76, &(0x7f0000000080)={0x0, 0x9330, 0x80, 0x2, 0x293, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:17:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

05:17:06 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xe000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:06 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xff1fa6f6}, 0x0, 0x0)

05:17:06 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:06 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x4db6, &(0x7f0000000080)={0x0, 0x8d27, 0x888, 0x0, 0x1da}, &(0x7f0000000100), &(0x7f0000000140))

05:17:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x5000000}, 0x0)

05:17:06 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:06 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffefff1f}, 0x0, 0x0)

05:17:06 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x6000000}, 0x0)

05:17:06 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)

05:17:06 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
syz_io_uring_setup(0x4db6, &(0x7f0000000080)={0x0, 0x8d27, 0x888, 0x0, 0x1da}, &(0x7f0000000100), &(0x7f0000000140))

05:17:06 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:06 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)

05:17:06 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:06 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
r1 = syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1bd, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:06 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x10000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:06 executing program 0:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$cuse(0xffffff9c, &(0x7f0000003240), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xde, 0x7})
r2 = openat$zero(0xffffff9c, &(0x7f00000000c0), 0x44c0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff)
syz_io_uring_setup(0x84a8e, &(0x7f0000000000)={0x0, 0x10f5, 0x0, 0x0, 0xb2}, 0x0, 0x0)

05:17:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)

05:17:07 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:07 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x15000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:07 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:07 executing program 2:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$cuse(0xffffff9c, &(0x7f0000003240), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) (async)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xde, 0x7})
r2 = openat$zero(0xffffff9c, &(0x7f00000000c0), 0x44c0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async)
syz_io_uring_setup(0x84a8e, &(0x7f0000000000)={0x0, 0x10f5, 0x0, 0x0, 0xb2}, 0x0, 0x0)

05:17:07 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0)

05:17:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x9000000}, 0x0)

05:17:07 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x1e020000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:07 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0xa70, &(0x7f0000000180)={0x0, 0xdd4d, 0x2000, 0x0, 0x1e4, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x6ab5, &(0x7f0000000080)={0x0, 0xedd3, 0x4, 0x2, 0x217}, &(0x7f0000000100), &(0x7f0000000140))

05:17:07 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)

05:17:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xf000000}, 0x0)

05:17:07 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:07 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), 0x0, &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:07 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x1f000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:07 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0xa70, &(0x7f0000000180)={0x0, 0xdd4d, 0x2000, 0x0, 0x1e4, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240)) (async)
syz_io_uring_setup(0xa70, &(0x7f0000000180)={0x0, 0xdd4d, 0x2000, 0x0, 0x1e4, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x6ab5, &(0x7f0000000080)={0x0, 0xedd3, 0x4, 0x2, 0x217}, &(0x7f0000000100), &(0x7f0000000140))

05:17:07 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)

05:17:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

05:17:07 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x1fffefff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:07 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:07 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0)

05:17:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x58, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6fd, 0x42}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x9c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa263}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)

05:17:07 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), 0x0, &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:07 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x34000000}, 0x0)

05:17:07 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x1fffffff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:07 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0)

05:17:07 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x58, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6fd, 0x42}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x9c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa263}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)

05:17:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)

05:17:08 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:08 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:08 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x20000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000540))
ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000200)=0x7)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x1010, r1, 0x8000000)
r2 = openat$snapshot(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000001c0))
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x4800, &(0x7f0000000080)={0x0, 0x9a7a, 0x2248, 0x1, 0x279}, &(0x7f0000000100), &(0x7f0000000140))

05:17:08 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), 0x0, &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x5d230000}, 0x0)

05:17:08 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x20ffffff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:08 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, 0x0, &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000540))
ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000200)=0x7)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x1010, r1, 0x8000000)
r2 = openat$snapshot(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000001c0))
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x4800, &(0x7f0000000080)={0x0, 0x9a7a, 0x2248, 0x1, 0x279}, &(0x7f0000000100), &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000540)) (async)
ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000200)=0x7) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x1010, r1, 0x8000000) (async)
openat$snapshot(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0) (async)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000001c0)) (async)
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
syz_io_uring_setup(0x4800, &(0x7f0000000080)={0x0, 0x9a7a, 0x2248, 0x1, 0x279}, &(0x7f0000000100), &(0x7f0000000140)) (async)

05:17:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x60000000}, 0x0)

05:17:08 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:08 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x21000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:08 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0)

05:17:08 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, 0x0, &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:08 executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0)
ioctl$CEC_G_MODE(r0, 0x80046108, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000080))
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)

05:17:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x79c528f7}, 0x0)

05:17:08 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x21000fff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:08 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x406}, 0x0, 0x0)

05:17:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x79c528f7}, 0x0)

05:17:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8b000000}, 0x0)

05:17:08 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x22000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:08 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r1 = openat$zero(0xffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:08 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0)
ioctl$CEC_G_MODE(r0, 0x80046108, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000080)) (async)
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)

05:17:08 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x23000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:08 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x604}, 0x0, 0x0)

05:17:08 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, 0x0, &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:09 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, 0x0, &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8c000000}, 0x0)

05:17:09 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x4b, &(0x7f0000000180)={0x0, 0xc4da, 0x2, 0x1, 0x2ef, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x8e8, &(0x7f0000000380)={0x0, 0x33d3, 0x2000, 0x0, 0x31f}, &(0x7f0000000400), &(0x7f0000000440))
syz_io_uring_setup(0x1a04, &(0x7f0000000280)={0x0, 0x6d03, 0x40, 0x0, 0x2a1, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340))
syz_io_uring_setup(0x3d80, &(0x7f0000000080)={0x0, 0x9250, 0x4, 0x3, 0x386}, &(0x7f0000000100), &(0x7f0000000140))

05:17:09 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x2bc1ffff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:09 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r1 = openat$zero(0xffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:09 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:09 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, 0x0, &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:09 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x4b, &(0x7f0000000180)={0x0, 0xc4da, 0x2, 0x1, 0x2ef, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x8e8, &(0x7f0000000380)={0x0, 0x33d3, 0x2000, 0x0, 0x31f}, &(0x7f0000000400), &(0x7f0000000440))
syz_io_uring_setup(0x1a04, &(0x7f0000000280)={0x0, 0x6d03, 0x40, 0x0, 0x2a1, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340))
syz_io_uring_setup(0x3d80, &(0x7f0000000080)={0x0, 0x9250, 0x4, 0x3, 0x386}, &(0x7f0000000100), &(0x7f0000000140))

05:17:09 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)

05:17:09 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x40000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:09 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:09 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x4b, &(0x7f0000000180)={0x0, 0xc4da, 0x2, 0x1, 0x2ef, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x8e8, &(0x7f0000000380)={0x0, 0x33d3, 0x2000, 0x0, 0x31f}, &(0x7f0000000400), &(0x7f0000000440))
syz_io_uring_setup(0x1a04, &(0x7f0000000280)={0x0, 0x6d03, 0x40, 0x0, 0x2a1, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340))
syz_io_uring_setup(0x3d80, &(0x7f0000000080)={0x0, 0x9250, 0x4, 0x3, 0x386}, &(0x7f0000000100), &(0x7f0000000140))

05:17:09 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:09 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r1 = openat$zero(0xffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:09 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:09 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xf728c579}, 0x0)

05:17:09 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x4b, &(0x7f0000000180)={0x0, 0xc4da, 0x2, 0x1, 0x2ef, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x8e8, &(0x7f0000000380)={0x0, 0x33d3, 0x2000, 0x0, 0x31f}, &(0x7f0000000400), &(0x7f0000000440))
syz_io_uring_setup(0x1a04, &(0x7f0000000280)={0x0, 0x6d03, 0x40, 0x0, 0x2a1, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340))
syz_io_uring_setup(0x3d80, &(0x7f0000000080)={0x0, 0x9250, 0x4, 0x3, 0x386}, &(0x7f0000000100), &(0x7f0000000140))

05:17:09 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

05:17:09 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:09 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x40030000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

05:17:10 executing program 4:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x4b, &(0x7f0000000180)={0x0, 0xc4da, 0x2, 0x1, 0x2ef, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240))

05:17:10 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x4b, &(0x7f0000000180)={0x0, 0xc4da, 0x2, 0x1, 0x2ef, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x8e8, &(0x7f0000000380)={0x0, 0x33d3, 0x2000, 0x0, 0x31f}, &(0x7f0000000400), &(0x7f0000000440)) (async, rerun: 32)
syz_io_uring_setup(0x1a04, &(0x7f0000000280)={0x0, 0x6d03, 0x40, 0x0, 0x2a1, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340)) (async, rerun: 32)
syz_io_uring_setup(0x3d80, &(0x7f0000000080)={0x0, 0x9250, 0x4, 0x3, 0x386}, &(0x7f0000000100), &(0x7f0000000140))

05:17:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)

05:17:10 executing program 2:
syz_io_uring_setup(0x4b, &(0x7f0000000180)={0x0, 0xc4da, 0x2, 0x1, 0x2ef}, &(0x7f0000000200), &(0x7f0000000240))

05:17:10 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:10 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xc4da, 0x2, 0x1, 0x2ef}, &(0x7f0000000200), &(0x7f0000000240))

05:17:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x2)

05:17:10 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:10 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xc4da, 0x2, 0x1, 0x2ef}, &(0x7f0000000200), &(0x7f0000000240))

05:17:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x3)

05:17:10 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:10 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xc4da, 0x2, 0x1, 0x2ef}, &(0x7f0000000200), &(0x7f0000000240))

05:17:10 executing program 2:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_clone(0x40080000, &(0x7f0000000400)="7e595422d7a9a48cdc4054b0341a8dc494966dc7bfc64d1fb1999c0345cdf64b55bf994fba85f5431fe13463e5385a6d0b9a8b8d221e18cc06f828fe4da1619ab415a51491aeb99e313e78e203d57b0099f0f7eda61959d784c118afb7f7cedd08fcf3b13574c2f9cc981d431fb638915e244c8336", 0x75, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="20708bc40fa4e3e64da4e9926eebf7b464f9bd90f081ebe0565b80e9a6a57687a2cd6e277d9a13020b49ac6b8dd4570601924ef49f5e105cd5f29873463ea9ca4e1e112cffc0f055d0c061de52bee29526dbd25e3057db9dc097704d93ff352b10de56088f5ef55940049fce9ca43813772782f6df38cfe7227b540cf2f550e912f4a08740ee06c3230e04a4f11015e81bff474e48a2ba5512d04a4f8747fcfe5026edb08bd22e9aeb0fe3c94349ec4c79888c2d67cc3b56")
r2 = syz_clone(0x80080, &(0x7f00000005c0)='Q\f', 0x2, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="5352d135f6ec1d70cce0baa73ee73be490acdd4753961045a5de1db446840eca49a99af33c3f55fad4493044967faf9f37dcd77c21cc108362f2d99a17b94f13d452fb6d40a09d20568f4f35afc6b82b1b43d67af0d39bb473bee7b3290111b1f22c85df77bfd8429836b472c1bbc7410eea1226f0cdc15a65e02630ff87e91ceae298f858a602372860337f356e844ab64d770ce3c486ea25708b4fbb94c969237e2a4b6ebac64497dae85b89fa99bfb1c882add56d35cefa49b2ef93ee6fed689479ff67ba02a74a05d4cc7970696a17bdcf4add79f8ff22a7426a1b4771c11ae334a0458b2a3eee2b758f434e0cdc972edca26d")
r3 = openat$sw_sync(0xffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000780)=0x80000001)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000780)={r0, r3, 0x1f})
read$FUSE(r0, &(0x7f0000002840)={0x2020}, 0x2020)
getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x3985, &(0x7f0000000300)={0x0, 0x56bd, 0x8, 0x3, 0x2dc}, &(0x7f0000000380), &(0x7f00000003c0))
r4 = syz_io_uring_setup(0x6cbb, &(0x7f0000000080)={0x0, 0xf440, 0x2, 0x2, 0x78}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x6d69, &(0x7f0000000180)={0x0, 0xe012, 0x1, 0x2, 0x1ac, 0x0, r4}, &(0x7f0000000200), &(0x7f0000000240))

05:17:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x4)

05:17:10 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:11 executing program 1:
syz_io_uring_setup(0x4b, 0x0, &(0x7f0000000200), &(0x7f0000000240))

05:17:11 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:11 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3343.042882][T28510] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 3343.051874][T28510] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 3343.064067][T28510] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 3343.086777][T28510] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 3343.103038][T28510] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 3343.111060][T28510] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
05:17:11 executing program 1:
syz_io_uring_setup(0x4b, 0x0, &(0x7f0000000200), &(0x7f0000000240))

[ 3343.220503][T24002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
05:17:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x5)

05:17:11 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3343.354783][T24002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
05:17:11 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, 0x0, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:11 executing program 3:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_clone(0x40080000, &(0x7f0000000400)="7e595422d7a9a48cdc4054b0341a8dc494966dc7bfc64d1fb1999c0345cdf64b55bf994fba85f5431fe13463e5385a6d0b9a8b8d221e18cc06f828fe4da1619ab415a51491aeb99e313e78e203d57b0099f0f7eda61959d784c118afb7f7cedd08fcf3b13574c2f9cc981d431fb638915e244c8336", 0x75, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="20708bc40fa4e3e64da4e9926eebf7b464f9bd90f081ebe0565b80e9a6a57687a2cd6e277d9a13020b49ac6b8dd4570601924ef49f5e105cd5f29873463ea9ca4e1e112cffc0f055d0c061de52bee29526dbd25e3057db9dc097704d93ff352b10de56088f5ef55940049fce9ca43813772782f6df38cfe7227b540cf2f550e912f4a08740ee06c3230e04a4f11015e81bff474e48a2ba5512d04a4f8747fcfe5026edb08bd22e9aeb0fe3c94349ec4c79888c2d67cc3b56")
r2 = syz_clone(0x80080, &(0x7f00000005c0)='Q\f', 0x2, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="5352d135f6ec1d70cce0baa73ee73be490acdd4753961045a5de1db446840eca49a99af33c3f55fad4493044967faf9f37dcd77c21cc108362f2d99a17b94f13d452fb6d40a09d20568f4f35afc6b82b1b43d67af0d39bb473bee7b3290111b1f22c85df77bfd8429836b472c1bbc7410eea1226f0cdc15a65e02630ff87e91ceae298f858a602372860337f356e844ab64d770ce3c486ea25708b4fbb94c969237e2a4b6ebac64497dae85b89fa99bfb1c882add56d35cefa49b2ef93ee6fed689479ff67ba02a74a05d4cc7970696a17bdcf4add79f8ff22a7426a1b4771c11ae334a0458b2a3eee2b758f434e0cdc972edca26d")
r3 = openat$sw_sync(0xffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000780)=0x80000001)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000780)={r0, r3, 0x1f})
read$FUSE(r0, &(0x7f0000002840)={0x2020}, 0x2020)
getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x3985, &(0x7f0000000300)={0x0, 0x56bd, 0x8, 0x3, 0x2dc}, &(0x7f0000000380), &(0x7f00000003c0))
r4 = syz_io_uring_setup(0x6cbb, &(0x7f0000000080)={0x0, 0xf440, 0x2, 0x2, 0x78}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x6d69, &(0x7f0000000180)={0x0, 0xe012, 0x1, 0x2, 0x1ac, 0x0, r4}, &(0x7f0000000200), &(0x7f0000000240))

05:17:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x6)

[ 3343.467823][T24002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
05:17:11 executing program 4:
syz_io_uring_setup(0x4b, 0x0, &(0x7f0000000200), &(0x7f0000000240))

05:17:11 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x7)

05:17:11 executing program 4:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_clone(0x40080000, &(0x7f0000000400)="7e595422d7a9a48cdc4054b0341a8dc494966dc7bfc64d1fb1999c0345cdf64b55bf994fba85f5431fe13463e5385a6d0b9a8b8d221e18cc06f828fe4da1619ab415a51491aeb99e313e78e203d57b0099f0f7eda61959d784c118afb7f7cedd08fcf3b13574c2f9cc981d431fb638915e244c8336", 0x75, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="20708bc40fa4e3e64da4e9926eebf7b464f9bd90f081ebe0565b80e9a6a57687a2cd6e277d9a13020b49ac6b8dd4570601924ef49f5e105cd5f29873463ea9ca4e1e112cffc0f055d0c061de52bee29526dbd25e3057db9dc097704d93ff352b10de56088f5ef55940049fce9ca43813772782f6df38cfe7227b540cf2f550e912f4a08740ee06c3230e04a4f11015e81bff474e48a2ba5512d04a4f8747fcfe5026edb08bd22e9aeb0fe3c94349ec4c79888c2d67cc3b56")
r2 = syz_clone(0x80080, &(0x7f00000005c0)='Q\f', 0x2, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="5352d135f6ec1d70cce0baa73ee73be490acdd4753961045a5de1db446840eca49a99af33c3f55fad4493044967faf9f37dcd77c21cc108362f2d99a17b94f13d452fb6d40a09d20568f4f35afc6b82b1b43d67af0d39bb473bee7b3290111b1f22c85df77bfd8429836b472c1bbc7410eea1226f0cdc15a65e02630ff87e91ceae298f858a602372860337f356e844ab64d770ce3c486ea25708b4fbb94c969237e2a4b6ebac64497dae85b89fa99bfb1c882add56d35cefa49b2ef93ee6fed689479ff67ba02a74a05d4cc7970696a17bdcf4add79f8ff22a7426a1b4771c11ae334a0458b2a3eee2b758f434e0cdc972edca26d")
r3 = openat$sw_sync(0xffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000780)=0x80000001)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000780)={r0, r3, 0x1f})
read$FUSE(r0, &(0x7f0000002840)={0x2020}, 0x2020)
getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x3985, &(0x7f0000000300)={0x0, 0x56bd, 0x8, 0x3, 0x2dc}, &(0x7f0000000380), &(0x7f00000003c0))
r4 = syz_io_uring_setup(0x6cbb, &(0x7f0000000080)={0x0, 0xf440, 0x2, 0x2, 0x78}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x6d69, &(0x7f0000000180)={0x0, 0xe012, 0x1, 0x2, 0x1ac, 0x0, r4}, &(0x7f0000000200), &(0x7f0000000240))
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_clone(0x40080000, &(0x7f0000000400)="7e595422d7a9a48cdc4054b0341a8dc494966dc7bfc64d1fb1999c0345cdf64b55bf994fba85f5431fe13463e5385a6d0b9a8b8d221e18cc06f828fe4da1619ab415a51491aeb99e313e78e203d57b0099f0f7eda61959d784c118afb7f7cedd08fcf3b13574c2f9cc981d431fb638915e244c8336", 0x75, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="20708bc40fa4e3e64da4e9926eebf7b464f9bd90f081ebe0565b80e9a6a57687a2cd6e277d9a13020b49ac6b8dd4570601924ef49f5e105cd5f29873463ea9ca4e1e112cffc0f055d0c061de52bee29526dbd25e3057db9dc097704d93ff352b10de56088f5ef55940049fce9ca43813772782f6df38cfe7227b540cf2f550e912f4a08740ee06c3230e04a4f11015e81bff474e48a2ba5512d04a4f8747fcfe5026edb08bd22e9aeb0fe3c94349ec4c79888c2d67cc3b56") (async)
syz_clone(0x80080, &(0x7f00000005c0)='Q\f', 0x2, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="5352d135f6ec1d70cce0baa73ee73be490acdd4753961045a5de1db446840eca49a99af33c3f55fad4493044967faf9f37dcd77c21cc108362f2d99a17b94f13d452fb6d40a09d20568f4f35afc6b82b1b43d67af0d39bb473bee7b3290111b1f22c85df77bfd8429836b472c1bbc7410eea1226f0cdc15a65e02630ff87e91ceae298f858a602372860337f356e844ab64d770ce3c486ea25708b4fbb94c969237e2a4b6ebac64497dae85b89fa99bfb1c882add56d35cefa49b2ef93ee6fed689479ff67ba02a74a05d4cc7970696a17bdcf4add79f8ff22a7426a1b4771c11ae334a0458b2a3eee2b758f434e0cdc972edca26d") (async)
openat$sw_sync(0xffffff9c, &(0x7f0000000740), 0x0, 0x0) (async)
ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000780)=0x80000001) (async)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000780)={r0, r3, 0x1f}) (async)
read$FUSE(r0, &(0x7f0000002840)={0x2020}, 0x2020) (async)
getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async)
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
syz_io_uring_setup(0x3985, &(0x7f0000000300)={0x0, 0x56bd, 0x8, 0x3, 0x2dc}, &(0x7f0000000380), &(0x7f00000003c0)) (async)
syz_io_uring_setup(0x6cbb, &(0x7f0000000080)={0x0, 0xf440, 0x2, 0x2, 0x78}, &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_io_uring_setup(0x6d69, &(0x7f0000000180)={0x0, 0xe012, 0x1, 0x2, 0x1ac, 0x0, r4}, &(0x7f0000000200), &(0x7f0000000240)) (async)

[ 3343.677549][T24002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
05:17:11 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, 0x0, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:12 executing program 1:
syz_io_uring_setup(0x4b, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x1, 0x2ef}, &(0x7f0000000200), &(0x7f0000000240))

[ 3343.989673][T24262] chnl_net:caif_netlink_parms(): no params data found
05:17:12 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:12 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, 0x0, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:12 executing program 1:
syz_io_uring_setup(0x4b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x2ef}, &(0x7f0000000200), &(0x7f0000000240))

05:17:12 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:12 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x0, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:12 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:12 executing program 3:
syz_io_uring_setup(0x4b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2ef}, &(0x7f0000000200), &(0x7f0000000240))

05:17:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x8)

[ 3344.519549][T24002] bridge_slave_1: left allmulticast mode
[ 3344.551546][T24002] bridge_slave_1: left promiscuous mode
[ 3344.558293][T24002] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3344.572461][T24002] bridge_slave_0: left allmulticast mode
[ 3344.578236][T24002] bridge_slave_0: left promiscuous mode
[ 3344.584939][T24002] bridge0: port 1(bridge_slave_0) entered disabled state
05:17:12 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x0, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:12 executing program 1:
syz_io_uring_setup(0x4b, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240))

05:17:12 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3344.829652][T24002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3344.863491][T24002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
05:17:13 executing program 3:
syz_io_uring_setup(0x4b, &(0x7f0000000180), 0x0, &(0x7f0000000240))

05:17:13 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x0, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3344.895598][T24002] bond0 (unregistering): Released all slaves
05:17:13 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x0, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:13 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3345.082674][T24262] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3345.089832][T24262] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3345.134228][T24262] bridge_slave_0: entered allmulticast mode
[ 3345.152723][ T3480] Bluetooth: hci0: command tx timeout
[ 3345.154254][T24262] bridge_slave_0: entered promiscuous mode
05:17:13 executing program 1:
syz_io_uring_setup(0x4b, &(0x7f0000000180), 0x0, &(0x7f0000000240))

05:17:13 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x6e69, 0x0, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3345.308001][T24262] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3345.320636][T24262] bridge0: port 2(bridge_slave_1) entered disabled state
05:17:13 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:13 executing program 2:
syz_io_uring_setup(0x4b, &(0x7f0000000180), 0x0, &(0x7f0000000240))

[ 3345.366862][T24262] bridge_slave_1: entered allmulticast mode
[ 3345.388524][T24262] bridge_slave_1: entered promiscuous mode
05:17:13 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x0, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:13 executing program 3:
syz_io_uring_setup(0x4b, &(0x7f0000000180), &(0x7f0000000200), 0x0)

05:17:13 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x6e69, 0x0, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3345.746384][T24262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
05:17:13 executing program 1:
syz_io_uring_setup(0x4b, &(0x7f0000000180), &(0x7f0000000200), 0x0)

[ 3345.837489][T24262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
05:17:13 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:14 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x0, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3346.000803][T24002] hsr_slave_0: left promiscuous mode
[ 3346.027464][T24002] hsr_slave_1: left promiscuous mode
05:17:14 executing program 3:
syz_io_uring_setup(0x4b, &(0x7f0000000180), &(0x7f0000000200), 0x0)

[ 3346.057401][T24002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3346.082496][T24002] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3346.118390][T24002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3346.148224][T24002] batman_adv: batadv0: Removing interface: batadv_slave_1
05:17:14 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x6e69, 0x0, &(0x7f0000000b80), &(0x7f0000000bc0))

[ 3346.237493][T24002] veth1_macvtap: left promiscuous mode
[ 3346.270559][T24002] veth0_macvtap: left promiscuous mode
05:17:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x9)

[ 3346.302189][T24002] veth1_vlan: left promiscuous mode
[ 3346.317620][T24002] veth0_vlan: left promiscuous mode
05:17:14 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe00}, 0x0, 0x0)

[ 3346.788526][T24002] team0 (unregistering): Port device team_slave_1 removed
[ 3346.823122][T24002] team0 (unregistering): Port device team_slave_0 removed
[ 3347.020112][T24262] team0: Port device team_slave_0 added
[ 3347.050222][T24262] team0: Port device team_slave_1 added
[ 3347.128996][T24262] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3347.136096][T24262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3347.166559][T24262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3347.185076][T24262] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3347.192089][T24262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3347.218578][T24262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3347.235936][ T3480] Bluetooth: hci0: command tx timeout
[ 3347.330196][T24262] hsr_slave_0: entered promiscuous mode
[ 3347.341458][T24262] hsr_slave_1: entered promiscuous mode
[ 3347.350619][T24262] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3347.376754][T24262] Cannot create hsr debugfs directory
05:17:15 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0x0, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:15 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:15 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x0, 0x0, 0x1bd, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0xf)

05:17:15 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x200}, 0x0, 0x0)
syz_io_uring_setup(0x755c, &(0x7f0000000080)={0x0, 0x226b, 0x6, 0x2, 0x332, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:17:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x34)

05:17:15 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:15 executing program 4:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x200}, 0x0, 0x0)
syz_io_uring_setup(0x755c, &(0x7f0000000080)={0x0, 0x226b, 0x6, 0x2, 0x332, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:17:16 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:16 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7f00}, 0x0, 0x0)

05:17:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x60)

05:17:16 executing program 2:
r0 = epoll_create(0x8)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = epoll_create1(0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r3, r1, 0x7, r2, &(0x7f0000000140)={r0})
r4 = syz_clone(0x8001400, &(0x7f0000000080)="d3ab3a18086ffe766614a7d9e93b04d8af1002a4364cc9a67b7f201783ba8ce34bac70acd21d21382d0fde3550a95a35ea23ab61b5dc86dc0e31235c5a09ccdf6c2605e75fd9cf812f9536bdef7dac3c1b10f5fab38a0dd98a8aa12eaddba4efcd6405182844e93c3a746fcea003ca964df122c38cc0e6f83c5c3bf7b436ed9cd6c2d72953af0851c4ed689aab2ef4437f6f91c2e0a092992cf6d5708855adfb41db5c1450792362fc89889b6b69d04447b8579d170936dad986755ca6cafc154e1a59e315e51c185c4801a83aa20144fbc596532c0db727", 0xd8, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="d1c5c48715055933b77acf0a6e59f89bbc1365cde98bb4c9ca1bcbc2c8d6cccb76283b352e9f15f80c0fdc6edd65062c4e89a31bf4a0065ed4328f129f7ac1bd2b554648c304be20db869209db875b79b6c7427d2b46eb3494dd284cc0e955814e48bcc409472c466a576457df2691ed61dcecdc757184cfb6f7985fff2d")
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x4, 0x9, 0x0, 0x84880, <r5=>0xffffffffffffffff})
r6 = syz_clone(0xa00, &(0x7f00000003c0)="16dada3929ef33f6307956a6eba361459186f575137550fc5c5a45e2940e799e51ce3d33896d24dccae7b96bd9ea6d4bfb78562e7fc5acbfbcc3811acc7d44d8c336a78dc3497c5aa00b1e766bf8ec2de6d2368cc676a2eb1a9a54995e0e7e3d55282edc4ca4c5515065dcd7a0f8af3f497e2a19437dfd7f7ec46eaddd58ebfc011f47bc44e6f8f6bfb6a01591611a4b1eb1a5776e79cb7cc1ee49b371436f63e3be74a6889cc50b7e270a95733cbba91d81e563efb98380e6c7bc7b6942b6b32e71bbdde1805cb747738db037709efcacaf39a76a672f7fe26c99646e574a460134c2cb58143b2f40ab6b7c40e123473a37e5", 0xf3, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="d04debe298f4e3183132b55fac11ceec20e3266d2affd593abea02f055323bef59ca2d0f1373466966e8ceb5c1f5a34809f601052c3c01ea12f917ff9a287b81401697ea236ac8d4b5adc91c6934b768796937d075f7164c81106f6c1324f73a76bda649f642467cdaefb758f7017be26ff5f5a66e44d4f0feb9114625a21f851cd4e7baacc1f9a22dc8fabae7fe9735606d8abdf4672d2d5dd5058cdf9e4b5ea34de9023e1520952d3a20e664612ee6d98845ffdcf19d612091295806b77efb1d0e1281e3277135e9679e188afab82619131aac90eb8d2232a77cce30d3e0763cf388be4fb35528eea9f28a873567")
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0xc0189436, &(0x7f00000001c0)={'wlan0\x00'})
kcmp$KCMP_EPOLL_TFD(r1, r6, 0x7, r7, &(0x7f0000000640)={r0, r0, 0x3})
r8 = epoll_create1(0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x40046602, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r4, 0x7, r5, &(0x7f00000002c0)={r8, r9, 0x8})
r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06464ce, &(0x7f0000000340))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r10, &(0x7f0000000300)={0x8})
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)

05:17:16 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0)

05:17:16 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
r2 = syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:16 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x8b)

05:17:16 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xf0ff1f}, 0x0, 0x0)

05:17:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x8c)

[ 3348.650798][T24262] netdevsim netdevsim0 netdevsim0: renamed from eth0
05:17:16 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3348.715546][T24262] netdevsim netdevsim0 netdevsim1: renamed from eth1
05:17:16 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:16 executing program 1:
r0 = epoll_create(0x8)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = epoll_create1(0x0) (async)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r3, r1, 0x7, r2, &(0x7f0000000140)={r0})
r4 = syz_clone(0x8001400, &(0x7f0000000080)="d3ab3a18086ffe766614a7d9e93b04d8af1002a4364cc9a67b7f201783ba8ce34bac70acd21d21382d0fde3550a95a35ea23ab61b5dc86dc0e31235c5a09ccdf6c2605e75fd9cf812f9536bdef7dac3c1b10f5fab38a0dd98a8aa12eaddba4efcd6405182844e93c3a746fcea003ca964df122c38cc0e6f83c5c3bf7b436ed9cd6c2d72953af0851c4ed689aab2ef4437f6f91c2e0a092992cf6d5708855adfb41db5c1450792362fc89889b6b69d04447b8579d170936dad986755ca6cafc154e1a59e315e51c185c4801a83aa20144fbc596532c0db727", 0xd8, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="d1c5c48715055933b77acf0a6e59f89bbc1365cde98bb4c9ca1bcbc2c8d6cccb76283b352e9f15f80c0fdc6edd65062c4e89a31bf4a0065ed4328f129f7ac1bd2b554648c304be20db869209db875b79b6c7427d2b46eb3494dd284cc0e955814e48bcc409472c466a576457df2691ed61dcecdc757184cfb6f7985fff2d") (async)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x4, 0x9, 0x0, 0x84880, <r5=>0xffffffffffffffff}) (async)
r6 = syz_clone(0xa00, &(0x7f00000003c0)="16dada3929ef33f6307956a6eba361459186f575137550fc5c5a45e2940e799e51ce3d33896d24dccae7b96bd9ea6d4bfb78562e7fc5acbfbcc3811acc7d44d8c336a78dc3497c5aa00b1e766bf8ec2de6d2368cc676a2eb1a9a54995e0e7e3d55282edc4ca4c5515065dcd7a0f8af3f497e2a19437dfd7f7ec46eaddd58ebfc011f47bc44e6f8f6bfb6a01591611a4b1eb1a5776e79cb7cc1ee49b371436f63e3be74a6889cc50b7e270a95733cbba91d81e563efb98380e6c7bc7b6942b6b32e71bbdde1805cb747738db037709efcacaf39a76a672f7fe26c99646e574a460134c2cb58143b2f40ab6b7c40e123473a37e5", 0xf3, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="d04debe298f4e3183132b55fac11ceec20e3266d2affd593abea02f055323bef59ca2d0f1373466966e8ceb5c1f5a34809f601052c3c01ea12f917ff9a287b81401697ea236ac8d4b5adc91c6934b768796937d075f7164c81106f6c1324f73a76bda649f642467cdaefb758f7017be26ff5f5a66e44d4f0feb9114625a21f851cd4e7baacc1f9a22dc8fabae7fe9735606d8abdf4672d2d5dd5058cdf9e4b5ea34de9023e1520952d3a20e664612ee6d98845ffdcf19d612091295806b77efb1d0e1281e3277135e9679e188afab82619131aac90eb8d2232a77cce30d3e0763cf388be4fb35528eea9f28a873567") (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0xc0189436, &(0x7f00000001c0)={'wlan0\x00'})
kcmp$KCMP_EPOLL_TFD(r1, r6, 0x7, r7, &(0x7f0000000640)={r0, r0, 0x3}) (async)
r8 = epoll_create1(0x0) (async, rerun: 64)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x40046602, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r4, 0x7, r5, &(0x7f00000002c0)={r8, r9, 0x8}) (async, rerun: 32)
r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06464ce, &(0x7f0000000340))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r10, &(0x7f0000000300)={0x8}) (async)
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)

[ 3348.783005][T24262] netdevsim netdevsim0 netdevsim2: renamed from eth2
05:17:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x300)

[ 3348.834001][T24262] netdevsim netdevsim0 netdevsim3: renamed from eth3
05:17:17 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0)

05:17:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x500)

[ 3349.157080][T24262] 8021q: adding VLAN 0 to HW filter on device bond0
05:17:17 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3349.259483][T24262] 8021q: adding VLAN 0 to HW filter on device team0
[ 3349.309429][T22098] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3349.312507][ T3480] Bluetooth: hci0: command tx timeout
[ 3349.316633][T22098] bridge0: port 1(bridge_slave_0) entered forwarding state
05:17:17 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0)

05:17:17 executing program 4:
r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000340)={0x28, 0x3, r1, r2, 0x0, 0x0, 0x0, 0x8b, &(0x7f0000000280)="a0e122713158bf187e61b16336a64c79da71e1dea496af02def2c380edaf891c8f781de9f5f444d82dabc3b9f1c84656dfe6356187ea07cc5372fe022d6bf81077448aae1ac09d419645ac3476f08375b985fd48b15060d07bc0c04697e6c16ce4731a1bc4995c64d51c94977d673255602b11dcae354344e3f1624e682d0971d882711e54cb12288bfb66"})
r3 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x5a7d, &(0x7f0000000080)={0x0, 0x5985, 0x800, 0x3, 0x16a, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000140))

[ 3349.485426][T22098] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3349.492633][T22098] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3349.582372][T24262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
05:17:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x600)

[ 3349.642197][T24262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
05:17:17 executing program 2:
r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x80, 0x0) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}) (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000340)={0x28, 0x3, r1, r2, 0x0, 0x0, 0x0, 0x8b, &(0x7f0000000280)="a0e122713158bf187e61b16336a64c79da71e1dea496af02def2c380edaf891c8f781de9f5f444d82dabc3b9f1c84656dfe6356187ea07cc5372fe022d6bf81077448aae1ac09d419645ac3476f08375b985fd48b15060d07bc0c04697e6c16ce4731a1bc4995c64d51c94977d673255602b11dcae354344e3f1624e682d0971d882711e54cb12288bfb66"}) (async)
r3 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x5a7d, &(0x7f0000000080)={0x0, 0x5985, 0x800, 0x3, 0x16a, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000140))

05:17:17 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:17 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, 0x0, &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3349.855059][T24262] 8021q: adding VLAN 0 to HW filter on device batadv0
05:17:17 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0)

[ 3350.058255][T24262] veth0_vlan: entered promiscuous mode
05:17:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x700)

05:17:18 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00), &(0x7f0000000b80), &(0x7f0000000bc0))

05:17:18 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0)

[ 3350.153733][T24262] veth1_vlan: entered promiscuous mode
[ 3350.269677][T24262] veth0_macvtap: entered promiscuous mode
[ 3350.308662][T24262] veth1_macvtap: entered promiscuous mode
05:17:18 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x5c7c, &(0x7f0000000080)={0x0, 0x698, 0x4, 0x2, 0xa0, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:17:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x900)

[ 3350.422846][T24262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
05:17:18 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6040000}, 0x0, 0x0)

[ 3350.475036][T24262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3350.508775][T24262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
05:17:18 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00), 0x0, &(0x7f0000000bc0))

05:17:18 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, 0x0, &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3350.552455][T24262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3350.585502][T24262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
05:17:18 executing program 4:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x5c7c, &(0x7f0000000080)={0x0, 0x698, 0x4, 0x2, 0xa0, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
syz_io_uring_setup(0x5c7c, &(0x7f0000000080)={0x0, 0x698, 0x4, 0x2, 0xa0, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) (async)

[ 3350.632502][T24262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3350.642351][T24262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3350.728449][T24262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3350.764056][T24262] batman_adv: batadv0: Interface activated: batadv_slave_0
05:17:18 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe000000}, 0x0, 0x0)

05:17:19 executing program 2:
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, 0x0, 0xfffffffffffffeee)
read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x200, 0x3}, 0x0, 0x0)

[ 3350.894848][T24262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
05:17:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x900)

[ 3350.952512][T24262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3350.993622][T24262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3351.036459][T24262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3351.067354][T24262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
05:17:19 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, 0x0, &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

[ 3351.107635][T24262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3351.143343][T24262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
05:17:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0xf00)

[ 3351.179080][T24262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3351.214907][T24262] batman_adv: batadv0: Interface activated: batadv_slave_1
05:17:19 executing program 3:
prctl$PR_GET_NO_NEW_PRIVS(0x27) (async)
r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, 0x0, 0xfffffffffffffeee) (async)
read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) (async)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x200, 0x3}, 0x0, 0x0)

05:17:19 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1fffefff}, 0x0, 0x0)

[ 3351.254221][T24262] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3351.280423][T24262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3351.324790][T24262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3351.343098][T24262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
05:17:19 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00), 0x0, &(0x7f0000000bc0))

[ 3351.395413][ T3480] Bluetooth: hci0: command tx timeout
05:17:19 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:19 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, 0x0, &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x2000)

05:17:19 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00), 0x0, &(0x7f0000000bc0))

[ 3351.697559][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3351.726052][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
05:17:19 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00), 0x0, &(0x7f0000000bc0))

05:17:19 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00), &(0x7f0000000b80), 0x0)

[ 3352.041392][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
05:17:20 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:20 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00), 0x0, &(0x7f0000000bc0))

[ 3352.098664][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
05:17:20 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:20 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00), &(0x7f0000000b80), 0x0)

05:17:20 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x41000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:20 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00), &(0x7f0000000b80), 0x0)

05:17:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x235d)

05:17:20 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x42000000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:20 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:20 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:20 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00), &(0x7f0000000b80), 0x0)

05:17:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x3400)

05:17:20 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x4a030000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:20 executing program 1:
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x401}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x1000]}, 0x8})
r0 = mq_open(&(0x7f00000000c0)='\'[&\x00', 0x0, 0x3400798230114cb6, &(0x7f0000000100)={0xffff, 0x2, 0x2, 0x7ff})
mq_timedreceive(r0, &(0x7f00000001c0)=""/163, 0xa3, 0x10001, &(0x7f0000000280)={0x0, 0x989680})
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x1f0}, 0x0, 0x0)
mq_timedsend(r0, &(0x7f00000002c0)="d110cb5ee7", 0x5, 0xfc0e, &(0x7f0000000300)={0x77359400})

05:17:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x4000)

05:17:21 executing program 3:
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x401}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x1000]}, 0x8})
r0 = mq_open(&(0x7f00000000c0)='\'[&\x00', 0x0, 0x3400798230114cb6, &(0x7f0000000100)={0xffff, 0x2, 0x2, 0x7ff})
mq_timedreceive(r0, &(0x7f00000001c0)=""/163, 0xa3, 0x10001, &(0x7f0000000280)={0x0, 0x989680})
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x1f0}, 0x0, 0x0) (async)
mq_timedsend(r0, &(0x7f00000002c0)="d110cb5ee7", 0x5, 0xfc0e, &(0x7f0000000300)={0x77359400})

05:17:21 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:21 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:21 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000), &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x2585, &(0x7f0000000800), &(0x7f0000000880), 0x0)
syz_io_uring_setup(0x4e36, &(0x7f0000000500), &(0x7f0000000580), 0x0)
syz_io_uring_setup(0x3b92, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_io_uring_setup(0x5aa1, &(0x7f0000000300), &(0x7f0000000380), 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00), &(0x7f0000000b80), 0x0)

05:17:21 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x4c400fff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x5d23)

05:17:21 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x62f2, &(0x7f0000000380)={0x0, 0x7c38, 0x800, 0x2, 0x2f1, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440))
clock_gettime(0x0, &(0x7f00000005c0)={<r2=>0x0, <r3=>0x0})
epoll_pwait2(r1, &(0x7f0000000580)=[{}], 0x1, &(0x7f0000000600)={r2, r3+10000000}, &(0x7f0000000640)={[0xfff80000, 0xa99]}, 0x8)
read$FUSE(r1, &(0x7f0000002840)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_io_uring_setup(0x5c9b, &(0x7f0000000280)={0x0, 0xe5f3, 0x400, 0x0, 0x1cf, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000340))
write$FUSE_ATTR(r1, &(0x7f0000000480)={0x78, 0x0, r4, {0x4, 0x5, 0x0, {0x4, 0x9, 0x7, 0x2, 0x91e1, 0x5, 0x7, 0x2a0c, 0x80000001, 0x0, 0xc74, r5, r6, 0x9, 0x4}}}, 0x78)
r7 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r8 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000002040))
r9 = openat$cuse(0xffffff9c, &(0x7f0000002100), 0x2, 0x0)
read$FUSE(r9, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, <r10=>0x0, <r11=>0x0, <r12=>0x0}, 0x2020)
write$FUSE_ATTR(r9, &(0x7f0000002340)={0x78, 0xfffffffffffffffe, r10, {0x32c, 0x9, 0x0, {0x0, 0x7, 0x0, 0x2, 0x10001, 0x1ff, 0x2, 0xab, 0x3, 0x8000, 0xb1, r11, r12, 0x89c, 0x100}}}, 0x78)
r13 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r14 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000002040))
read$FUSE(r13, &(0x7f0000004140)={0x2020, 0x0, 0x0, 0x0, <r15=>0x0}, 0x2020)
read$FUSE(r9, &(0x7f000000a200)={0x2020, 0x0, 0x0, <r16=>0x0}, 0x2020)
write$FUSE_ATTR(r9, &(0x7f0000002440)={0x78, 0x0, 0x0, {0x45, 0xffff, 0x0, {0x2, 0x100, 0xa6, 0x6, 0x6, 0x8000000000000002, 0x5ab, 0x0, 0x5, 0x6000, 0x900, r16, r15, 0x3}}}, 0x78)
write$FUSE_ATTR(r7, &(0x7f0000000500)={0x78, 0xfffffffffffffffe, r4, {0x3, 0xb6, 0x0, {0x0, 0x3, 0x7f, 0xfc00000000000000, 0xfffffffffffff001, 0xe3, 0x8, 0x2, 0x557a, 0xa000, 0x2, r16, r6, 0x8000, 0x7}}}, 0x78)
r17 = syz_io_uring_setup(0x26bb, &(0x7f0000000080)={0x0, 0xc6a0, 0x40, 0x1, 0x270, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7, 0x8010, r17, 0x8000000)
syz_io_uring_setup(0x3274, &(0x7f0000000180)={0x0, 0x4afb, 0xa1b38f504ab9ac4, 0x0, 0x139, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240))

05:17:21 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x6000)

05:17:21 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x4c520fff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:21 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1ffff000}, 0x0, 0x0)

05:17:21 executing program 1:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)

05:17:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x8b00)

05:17:21 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x62f2, &(0x7f0000000380)={0x0, 0x7c38, 0x800, 0x2, 0x2f1, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440))
clock_gettime(0x0, &(0x7f00000005c0)={<r2=>0x0, <r3=>0x0})
epoll_pwait2(r1, &(0x7f0000000580)=[{}], 0x1, &(0x7f0000000600)={r2, r3+10000000}, &(0x7f0000000640)={[0xfff80000, 0xa99]}, 0x8)
read$FUSE(r1, &(0x7f0000002840)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_io_uring_setup(0x5c9b, &(0x7f0000000280)={0x0, 0xe5f3, 0x400, 0x0, 0x1cf, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000340))
write$FUSE_ATTR(r1, &(0x7f0000000480)={0x78, 0x0, r4, {0x4, 0x5, 0x0, {0x4, 0x9, 0x7, 0x2, 0x91e1, 0x5, 0x7, 0x2a0c, 0x80000001, 0x0, 0xc74, r5, r6, 0x9, 0x4}}}, 0x78)
r7 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r8 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000002040))
r9 = openat$cuse(0xffffff9c, &(0x7f0000002100), 0x2, 0x0)
read$FUSE(r9, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, <r10=>0x0, <r11=>0x0, <r12=>0x0}, 0x2020)
write$FUSE_ATTR(r9, &(0x7f0000002340)={0x78, 0xfffffffffffffffe, r10, {0x32c, 0x9, 0x0, {0x0, 0x7, 0x0, 0x2, 0x10001, 0x1ff, 0x2, 0xab, 0x3, 0x8000, 0xb1, r11, r12, 0x89c, 0x100}}}, 0x78)
r13 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r14 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000002040))
read$FUSE(r13, &(0x7f0000004140)={0x2020, 0x0, 0x0, 0x0, <r15=>0x0}, 0x2020)
read$FUSE(r9, &(0x7f000000a200)={0x2020, 0x0, 0x0, <r16=>0x0}, 0x2020)
write$FUSE_ATTR(r9, &(0x7f0000002440)={0x78, 0x0, 0x0, {0x45, 0xffff, 0x0, {0x2, 0x100, 0xa6, 0x6, 0x6, 0x8000000000000002, 0x5ab, 0x0, 0x5, 0x6000, 0x900, r16, r15, 0x3}}}, 0x78)
write$FUSE_ATTR(r7, &(0x7f0000000500)={0x78, 0xfffffffffffffffe, r4, {0x3, 0xb6, 0x0, {0x0, 0x3, 0x7f, 0xfc00000000000000, 0xfffffffffffff001, 0xe3, 0x8, 0x2, 0x557a, 0xa000, 0x2, r16, r6, 0x8000, 0x7}}}, 0x78)
r17 = syz_io_uring_setup(0x26bb, &(0x7f0000000080)={0x0, 0xc6a0, 0x40, 0x1, 0x270, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7, 0x8010, r17, 0x8000000)
syz_io_uring_setup(0x3274, &(0x7f0000000180)={0x0, 0x4afb, 0xa1b38f504ab9ac4, 0x0, 0x139, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240))

05:17:21 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x4c600fff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:21 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x8c00)

05:17:21 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x62f2, &(0x7f0000000380)={0x0, 0x7c38, 0x800, 0x2, 0x2f1, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440)) (async)
clock_gettime(0x0, &(0x7f00000005c0)={<r2=>0x0, <r3=>0x0})
epoll_pwait2(r1, &(0x7f0000000580)=[{}], 0x1, &(0x7f0000000600)={r2, r3+10000000}, &(0x7f0000000640)={[0xfff80000, 0xa99]}, 0x8) (async)
read$FUSE(r1, &(0x7f0000002840)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_io_uring_setup(0x5c9b, &(0x7f0000000280)={0x0, 0xe5f3, 0x400, 0x0, 0x1cf, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000340)) (async)
write$FUSE_ATTR(r1, &(0x7f0000000480)={0x78, 0x0, r4, {0x4, 0x5, 0x0, {0x4, 0x9, 0x7, 0x2, 0x91e1, 0x5, 0x7, 0x2a0c, 0x80000001, 0x0, 0xc74, r5, r6, 0x9, 0x4}}}, 0x78) (async)
r7 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r8 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000002040)) (async)
r9 = openat$cuse(0xffffff9c, &(0x7f0000002100), 0x2, 0x0)
read$FUSE(r9, 0x0, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, <r10=>0x0, <r11=>0x0, <r12=>0x0}, 0x2020)
write$FUSE_ATTR(r9, &(0x7f0000002340)={0x78, 0xfffffffffffffffe, r10, {0x32c, 0x9, 0x0, {0x0, 0x7, 0x0, 0x2, 0x10001, 0x1ff, 0x2, 0xab, 0x3, 0x8000, 0xb1, r11, r12, 0x89c, 0x100}}}, 0x78) (async)
r13 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r14 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000002040))
read$FUSE(r13, &(0x7f0000004140)={0x2020, 0x0, 0x0, 0x0, <r15=>0x0}, 0x2020) (async)
read$FUSE(r9, &(0x7f000000a200)={0x2020, 0x0, 0x0, <r16=>0x0}, 0x2020)
write$FUSE_ATTR(r9, &(0x7f0000002440)={0x78, 0x0, 0x0, {0x45, 0xffff, 0x0, {0x2, 0x100, 0xa6, 0x6, 0x6, 0x8000000000000002, 0x5ab, 0x0, 0x5, 0x6000, 0x900, r16, r15, 0x3}}}, 0x78) (async)
write$FUSE_ATTR(r7, &(0x7f0000000500)={0x78, 0xfffffffffffffffe, r4, {0x3, 0xb6, 0x0, {0x0, 0x3, 0x7f, 0xfc00000000000000, 0xfffffffffffff001, 0xe3, 0x8, 0x2, 0x557a, 0xa000, 0x2, r16, r6, 0x8000, 0x7}}}, 0x78) (async)
r17 = syz_io_uring_setup(0x26bb, &(0x7f0000000080)={0x0, 0xc6a0, 0x40, 0x1, 0x270, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7, 0x8010, r17, 0x8000000)
syz_io_uring_setup(0x3274, &(0x7f0000000180)={0x0, 0x4afb, 0xa1b38f504ab9ac4, 0x0, 0x139, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240))

05:17:21 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0)

05:17:22 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x4c7fffff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:22 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0xffffffffffffffe6)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x30000)

05:17:22 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x316d27f7}, 0x0, 0x0)

05:17:22 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:22 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x5673dfff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:22 executing program 4:
syz_io_uring_setup(0x20000000, &(0x7f0000000000)={0x0, 0x80, 0x2, 0x80000, 0x1af}, 0x0, 0x0)

05:17:22 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0xffffffffffffffe6)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0xffffffffffffffe6) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)

05:17:22 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7f000000}, 0x0, 0x0)

05:17:22 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x5675efff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:22 executing program 3:
syz_io_uring_setup(0x20000000, &(0x7f0000000000)={0x0, 0x80, 0x2, 0x80000, 0x1af}, 0x0, 0x0)

05:17:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x34000)

05:17:22 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000080)='0\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0x2)

05:17:22 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8805e6f5}, 0x0, 0x0)

05:17:22 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:22 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:22 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x796532f7}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x400300)

05:17:22 executing program 2:
prctl$PR_SET_TIMERSLACK(0x1d, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x5bb, &(0x7f0000000080)={0x0, 0xc85a, 0x2, 0x3, 0x54}, &(0x7f0000000100), &(0x7f0000000140))

05:17:22 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe07427f7}, 0x0, 0x0)

05:17:22 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x88020000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x1000000)

05:17:22 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:22 executing program 0:
prctl$PR_SET_TIMERSLACK(0x1d, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x5bb, &(0x7f0000000080)={0x0, 0xc85a, 0x2, 0x3, 0x54}, &(0x7f0000000100), &(0x7f0000000140))

05:17:22 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xf5e60588}, 0x0, 0x0)

05:17:22 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000080)='0\x00', 0x2) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0x2)

05:17:23 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf5bdefff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:23 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x42d, 0x400880)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, <r1=>0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x2, 0x5, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, <r2=>0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x8, 0x5, 0x6})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000280)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, <r6=>0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x2, 0xa})
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, <r9=>0x0], &(0x7f0000000540)=[0x0, 0x0], 0x1, 0x6, 0x4, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000600)=[<r10=>0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x8, 0x8})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={&(0x7f00000005c0)=[0x0, r1, r2, r5, r6, r8, r9], 0x7, 0x0, r10, 0x0, 0x200, 0xff, 0x3ff, {0xe3, 0x5, 0x3a, 0x8, 0x1, 0x5, 0x8001, 0x5, 0x36b2, 0x0, 0x8, 0x5, 0x6, 0xfffffffe, "14d1f2726a008a28a5373ef1475ad02be886d6ef134efadcc820bdf729003619"}})
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)

05:17:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x2000000)

05:17:23 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xf6a61fff}, 0x0, 0x0)

05:17:23 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:23 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='2\x00', 0x2)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2)

05:17:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x3000000)

05:17:23 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf5bdf000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:23 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xf7276d31}, 0x0, 0x0)

05:17:23 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x42d, 0x400880) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, <r1=>0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x2, 0x5, 0x4}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, <r2=>0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x8, 0x5, 0x6})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000280)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, <r6=>0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x2, 0xa})
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, <r9=>0x0], &(0x7f0000000540)=[0x0, 0x0], 0x1, 0x6, 0x4, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000600)=[<r10=>0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x8, 0x8})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={&(0x7f00000005c0)=[0x0, r1, r2, r5, r6, r8, r9], 0x7, 0x0, r10, 0x0, 0x200, 0xff, 0x3ff, {0xe3, 0x5, 0x3a, 0x8, 0x1, 0x5, 0x8001, 0x5, 0x36b2, 0x0, 0x8, 0x5, 0x6, 0xfffffffe, "14d1f2726a008a28a5373ef1475ad02be886d6ef134efadcc820bdf729003619"}}) (async)
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)

05:17:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x4000000)

05:17:23 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='2\x00', 0x2)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2)

05:17:23 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf5ddefff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:23 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xf72774e0}, 0x0, 0x0)

05:17:23 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x5000000)

05:17:23 executing program 2:
r0 = openat$sw_sync(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "dc49332f6ad6ed312536802bdd52d58fd9fb05fc0100f100", <r1=>0xffffffffffffffff})
r2 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000200)=0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)={0xf000000a})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x13, r2, 0x8000000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)={0xc0000008})
syz_io_uring_setup(0x2fd1, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x1, 0x2}, 0x0, 0x0)
epoll_pwait(r2, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xec4, &(0x7f00000001c0)={[0x20, 0xfff]}, 0x8)

05:17:23 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000300))
sched_rr_get_interval(r1, &(0x7f00000001c0))
r2 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r2, &(0x7f0000000080)='1\x00', 0x2)
write$yama_ptrace_scope(r2, 0x0, 0x0)
r3 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x1, 0x6, 0x1})

05:17:23 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff1fa6f6}, 0x0, 0x0)

05:17:23 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf5ddf000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x6000000)

05:17:23 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:23 executing program 3:
r0 = openat$sw_sync(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "dc49332f6ad6ed312536802bdd52d58fd9fb05fc0100f100", <r1=>0xffffffffffffffff})
r2 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000200)=0x9) (async)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)={0xf000000a})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x13, r2, 0x8000000) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)={0xc0000008}) (async)
syz_io_uring_setup(0x2fd1, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x1, 0x2}, 0x0, 0x0) (async)
epoll_pwait(r2, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xec4, &(0x7f00000001c0)={[0x20, 0xfff]}, 0x8)

05:17:23 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffefff1f}, 0x0, 0x0)

05:17:23 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000300))
sched_rr_get_interval(r1, &(0x7f00000001c0))
r2 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r2, &(0x7f0000000080)='1\x00', 0x2)
write$yama_ptrace_scope(r2, 0x0, 0x0)
r3 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x1, 0x6, 0x1})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000300)) (async)
sched_rr_get_interval(r1, &(0x7f00000001c0)) (async)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$yama_ptrace_scope(r2, &(0x7f0000000080)='1\x00', 0x2) (async)
write$yama_ptrace_scope(r2, 0x0, 0x0) (async)
openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x1, 0x6, 0x1}) (async)

05:17:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x7000000)

05:17:24 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf5efffff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:24 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
openat$zero(0xffffff9c, &(0x7f0000000180), 0x200000, 0x0)
syz_io_uring_setup(0x2c6c, &(0x7f0000000080)={0x0, 0xf9f2, 0x800, 0x0, 0x92, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:17:24 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:24 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='0\x00', 0x2)

05:17:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x8000000)

05:17:24 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf5f00000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:24 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
openat$zero(0xffffff9c, &(0x7f0000000180), 0x200000, 0x0)
syz_io_uring_setup(0x2c6c, &(0x7f0000000080)={0x0, 0xf9f2, 0x800, 0x0, 0x92, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
openat$zero(0xffffff9c, &(0x7f0000000180), 0x200000, 0x0) (async)
syz_io_uring_setup(0x2c6c, &(0x7f0000000080)={0x0, 0xf9f2, 0x800, 0x0, 0x92, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) (async)

05:17:24 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='0\x00', 0x2)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='0\x00', 0x2) (async)

05:17:24 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x0, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:24 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x9000000)

05:17:24 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf5f00fff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:24 executing program 2:
r0 = syz_clone(0x20200100, &(0x7f0000000080), 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="116f96bf8355b542ebb95bae2e4f44fa3a3199006defe29abfb8a2d3e6214923ddd6fef84f8dbbc79dd9df1fc7f977add6508383ee88715e07ddd90d2ad66ca11ca7171cb764")
ptrace$setsig(0x4203, r0, 0x2, &(0x7f00000001c0)={0xc, 0x100, 0x3})
ptrace$setsig(0x4203, r0, 0xc00f, &(0x7f0000000240)={0x39, 0x9, 0xffffffff})
r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1000, 0x4}, 0x0, 0x0)
ptrace$setsig(0x4203, r0, 0x1, &(0x7f00000002c0)={0x11, 0x5, 0x3})
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x2})

05:17:24 executing program 4:
getrusage(0x0, &(0x7f0000000080))
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2)
getrusage(0xffffffffffffffff, &(0x7f0000000200))
getrusage(0x0, &(0x7f0000000100))

05:17:24 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x0, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:24 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x0, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:24 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf5f20fff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0xf000000)

05:17:24 executing program 2:
getrusage(0x0, &(0x7f0000000080)) (async)
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2) (async)
getrusage(0xffffffffffffffff, &(0x7f0000000200)) (async)
getrusage(0x0, &(0x7f0000000100))

05:17:24 executing program 1:
r0 = syz_clone(0x20200100, &(0x7f0000000080), 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="116f96bf8355b542ebb95bae2e4f44fa3a3199006defe29abfb8a2d3e6214923ddd6fef84f8dbbc79dd9df1fc7f977add6508383ee88715e07ddd90d2ad66ca11ca7171cb764")
ptrace$setsig(0x4203, r0, 0x2, &(0x7f00000001c0)={0xc, 0x100, 0x3})
ptrace$setsig(0x4203, r0, 0xc00f, &(0x7f0000000240)={0x39, 0x9, 0xffffffff})
r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1000, 0x4}, 0x0, 0x0)
ptrace$setsig(0x4203, r0, 0x1, &(0x7f00000002c0)={0x11, 0x5, 0x3})
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x2})
syz_clone(0x20200100, &(0x7f0000000080), 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="116f96bf8355b542ebb95bae2e4f44fa3a3199006defe29abfb8a2d3e6214923ddd6fef84f8dbbc79dd9df1fc7f977add6508383ee88715e07ddd90d2ad66ca11ca7171cb764") (async)
ptrace$setsig(0x4203, r0, 0x2, &(0x7f00000001c0)={0xc, 0x100, 0x3}) (async)
ptrace$setsig(0x4203, r0, 0xc00f, &(0x7f0000000240)={0x39, 0x9, 0xffffffff}) (async)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1000, 0x4}, 0x0, 0x0) (async)
ptrace$setsig(0x4203, r0, 0x1, &(0x7f00000002c0)={0x11, 0x5, 0x3}) (async)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x2}) (async)

05:17:24 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf5f21fff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x20000000)

05:17:24 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x0, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x34000000)

05:17:24 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x2)

05:17:24 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf6721fff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:24 executing program 0:
r0 = syz_clone(0x2210000, &(0x7f0000000080)="f56dec43bf4c69dfe7a936346a442e7ba00b24d35bf343c30f4b0488faa5061c0cc9df84503780dd9878b680e406413d8c0848c4b73c796c0b50d458ae513a65c4294fc5a63dc1ffc04824dfb9d862e5c3d579eff9552daadd171a99347f929644a9b6618787f70cd8283594faba9da016bcc06ea3a11bb690af69928880d5f33af3c90bf633aa70fa9acab6f41f2530fbf6cf077d36831be06c4e0138c0309f73ac8cd27fffe86e29c3ae33128ab6ff13580d1d9c49cbb1", 0xb8, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)="b8943259065b40aaa7662ea608a2f57b3d5922d7c18b974822a36fdea8c0adb7d0d4e81a94b059bf0a0e901cc957fe0407bff71f951b32915b3c64f37e01685d0c8085970acc3dc2c758d02876b7e87c457ad21f090ce39462e9aaba5729974f39f14815c0db8834c48ee7dd78589520495abc20b5af")
sched_setattr(r0, &(0x7f0000000200)={0x38, 0x3, 0x2, 0x7fffffff, 0x0, 0xffff, 0x0, 0xfffffffffffffff8, 0x80000001, 0x3}, 0x0)
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r1, 0x0, 0x0)

05:17:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x40000000)

05:17:24 executing program 4:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x3ffd, &(0x7f0000000180)={0x0, 0x4f55, 0x80, 0x0, 0x115, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x4b66, &(0x7f0000000080)={0x0, 0x351c, 0x40, 0x2, 0x210, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:17:25 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x2)

05:17:25 executing program 2:
r0 = syz_clone(0x2210000, &(0x7f0000000080)="f56dec43bf4c69dfe7a936346a442e7ba00b24d35bf343c30f4b0488faa5061c0cc9df84503780dd9878b680e406413d8c0848c4b73c796c0b50d458ae513a65c4294fc5a63dc1ffc04824dfb9d862e5c3d579eff9552daadd171a99347f929644a9b6618787f70cd8283594faba9da016bcc06ea3a11bb690af69928880d5f33af3c90bf633aa70fa9acab6f41f2530fbf6cf077d36831be06c4e0138c0309f73ac8cd27fffe86e29c3ae33128ab6ff13580d1d9c49cbb1", 0xb8, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)="b8943259065b40aaa7662ea608a2f57b3d5922d7c18b974822a36fdea8c0adb7d0d4e81a94b059bf0a0e901cc957fe0407bff71f951b32915b3c64f37e01685d0c8085970acc3dc2c758d02876b7e87c457ad21f090ce39462e9aaba5729974f39f14815c0db8834c48ee7dd78589520495abc20b5af")
sched_setattr(r0, &(0x7f0000000200)={0x38, 0x3, 0x2, 0x7fffffff, 0x0, 0xffff, 0x0, 0xfffffffffffffff8, 0x80000001, 0x3}, 0x0)
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r1, 0x0, 0x0)

05:17:25 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf6921fff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:25 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, 0x0, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:25 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x3ffd, &(0x7f0000000180)={0x0, 0x4f55, 0x80, 0x0, 0x115, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240)) (async)
syz_io_uring_setup(0x4b66, &(0x7f0000000080)={0x0, 0x351c, 0x40, 0x2, 0x210, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:17:25 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x2)

05:17:25 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf6b21fff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x5d230000)

05:17:25 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x2)

05:17:25 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:25 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x9e19, 0x400, 0x1, 0x6}, 0x0, 0x0)

05:17:25 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, 0x0, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x60000000)

05:17:25 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)

05:17:25 executing program 4:
write$yama_ptrace_scope(0xffffffffffffffff, 0x0, 0x2)

05:17:25 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x9e19, 0x400, 0x1, 0x6}, 0x0, 0x0)

05:17:25 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf6d21fff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x79c528f7)

05:17:25 executing program 3:
write$yama_ptrace_scope(0xffffffffffffffff, 0x0, 0x2)

05:17:25 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, 0x0, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:25 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x8b000000)

05:17:25 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf7326579}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:25 executing program 1:
write$yama_ptrace_scope(0xffffffffffffffff, 0x0, 0x2)

05:17:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x402c582a, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
syz_io_uring_setup(0x72f3, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x90}, 0x0, 0x0)

05:17:26 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x8c000000)

05:17:26 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf7326579}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:26 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf747dfff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x402c582a, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) (async)
syz_io_uring_setup(0x72f3, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x90}, 0x0, 0x0)

05:17:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0xf0ffffff)

05:17:26 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0x0, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:26 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, 0x0, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:26 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, 0x0, 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x2)

05:17:26 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xf7485fff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x180}, 0x28800)
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)

05:17:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0xf728c579)

05:17:26 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, 0x0, 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x2)

05:17:26 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xfeffffff}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0xffffff7f)

05:17:26 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0x0, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:26 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x180}, 0x28800)
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)

05:17:26 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, 0x0, 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x2)

05:17:26 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xff0f0021}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0xfffffff0)

05:17:26 executing program 4:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(0xffffffffffffffff, 0x0, 0x2)

05:17:26 executing program 0:
r0 = syz_io_uring_setup(0x67a8, &(0x7f0000000080)={0x0, 0xcf27, 0x8, 0x2, 0x86}, &(0x7f0000000100), &(0x7f0000000140))
r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xc47d, 0x400, 0x200001, 0x1, 0x0, r0}, 0x0, 0x0)
syz_io_uring_setup(0x176e, &(0x7f0000000180)={0x0, 0xe5e5, 0x400, 0x3, 0x91, 0x0, r1}, &(0x7f0000000280), &(0x7f0000000240))

05:17:27 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xff0f404c}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:27 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:27 executing program 2:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(0xffffffffffffffff, 0x0, 0x2)

05:17:27 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0x0, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:27 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0x0, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:27 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xff0f524c}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:27 executing program 1:
r0 = syz_io_uring_setup(0x67a8, &(0x7f0000000080)={0x0, 0xcf27, 0x8, 0x2, 0x86}, &(0x7f0000000100), &(0x7f0000000140))
r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xc47d, 0x400, 0x200001, 0x1, 0x0, r0}, 0x0, 0x0)
syz_io_uring_setup(0x176e, &(0x7f0000000180)={0x0, 0xe5e5, 0x400, 0x3, 0x91, 0x0, r1}, &(0x7f0000000280), &(0x7f0000000240))

05:17:27 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:27 executing program 2:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(0xffffffffffffffff, 0x0, 0x2)

05:17:27 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='0\x00', 0x2)

05:17:27 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xff0f604c}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:27 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x0, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:27 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x4)

05:17:27 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='0\x00', 0x2)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='0\x00', 0x2) (async)

05:17:27 executing program 0:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, 0x0)
r1 = syz_io_uring_setup(0x19ec, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r0}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0))
r3 = syz_io_uring_setup(0x290d, &(0x7f0000000200)={0x0, 0x7bad, 0x8, 0x1, 0x34e}, &(0x7f00000000c0), &(0x7f0000000340))
r4 = syz_io_uring_setup(0x6125, &(0x7f00000002c0)={0x0, 0xc55e, 0x8, 0x0, 0x383, 0x0, r1}, &(0x7f00000003c0), &(0x7f0000000380))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0xc, 0x10, r4, 0x8000000)
read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
kcmp$KCMP_EPOLL_TFD(0x0, r5, 0x7, r4, &(0x7f0000000040)={r0, r3, 0x7})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x118, &(0x7f0000000080)=0xff, 0x0, 0x4)

05:17:27 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xff0ff0f5}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:27 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x3fffff)

05:17:27 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x267f, &(0x7f0000000080)={0x0, 0x10f5, 0x2, 0x3, 0x2cb, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x2d26, &(0x7f0000000180)={0x0, 0xfd26, 0x201, 0x3, 0x146, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240))

05:17:27 executing program 2:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0)
write$yama_ptrace_scope(0xffffffffffffffff, 0x0, 0x0)

05:17:27 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x0, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:27 executing program 4:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, 0x0) (async)
r1 = syz_io_uring_setup(0x19ec, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r0}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)) (async)
r3 = syz_io_uring_setup(0x290d, &(0x7f0000000200)={0x0, 0x7bad, 0x8, 0x1, 0x34e}, &(0x7f00000000c0), &(0x7f0000000340))
r4 = syz_io_uring_setup(0x6125, &(0x7f00000002c0)={0x0, 0xc55e, 0x8, 0x0, 0x383, 0x0, r1}, &(0x7f00000003c0), &(0x7f0000000380))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0xc, 0x10, r4, 0x8000000) (async, rerun: 32)
read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020) (rerun: 32)
kcmp$KCMP_EPOLL_TFD(0x0, r5, 0x7, r4, &(0x7f0000000040)={r0, r3, 0x7})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x118, &(0x7f0000000080)=0xff, 0x0, 0x4)

05:17:27 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xff0ff2f5}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:27 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x267f, &(0x7f0000000080)={0x0, 0x10f5, 0x2, 0x3, 0x2cb, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x2d26, &(0x7f0000000180)={0x0, 0xfd26, 0x201, 0x3, 0x146, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240))

05:17:27 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x267f, &(0x7f0000000080)={0x0, 0x10f5, 0x2, 0x3, 0x2cb, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x2d26, &(0x7f0000000180)={0x0, 0xfd26, 0x201, 0x3, 0x146, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240))

05:17:28 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xff1f72f6}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:28 executing program 4:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0)
write$yama_ptrace_scope(0xffffffffffffffff, 0x0, 0x0)

05:17:28 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x1000000)

05:17:28 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000180)=<r0=>0x0, &(0x7f00000001c0))
r1 = syz_io_uring_complete(r0)
r2 = syz_io_uring_setup(0x5824, &(0x7f0000000000)={0x0, 0x919, 0x40, 0x1, 0x77}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x115b, &(0x7f0000000200)={0x0, 0xeca9, 0x440, 0x3, 0x10d, 0x0, r1}, &(0x7f00000002c0), &(0x7f00000003c0))
syz_io_uring_setup(0x5c8e, &(0x7f0000000340)={0x0, 0xb7fa, 0x40, 0x0, 0x3c4, 0x0, r2}, &(0x7f0000000280), &(0x7f0000000300))

05:17:28 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x0, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:28 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x0, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:28 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x8305, 0x2, 0x40000000}, 0x0, 0x0)
r1 = syz_io_uring_setup(0x6ce7, &(0x7f0000000000)={0x0, 0xcef, 0x401, 0x1, 0x20c7}, &(0x7f0000000300), &(0x7f0000000340))
r2 = syz_io_uring_setup(0x4d47, &(0x7f0000000680)={0x0, 0xc60, 0x8, 0x2, 0x168, 0x0, r0}, &(0x7f0000000700), &(0x7f0000000740))
r3 = syz_io_uring_setup(0x65db, &(0x7f0000000180)={0x0, 0x93a, 0x0, 0x3, 0x10e, 0x0, r2}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x5880, &(0x7f0000000980)={0x0, 0x497d, 0x400, 0x0, 0x1c7, 0x0, r2}, &(0x7f0000000a00), &(0x7f0000000a40))
syz_io_uring_setup(0x408f, &(0x7f0000000380)={0x0, 0xc515, 0x800, 0x2, 0x1eb, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440))
syz_io_uring_setup(0x6bb9, &(0x7f0000000780)={0x0, 0x7c55, 0x800, 0x1, 0x379, 0x0, r2}, &(0x7f0000000800), &(0x7f0000000840))
syz_io_uring_setup(0x7e8d, &(0x7f0000000880)={0x0, 0xfa1f, 0x0, 0x0, 0x36f, 0x0, r3}, &(0x7f0000000900), &(0x7f0000000940))
syz_io_uring_setup(0x109, &(0x7f0000000080)={0x0, 0xd9d3, 0x80, 0x2, 0x1c5, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x2c5c, &(0x7f0000000480)={0x0, 0xea39, 0x4, 0x1, 0x1f9}, &(0x7f0000000500), &(0x7f0000000540))
syz_io_uring_setup(0x81b, &(0x7f0000000580)={0x0, 0x9d14, 0x1, 0x3, 0x133, 0x0, r1}, &(0x7f0000000600), &(0x7f0000000640))

05:17:28 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xff1f92f6}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:28 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000480)={r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x6, 0xa})

05:17:28 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xff1fb2f6}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:28 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x2000000)

05:17:28 executing program 4:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x8305, 0x2, 0x40000000}, 0x0, 0x0)
r1 = syz_io_uring_setup(0x6ce7, &(0x7f0000000000)={0x0, 0xcef, 0x401, 0x1, 0x20c7}, &(0x7f0000000300), &(0x7f0000000340))
r2 = syz_io_uring_setup(0x4d47, &(0x7f0000000680)={0x0, 0xc60, 0x8, 0x2, 0x168, 0x0, r0}, &(0x7f0000000700), &(0x7f0000000740))
r3 = syz_io_uring_setup(0x65db, &(0x7f0000000180)={0x0, 0x93a, 0x0, 0x3, 0x10e, 0x0, r2}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x5880, &(0x7f0000000980)={0x0, 0x497d, 0x400, 0x0, 0x1c7, 0x0, r2}, &(0x7f0000000a00), &(0x7f0000000a40))
syz_io_uring_setup(0x408f, &(0x7f0000000380)={0x0, 0xc515, 0x800, 0x2, 0x1eb, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440))
syz_io_uring_setup(0x6bb9, &(0x7f0000000780)={0x0, 0x7c55, 0x800, 0x1, 0x379, 0x0, r2}, &(0x7f0000000800), &(0x7f0000000840))
syz_io_uring_setup(0x7e8d, &(0x7f0000000880)={0x0, 0xfa1f, 0x0, 0x0, 0x36f, 0x0, r3}, &(0x7f0000000900), &(0x7f0000000940))
syz_io_uring_setup(0x109, &(0x7f0000000080)={0x0, 0xd9d3, 0x80, 0x2, 0x1c5, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x2c5c, &(0x7f0000000480)={0x0, 0xea39, 0x4, 0x1, 0x1f9}, &(0x7f0000000500), &(0x7f0000000540))
syz_io_uring_setup(0x81b, &(0x7f0000000580)={0x0, 0x9d14, 0x1, 0x3, 0x133, 0x0, r1}, &(0x7f0000000600), &(0x7f0000000640))

05:17:28 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000480)={r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x6, 0xa})

05:17:28 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x0, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:28 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xff1fd2f6}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:28 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x8305, 0x2, 0x40000000}, 0x0, 0x0)
r1 = syz_io_uring_setup(0x6ce7, &(0x7f0000000000)={0x0, 0xcef, 0x401, 0x1, 0x20c7}, &(0x7f0000000300), &(0x7f0000000340))
syz_io_uring_setup(0x4d47, &(0x7f0000000680)={0x0, 0xc60, 0x8, 0x2, 0x168, 0x0, r0}, &(0x7f0000000700), &(0x7f0000000740)) (async)
r2 = syz_io_uring_setup(0x4d47, &(0x7f0000000680)={0x0, 0xc60, 0x8, 0x2, 0x168, 0x0, r0}, &(0x7f0000000700), &(0x7f0000000740))
r3 = syz_io_uring_setup(0x65db, &(0x7f0000000180)={0x0, 0x93a, 0x0, 0x3, 0x10e, 0x0, r2}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x5880, &(0x7f0000000980)={0x0, 0x497d, 0x400, 0x0, 0x1c7, 0x0, r2}, &(0x7f0000000a00), &(0x7f0000000a40)) (async)
syz_io_uring_setup(0x5880, &(0x7f0000000980)={0x0, 0x497d, 0x400, 0x0, 0x1c7, 0x0, r2}, &(0x7f0000000a00), &(0x7f0000000a40))
syz_io_uring_setup(0x408f, &(0x7f0000000380)={0x0, 0xc515, 0x800, 0x2, 0x1eb, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440))
syz_io_uring_setup(0x6bb9, &(0x7f0000000780)={0x0, 0x7c55, 0x800, 0x1, 0x379, 0x0, r2}, &(0x7f0000000800), &(0x7f0000000840))
syz_io_uring_setup(0x7e8d, &(0x7f0000000880)={0x0, 0xfa1f, 0x0, 0x0, 0x36f, 0x0, r3}, &(0x7f0000000900), &(0x7f0000000940)) (async)
syz_io_uring_setup(0x7e8d, &(0x7f0000000880)={0x0, 0xfa1f, 0x0, 0x0, 0x36f, 0x0, r3}, &(0x7f0000000900), &(0x7f0000000940))
syz_io_uring_setup(0x109, &(0x7f0000000080)={0x0, 0xd9d3, 0x80, 0x2, 0x1c5, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x2c5c, &(0x7f0000000480)={0x0, 0xea39, 0x4, 0x1, 0x1f9}, &(0x7f0000000500), &(0x7f0000000540))
syz_io_uring_setup(0x81b, &(0x7f0000000580)={0x0, 0x9d14, 0x1, 0x3, 0x133, 0x0, r1}, &(0x7f0000000600), &(0x7f0000000640))

05:17:28 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000480)={r2}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x6, 0xa})

05:17:28 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x4000000)

05:17:28 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x0, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:28 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xff1ff2f5}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:28 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:28 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000180)=<r0=>0x0, &(0x7f00000001c0))
r1 = syz_io_uring_complete(r0)
r2 = syz_io_uring_setup(0x5824, &(0x7f0000000000)={0x0, 0x919, 0x40, 0x1, 0x77}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x115b, &(0x7f0000000200)={0x0, 0xeca9, 0x440, 0x3, 0x10d, 0x0, r1}, &(0x7f00000002c0), &(0x7f00000003c0))
syz_io_uring_setup(0x5c8e, &(0x7f0000000340)={0x0, 0xb7fa, 0x40, 0x0, 0x3c4, 0x0, r2}, &(0x7f0000000280), &(0x7f0000000300))
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000180), &(0x7f00000001c0)) (async)
syz_io_uring_complete(r0) (async)
syz_io_uring_setup(0x5824, &(0x7f0000000000)={0x0, 0x919, 0x40, 0x1, 0x77}, &(0x7f0000000080), &(0x7f00000000c0)) (async)
syz_io_uring_setup(0x115b, &(0x7f0000000200)={0x0, 0xeca9, 0x440, 0x3, 0x10d, 0x0, r1}, &(0x7f00000002c0), &(0x7f00000003c0)) (async)
syz_io_uring_setup(0x5c8e, &(0x7f0000000340)={0x0, 0xb7fa, 0x40, 0x0, 0x3c4, 0x0, r2}, &(0x7f0000000280), &(0x7f0000000300)) (async)

05:17:28 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xff5f48f7}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:28 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0xffff3f00)

05:17:28 executing program 4:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x3d88, &(0x7f0000000080)={0x0, 0x5df8, 0x200, 0x1, 0x36e}, &(0x7f0000000100), &(0x7f0000000140))
r2 = syz_io_uring_setup(0x61e8, &(0x7f0000000280)={0x0, 0xa2a1, 0x4, 0x6, 0x1c9, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340))
r3 = syz_io_uring_setup(0x456c, &(0x7f0000000380)={0x0, 0xc0ff, 0x2, 0x2, 0x39f, 0x0, r2}, &(0x7f0000000400), &(0x7f0000000440))
syz_io_uring_setup(0xb51, &(0x7f0000000580)={0x0, 0xfbd9, 0x4, 0x2, 0x123, 0x0, r0}, &(0x7f0000000600), &(0x7f0000000640))
syz_io_uring_setup(0x2db4, &(0x7f0000000780)={0x0, 0xfb1d, 0x3040, 0x3, 0x1f8}, &(0x7f0000000800), &(0x7f0000000840))
syz_io_uring_setup(0x311c, &(0x7f0000000180)={0x0, 0xb3c5, 0x800, 0x1, 0x8e, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x5f43, &(0x7f0000000480)={0x0, 0xd3fc, 0x1084, 0x0, 0x391}, &(0x7f0000000500), &(0x7f0000000540))
syz_io_uring_setup(0x6dde, &(0x7f0000000680)={0x0, 0x6eaa, 0x200, 0x1, 0x3e5, 0x0, r3}, &(0x7f0000000700), &(0x7f0000000740))

05:17:29 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:29 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xffdf47f7}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:29 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0xffffff7f)

05:17:29 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x0, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:29 executing program 4:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x52da, &(0x7f0000000000)={0x0, 0x87ee, 0x2400, 0x2, 0xf3, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:29 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_io_uring_setup(0x3d88, &(0x7f0000000080)={0x0, 0x5df8, 0x200, 0x1, 0x36e}, &(0x7f0000000100), &(0x7f0000000140))
r2 = syz_io_uring_setup(0x61e8, &(0x7f0000000280)={0x0, 0xa2a1, 0x4, 0x6, 0x1c9, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340))
r3 = syz_io_uring_setup(0x456c, &(0x7f0000000380)={0x0, 0xc0ff, 0x2, 0x2, 0x39f, 0x0, r2}, &(0x7f0000000400), &(0x7f0000000440))
syz_io_uring_setup(0xb51, &(0x7f0000000580)={0x0, 0xfbd9, 0x4, 0x2, 0x123, 0x0, r0}, &(0x7f0000000600), &(0x7f0000000640))
syz_io_uring_setup(0x2db4, &(0x7f0000000780)={0x0, 0xfb1d, 0x3040, 0x3, 0x1f8}, &(0x7f0000000800), &(0x7f0000000840))
syz_io_uring_setup(0x311c, &(0x7f0000000180)={0x0, 0xb3c5, 0x800, 0x1, 0x8e, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240)) (async)
syz_io_uring_setup(0x5f43, &(0x7f0000000480)={0x0, 0xd3fc, 0x1084, 0x0, 0x391}, &(0x7f0000000500), &(0x7f0000000540))
syz_io_uring_setup(0x6dde, &(0x7f0000000680)={0x0, 0x6eaa, 0x200, 0x1, 0x3e5, 0x0, r3}, &(0x7f0000000700), &(0x7f0000000740))

05:17:29 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))

05:17:29 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xffdf7356}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:29 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x1, 0x1f, 0x3f, 0x4000})
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r1, 0x0, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000000)='1\x00', 0x2)

05:17:29 executing program 4:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x52da, &(0x7f0000000000)={0x0, 0x87ee, 0x2400, 0x2, 0xf3, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:29 executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x1, 0x1f, 0x3f, 0x4000})
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r1, 0x0, 0x0) (async)
write$yama_ptrace_scope(r1, 0x0, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000000)='1\x00', 0x2)

05:17:29 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x0, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:29 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x0, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:29 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x298d, &(0x7f0000000180)={0x0, 0x2b98, 0x8, 0x2, 0x3c0, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0xc43, &(0x7f0000000280)={0x0, 0x405d, 0x80, 0x1, 0x36e, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340))
syz_io_uring_setup(0x11b2, &(0x7f0000000080)={0x0, 0x6828, 0x800, 0x3, 0x8f, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:17:29 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xffef7556}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:29 executing program 0:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x694a, &(0x7f0000000000)={0x0, 0x592b, 0x2000, 0x4, 0xa8, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:29 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='0\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:29 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xffefbdf5}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:29 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x298d, &(0x7f0000000180)={0x0, 0x2b98, 0x8, 0x2, 0x3c0, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0xc43, &(0x7f0000000280)={0x0, 0x405d, 0x80, 0x1, 0x36e, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340)) (async)
syz_io_uring_setup(0x11b2, &(0x7f0000000080)={0x0, 0x6828, 0x800, 0x3, 0x8f, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))

05:17:29 executing program 2:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x694a, &(0x7f0000000000)={0x0, 0x592b, 0x2000, 0x4, 0xa8, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) (async)
syz_io_uring_setup(0x694a, &(0x7f0000000000)={0x0, 0x592b, 0x2000, 0x4, 0xa8, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) (async)

05:17:29 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))

05:17:29 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x0, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:29 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='0\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:29 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xffefddf5}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:29 executing program 3:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_pwait2(r0, &(0x7f0000000280)=[{}, {}], 0x2, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[<r1=>0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x8, 0x4, 0xa})
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000001c0)={r1})
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x2003d1}, 0x0, 0x0)
epoll_wait(r0, &(0x7f0000000200)=[{}, {}, {}, {}], 0x4, 0x5ca2)

05:17:29 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "dc60cc7a369c249de8dd244c83"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x44)
r2 = syz_io_uring_setup(0x3cad, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x0, 0xfffffffd}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x4e89, &(0x7f0000000000)={0x0, 0xa455, 0x20, 0x1, 0x276, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0))
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xbf}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c8}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x532}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x2, 0x8000, 0x0, 0x9, 0x6, 0x2]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0xc56d34962850577e)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r1, 0x404, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x800)

05:17:29 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x0, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:30 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x0, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:30 executing program 2:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_pwait2(r0, &(0x7f0000000280)=[{}, {}], 0x2, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[<r1=>0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x8, 0x4, 0xa})
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000001c0)={r1})
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x2003d1}, 0x0, 0x0)
epoll_wait(r0, &(0x7f0000000200)=[{}, {}, {}, {}], 0x4, 0x5ca2)
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
epoll_pwait2(r0, &(0x7f0000000280)=[{}, {}], 0x2, 0x0, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x8, 0x4, 0xa}) (async)
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000001c0)={r1}) (async)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x2003d1}, 0x0, 0x0) (async)
epoll_wait(r0, &(0x7f0000000200)=[{}, {}, {}, {}], 0x4, 0x5ca2) (async)

05:17:30 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000340), 0x80000, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000005c0), 0x368, 0x90200)
r3 = openat$drirender128(0xffffff9c, &(0x7f0000000640), 0x181001, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000680)={0x0, 0x0, r3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x3, 0x5})
write$yama_ptrace_scope(r0, &(0x7f0000000000)='0\x00', 0x2)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x88400)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r6})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f00000006c0)=r7)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0xa, 0x9, 0x0, r6})

05:17:30 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xffefff1f}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:30 executing program 4:
r0 = openat$udambuf(0xffffff9c, &(0x7f0000000080), 0x2)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x110, r1, 0x8000000)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={r1, 0x0, 0x10000, 0xfffff000})
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0x0, 0x0)

05:17:30 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "dc60cc7a369c249de8dd244c83"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x44) (async)
r2 = syz_io_uring_setup(0x3cad, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x0, 0xfffffffd}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x4e89, &(0x7f0000000000)={0x0, 0xa455, 0x20, 0x1, 0x276, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0))
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xbf}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c8}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x532}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x2, 0x8000, 0x0, 0x9, 0x6, 0x2]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0xc56d34962850577e)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r1, 0x404, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x800)

05:17:30 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000340), 0x80000, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000005c0), 0x368, 0x90200)
r3 = openat$drirender128(0xffffff9c, &(0x7f0000000640), 0x181001, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000680)={0x0, 0x0, r3}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x3, 0x5}) (rerun: 32)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='0\x00', 0x2) (async, rerun: 32)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x88400) (async, rerun: 32)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r6}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0]}) (rerun: 64)
ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f00000006c0)=r7)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0xa, 0x9, 0x0, r6})

05:17:30 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xffff7f4c}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:30 executing program 1:
r0 = openat$udambuf(0xffffff9c, &(0x7f0000000080), 0x2) (async)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x110, r1, 0x8000000)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={r1, 0x0, 0x10000, 0xfffff000}) (async)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0x0, 0x0)

05:17:30 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:30 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:30 executing program 1:
r0 = syz_io_uring_setup(0x58da, &(0x7f0000000000)={0x0, 0x1000000, 0x200}, &(0x7f0000000180), &(0x7f00000001c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0x80811501, 0x0)
syz_io_uring_setup(0x6f5a, &(0x7f0000000080)={0x0, 0x3a66, 0x40, 0x1, 0x188, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x9, 0x5, 0x2, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000440)={<r3=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000480)={<r4=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06464b8, &(0x7f00000004c0)={r2, 0x3, 0x6, 0x80000001, 0x0, [r3, r4, 0x0, r4], [0x3f, 0x1800000, 0xd682, 0x436c4d70], [0x42b, 0x68, 0x7fffffff, 0x1], [0x5, 0x0, 0x0, 0x9]})
syz_io_uring_setup(0x469e, &(0x7f0000000200)={0x0, 0xeed2, 0x100, 0x1, 0x152, 0x0, r1}, &(0x7f0000000280), &(0x7f00000002c0))

05:17:30 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0)

05:17:30 executing program 4:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$isdn(r0, 0x0, 0x0)
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$yama_ptrace_scope(r1, 0x0, 0xffffffffffffff4a)

05:17:30 executing program 3:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xffff8000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:30 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:30 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:30 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:30 executing program 3:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$isdn(r0, 0x0, 0x0)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$yama_ptrace_scope(r1, 0x0, 0xffffffffffffff4a)

05:17:30 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xffffc000}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:30 executing program 0:
r0 = syz_io_uring_setup(0x58da, &(0x7f0000000000)={0x0, 0x1000000, 0x200}, &(0x7f0000000180), &(0x7f00000001c0)) (async)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0x80811501, 0x0) (async)
syz_io_uring_setup(0x6f5a, &(0x7f0000000080)={0x0, 0x3a66, 0x40, 0x1, 0x188, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x9, 0x5, 0x2, 0x1}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000440)={<r3=>0x0, 0x0, r1}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000480)={<r4=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06464b8, &(0x7f00000004c0)={r2, 0x3, 0x6, 0x80000001, 0x0, [r3, r4, 0x0, r4], [0x3f, 0x1800000, 0xd682, 0x436c4d70], [0x42b, 0x68, 0x7fffffff, 0x1], [0x5, 0x0, 0x0, 0x9]}) (async)
syz_io_uring_setup(0x469e, &(0x7f0000000200)={0x0, 0xeed2, 0x100, 0x1, 0x152, 0x0, r1}, &(0x7f0000000280), &(0x7f00000002c0))

05:17:30 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:30 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x1f9200, 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x100, 0x0)
write$yama_ptrace_scope(r2, &(0x7f0000000180)='3\x00', 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
r4 = epoll_create(0xf7)
epoll_pwait2(r4, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r2, 0x0, r3})

05:17:30 executing program 2:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xffffc12b}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:30 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r1, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, r3, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, r1, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, r1, r4, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r1})

05:17:30 executing program 4:
r0 = syz_clone(0xc001000, &(0x7f0000000000)="7543a24e89be0f5fb724d9860f6f02fc59e107522f9491f5957b64abb1cab083729ed282191192a67c3154d4f189b1826eb9aa39f54f566a0e07d5722e74f6f12ddb7acfd73a8f917fccacad637db002867aed84d566641b440e2bda2984d1df432b4edfff3eb4cc61f69600cbe6e2b3300cf4d9b908d910e329fb5a79ea72901bd51e16d632d5f2cad6ac756ab880fbd0fcdfb66b1f92dd1d3b795498d2ecf9ee1fa5e92f4271b9fddff839d2e2c643c9c4e5a58b81e00270c34c189bd6936355320e63f0a2a19986c55dc8025a356b8e7856dbd807f6959445beb9f9919d1c5c0a3b8ee16957f202896c515b2a02f3", 0xf0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="4b3208ae9d9ef6d4aa643c6ed5764cc216a509b6629ad015fe3e46d399e236cbbe3888ad935e88d1dbed4714a699512404e8761b862cc373e8ac64d39a3ef87cf189eb9b974e17d59b63d84f3e5f0a4916550efa232486650bdd5ba03ff5a8836c1f3bafc39012630923ca519cfbb0fa183308f370647ce5fc6080074c7dc92192d12a455dad7ff2b05ba476b165ffd6cdddde128bfeee9c09c62534955e70f4eb2bc13bac90629c5c5247987d4dabfca55acc5b71567ebf687ec4dcf5db91")
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000007c0))
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f00000021c0)={r1})
r5 = openat$zero(0xffffff9c, &(0x7f0000000640), 0x40000, 0x0)
r6 = epoll_create(0x9)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x10, r5, 0x8000000)
r7 = openat$snapshot(0xffffff9c, &(0x7f0000000680), 0x40, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000840))
kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r5, &(0x7f00000006c0)={r6, r7, 0x2})
r8 = syz_io_uring_setup(0xf88, &(0x7f0000000200)={0x0, 0x96a1, 0x200, 0x1, 0x95}, &(0x7f0000000280), &(0x7f00000002c0))
r9 = syz_io_uring_setup(0x353b, &(0x7f0000000300)={0x0, 0x89488, 0x20, 0x1, 0x1ec, 0x0, r8}, &(0x7f0000000380), &(0x7f00000003c0))
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x282d, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x5673, &(0x7f0000000400)={0x0, 0xfee6, 0x8, 0x2, 0x311}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x81cb0, &(0x7f0000000700)={0x0, 0xdf30, 0x2, 0x3, 0x336, 0x0, r8}, &(0x7f0000000780), &(0x7f0000000800))

05:17:31 executing program 1:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r0 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:31 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x1f9200, 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x100, 0x0)
write$yama_ptrace_scope(r2, &(0x7f0000000180)='3\x00', 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
r4 = epoll_create(0xf7)
epoll_pwait2(r4, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r2, 0x0, r3})

05:17:31 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x1f9200, 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x100, 0x0)
write$yama_ptrace_scope(r2, &(0x7f0000000180)='3\x00', 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
r4 = epoll_create(0xf7)
epoll_pwait2(r4, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r2, 0x0, r3})
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x1f9200, 0x0) (async)
openat$zero(0xffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
write$yama_ptrace_scope(r2, &(0x7f0000000180)='3\x00', 0x2) (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
epoll_create(0xf7) (async)
epoll_pwait2(r4, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r2, 0x0, r3}) (async)

05:17:31 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:31 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xffffeff5}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:31 executing program 3:
r0 = openat$drirender128(0xffffff9c, &(0x7f0000000240), 0x22800, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x3, 0x4, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000600)={r1})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf0, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x128}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffcf2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20e3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0xf0}}, 0x4015)
r4 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r4, 0x0, 0x0)

05:17:31 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x1f9200, 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x100, 0x0)
write$yama_ptrace_scope(r2, &(0x7f0000000180)='3\x00', 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
r4 = epoll_create(0xf7)
epoll_pwait2(r4, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r2, 0x0, r3})

05:17:31 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:31 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, 0x0, &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:31 executing program 0:
r0 = openat$drirender128(0xffffff9c, &(0x7f0000000240), 0x22800, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x3, 0x4, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000600)={r1})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf0, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x128}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffcf2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20e3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0xf0}}, 0x4015) (async)
r4 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r4, 0x0, 0x0)

05:17:31 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xffffff1f}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:31 executing program 2:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000)
fanotify_mark(r0, 0x408, 0x1028, r0, &(0x7f0000000080)='./file0\x00')
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4020013, r0, 0x8000000)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000000))
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r1, 0x0, 0x0)

05:17:31 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x1f9200, 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x100, 0x0)
write$yama_ptrace_scope(r2, &(0x7f0000000180)='3\x00', 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
r4 = epoll_create(0xf7)
epoll_pwait2(r4, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r2, 0x0, r3})

05:17:31 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:31 executing program 4:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xffffff20}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:31 executing program 3:
r0 = syz_clone(0xc001000, &(0x7f0000000000)="7543a24e89be0f5fb724d9860f6f02fc59e107522f9491f5957b64abb1cab083729ed282191192a67c3154d4f189b1826eb9aa39f54f566a0e07d5722e74f6f12ddb7acfd73a8f917fccacad637db002867aed84d566641b440e2bda2984d1df432b4edfff3eb4cc61f69600cbe6e2b3300cf4d9b908d910e329fb5a79ea72901bd51e16d632d5f2cad6ac756ab880fbd0fcdfb66b1f92dd1d3b795498d2ecf9ee1fa5e92f4271b9fddff839d2e2c643c9c4e5a58b81e00270c34c189bd6936355320e63f0a2a19986c55dc8025a356b8e7856dbd807f6959445beb9f9919d1c5c0a3b8ee16957f202896c515b2a02f3", 0xf0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="4b3208ae9d9ef6d4aa643c6ed5764cc216a509b6629ad015fe3e46d399e236cbbe3888ad935e88d1dbed4714a699512404e8761b862cc373e8ac64d39a3ef87cf189eb9b974e17d59b63d84f3e5f0a4916550efa232486650bdd5ba03ff5a8836c1f3bafc39012630923ca519cfbb0fa183308f370647ce5fc6080074c7dc92192d12a455dad7ff2b05ba476b165ffd6cdddde128bfeee9c09c62534955e70f4eb2bc13bac90629c5c5247987d4dabfca55acc5b71567ebf687ec4dcf5db91")
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000007c0))
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f00000021c0)={r1})
r5 = openat$zero(0xffffff9c, &(0x7f0000000640), 0x40000, 0x0)
r6 = epoll_create(0x9)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x10, r5, 0x8000000)
r7 = openat$snapshot(0xffffff9c, &(0x7f0000000680), 0x40, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000840))
kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r5, &(0x7f00000006c0)={r6, r7, 0x2})
r8 = syz_io_uring_setup(0xf88, &(0x7f0000000200)={0x0, 0x96a1, 0x200, 0x1, 0x95}, &(0x7f0000000280), &(0x7f00000002c0))
r9 = syz_io_uring_setup(0x353b, &(0x7f0000000300)={0x0, 0x89488, 0x20, 0x1, 0x1ec, 0x0, r8}, &(0x7f0000000380), &(0x7f00000003c0))
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x282d, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x5673, &(0x7f0000000400)={0x0, 0xfee6, 0x8, 0x2, 0x311}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x81cb0, &(0x7f0000000700)={0x0, 0xdf30, 0x2, 0x3, 0x336, 0x0, r8}, &(0x7f0000000780), &(0x7f0000000800))

05:17:31 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, 0x0, &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:31 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x1f9200, 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x100, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000180)='3\x00', 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc})
r2 = epoll_create(0xf7)
epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:31 executing program 2:
r0 = syz_clone(0xc001000, &(0x7f0000000000)="7543a24e89be0f5fb724d9860f6f02fc59e107522f9491f5957b64abb1cab083729ed282191192a67c3154d4f189b1826eb9aa39f54f566a0e07d5722e74f6f12ddb7acfd73a8f917fccacad637db002867aed84d566641b440e2bda2984d1df432b4edfff3eb4cc61f69600cbe6e2b3300cf4d9b908d910e329fb5a79ea72901bd51e16d632d5f2cad6ac756ab880fbd0fcdfb66b1f92dd1d3b795498d2ecf9ee1fa5e92f4271b9fddff839d2e2c643c9c4e5a58b81e00270c34c189bd6936355320e63f0a2a19986c55dc8025a356b8e7856dbd807f6959445beb9f9919d1c5c0a3b8ee16957f202896c515b2a02f3", 0xf0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="4b3208ae9d9ef6d4aa643c6ed5764cc216a509b6629ad015fe3e46d399e236cbbe3888ad935e88d1dbed4714a699512404e8761b862cc373e8ac64d39a3ef87cf189eb9b974e17d59b63d84f3e5f0a4916550efa232486650bdd5ba03ff5a8836c1f3bafc39012630923ca519cfbb0fa183308f370647ce5fc6080074c7dc92192d12a455dad7ff2b05ba476b165ffd6cdddde128bfeee9c09c62534955e70f4eb2bc13bac90629c5c5247987d4dabfca55acc5b71567ebf687ec4dcf5db91")
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000007c0))
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f00000021c0)={r1})
r5 = openat$zero(0xffffff9c, &(0x7f0000000640), 0x40000, 0x0)
r6 = epoll_create(0x9)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x10, r5, 0x8000000)
r7 = openat$snapshot(0xffffff9c, &(0x7f0000000680), 0x40, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000840))
kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r5, &(0x7f00000006c0)={r6, r7, 0x2})
r8 = syz_io_uring_setup(0xf88, &(0x7f0000000200)={0x0, 0x96a1, 0x200, 0x1, 0x95}, &(0x7f0000000280), &(0x7f00000002c0))
r9 = syz_io_uring_setup(0x353b, &(0x7f0000000300)={0x0, 0x89488, 0x20, 0x1, 0x1ec, 0x0, r8}, &(0x7f0000000380), &(0x7f00000003c0))
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x282d, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x5673, &(0x7f0000000400)={0x0, 0xfee6, 0x8, 0x2, 0x311}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x81cb0, &(0x7f0000000700)={0x0, 0xdf30, 0x2, 0x3, 0x336, 0x0, r8}, &(0x7f0000000780), &(0x7f0000000800))

05:17:31 executing program 0:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000)
fanotify_mark(r0, 0x408, 0x1028, r0, &(0x7f0000000080)='./file0\x00')
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4020013, r0, 0x8000000) (async, rerun: 64)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000000)) (async, rerun: 64)
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r1, 0x0, 0x0)

05:17:31 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x1f9200, 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x100, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000180)='3\x00', 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc})
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:31 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, 0x0, &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:31 executing program 0:
syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:32 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='0\x00', 0x2)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x82d82, 0x0)
write$FUSE_ATTR(r1, 0x0, 0x0)
ioctl$CEC_ADAP_G_CONNECTOR_INFO(r1, 0x8044610a, &(0x7f0000000080))
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:32 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x1f9200, 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x100, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000180)='3\x00', 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc})
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:32 executing program 1:
r0 = syz_clone(0xc001000, &(0x7f0000000000)="7543a24e89be0f5fb724d9860f6f02fc59e107522f9491f5957b64abb1cab083729ed282191192a67c3154d4f189b1826eb9aa39f54f566a0e07d5722e74f6f12ddb7acfd73a8f917fccacad637db002867aed84d566641b440e2bda2984d1df432b4edfff3eb4cc61f69600cbe6e2b3300cf4d9b908d910e329fb5a79ea72901bd51e16d632d5f2cad6ac756ab880fbd0fcdfb66b1f92dd1d3b795498d2ecf9ee1fa5e92f4271b9fddff839d2e2c643c9c4e5a58b81e00270c34c189bd6936355320e63f0a2a19986c55dc8025a356b8e7856dbd807f6959445beb9f9919d1c5c0a3b8ee16957f202896c515b2a02f3", 0xf0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="4b3208ae9d9ef6d4aa643c6ed5764cc216a509b6629ad015fe3e46d399e236cbbe3888ad935e88d1dbed4714a699512404e8761b862cc373e8ac64d39a3ef87cf189eb9b974e17d59b63d84f3e5f0a4916550efa232486650bdd5ba03ff5a8836c1f3bafc39012630923ca519cfbb0fa183308f370647ce5fc6080074c7dc92192d12a455dad7ff2b05ba476b165ffd6cdddde128bfeee9c09c62534955e70f4eb2bc13bac90629c5c5247987d4dabfca55acc5b71567ebf687ec4dcf5db91")
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000007c0))
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f00000021c0)={r1})
r5 = openat$zero(0xffffff9c, &(0x7f0000000640), 0x40000, 0x0)
r6 = epoll_create(0x9)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x10, r5, 0x8000000)
r7 = openat$snapshot(0xffffff9c, &(0x7f0000000680), 0x40, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000840))
kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r5, &(0x7f00000006c0)={r6, r7, 0x2})
r8 = syz_io_uring_setup(0xf88, &(0x7f0000000200)={0x0, 0x96a1, 0x200, 0x1, 0x95}, &(0x7f0000000280), &(0x7f00000002c0))
r9 = syz_io_uring_setup(0x353b, &(0x7f0000000300)={0x0, 0x89488, 0x20, 0x1, 0x1ec, 0x0, r8}, &(0x7f0000000380), &(0x7f00000003c0))
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x282d, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x5673, &(0x7f0000000400)={0x0, 0xfee6, 0x8, 0x2, 0x311}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x81cb0, &(0x7f0000000700)={0x0, 0xdf30, 0x2, 0x3, 0x336, 0x0, r8}, &(0x7f0000000780), &(0x7f0000000800))
syz_clone(0xc001000, &(0x7f0000000000)="7543a24e89be0f5fb724d9860f6f02fc59e107522f9491f5957b64abb1cab083729ed282191192a67c3154d4f189b1826eb9aa39f54f566a0e07d5722e74f6f12ddb7acfd73a8f917fccacad637db002867aed84d566641b440e2bda2984d1df432b4edfff3eb4cc61f69600cbe6e2b3300cf4d9b908d910e329fb5a79ea72901bd51e16d632d5f2cad6ac756ab880fbd0fcdfb66b1f92dd1d3b795498d2ecf9ee1fa5e92f4271b9fddff839d2e2c643c9c4e5a58b81e00270c34c189bd6936355320e63f0a2a19986c55dc8025a356b8e7856dbd807f6959445beb9f9919d1c5c0a3b8ee16957f202896c515b2a02f3", 0xf0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="4b3208ae9d9ef6d4aa643c6ed5764cc216a509b6629ad015fe3e46d399e236cbbe3888ad935e88d1dbed4714a699512404e8761b862cc373e8ac64d39a3ef87cf189eb9b974e17d59b63d84f3e5f0a4916550efa232486650bdd5ba03ff5a8836c1f3bafc39012630923ca519cfbb0fa183308f370647ce5fc6080074c7dc92192d12a455dad7ff2b05ba476b165ffd6cdddde128bfeee9c09c62534955e70f4eb2bc13bac90629c5c5247987d4dabfca55acc5b71567ebf687ec4dcf5db91") (async)
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000007c0)) (async)
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f00000021c0)={r1}) (async)
openat$zero(0xffffff9c, &(0x7f0000000640), 0x40000, 0x0) (async)
epoll_create(0x9) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x10, r5, 0x8000000) (async)
openat$snapshot(0xffffff9c, &(0x7f0000000680), 0x40, 0x0) (async)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000840)) (async)
kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r5, &(0x7f00000006c0)={r6, r7, 0x2}) (async)
syz_io_uring_setup(0xf88, &(0x7f0000000200)={0x0, 0x96a1, 0x200, 0x1, 0x95}, &(0x7f0000000280), &(0x7f00000002c0)) (async)
syz_io_uring_setup(0x353b, &(0x7f0000000300)={0x0, 0x89488, 0x20, 0x1, 0x1ec, 0x0, r8}, &(0x7f0000000380), &(0x7f00000003c0)) (async)
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x282d, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f0000000180), &(0x7f00000001c0)) (async)
syz_io_uring_setup(0x5673, &(0x7f0000000400)={0x0, 0xfee6, 0x8, 0x2, 0x311}, &(0x7f0000000480), &(0x7f00000004c0)) (async)
syz_io_uring_setup(0x81cb0, &(0x7f0000000700)={0x0, 0xdf30, 0x2, 0x3, 0x336, 0x0, r8}, &(0x7f0000000780), &(0x7f0000000800)) (async)

05:17:32 executing program 0:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='0\x00', 0x2)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x82d82, 0x0)
write$FUSE_ATTR(r1, 0x0, 0x0)
ioctl$CEC_ADAP_G_CONNECTOR_INFO(r1, 0x8044610a, &(0x7f0000000080)) (async)
ioctl$CEC_ADAP_G_CONNECTOR_INFO(r1, 0x8044610a, &(0x7f0000000080))
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:32 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x1f9200, 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x100, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000180)='3\x00', 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc})
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:32 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), 0x0)
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:32 executing program 2:
ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000040))
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:32 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:32 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x1f9200, 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x100, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000180)='3\x00', 0x2)
r2 = epoll_create(0xf7)
epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:32 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, <r1=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r1, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, r3, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, r1, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, r1, r4, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r1})

05:17:32 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), 0x0)
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:32 executing program 3:
ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000040)) (async)
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:32 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x1f9200, 0x0)
openat$zero(0xffffff9c, &(0x7f0000000080), 0x100, 0x0)
r1 = epoll_create(0xf7)
epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:32 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000380)='0\x00', 0x2)
write$yama_ptrace_scope(r0, &(0x7f0000000340)='3\x00', 0x2)
r1 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
r2 = syz_io_uring_setup(0x644d, &(0x7f0000000000)={0x0, 0x477b, 0x200, 0x1, 0x399, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x2bb, &(0x7f0000000200)={0x0, 0xdeff, 0x4, 0x1, 0xe7, 0x0, r2}, &(0x7f0000000280), &(0x7f00000002c0))

05:17:32 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x2a})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, <r1=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={r1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x5, 0x1, 0x6, 0x1})

05:17:32 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xa}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:32 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000380)='0\x00', 0x2) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000340)='3\x00', 0x2)
r1 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
r2 = syz_io_uring_setup(0x644d, &(0x7f0000000000)={0x0, 0x477b, 0x200, 0x1, 0x399, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x2bb, &(0x7f0000000200)={0x0, 0xdeff, 0x4, 0x1, 0xe7, 0x0, r2}, &(0x7f0000000280), &(0x7f00000002c0))

05:17:33 executing program 1:
write$yama_ptrace_scope(0xffffffffffffffff, 0x0, 0x0)

05:17:33 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x1f9200, 0x0)
r1 = epoll_create(0xf7)
epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:33 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xe}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:33 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x2a}) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, <r1=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={r1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x5, 0x1, 0x6, 0x1})

05:17:33 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), 0x0)
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:33 executing program 3:
write$yama_ptrace_scope(0xffffffffffffffff, 0x0, 0x0)

05:17:33 executing program 0:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x39a3, &(0x7f0000000000)={0x0, 0xa9e6, 0x4, 0x1, 0x35b, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:33 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x1f9200, 0x0)
r1 = epoll_create(0xf7)
epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:33 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:33 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[<r2=>0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x1, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, <r3=>0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x5, 0x9})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000840)={&(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[{}, {}], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x2, 0x7, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[<r4=>0x0, 0x0, 0x0, <r5=>0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x9, 0x4, 0x6, 0x3})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000cc0)={&(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000c40)=[0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2, 0x8, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, <r6=>0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x4, 0x7})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x8})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000a00)={r7})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000600)={0x0, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000640)={&(0x7f00000005c0)=[r2, r3, r4, r6], 0x4, r8, r1, 0xfffffeff, 0x1, 0x81, 0x1, {0x1f, 0x7fff, 0x4, 0x1, 0xb36a, 0x9, 0x6, 0x2, 0x61, 0xb6c9, 0x2, 0x3b04, 0x1ff, 0x1, "3bb8a6c4c913d1033ec4ef51bde84c53d8fdfd13759e34b5679f17c8f2c579e0"}})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000f00)={&(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[{}, {}, {}], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x7, 0x8, 0x0, r5})

05:17:33 executing program 3:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x39a3, &(0x7f0000000000)={0x0, 0xa9e6, 0x4, 0x1, 0x35b, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:33 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:33 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x1f9200, 0x0)
r1 = epoll_create(0xf7)
epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:33 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:33 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x10}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:33 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:33 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$zero(0xffffff9c, &(0x7f0000000080), 0x100, 0x0)
r1 = epoll_create(0xf7)
epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:33 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), 0x0)
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:33 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)

05:17:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89b1, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd28, 0x0, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x27a]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x2c}}, 0x0)
ioctl$CEC_G_MODE(0xffffffffffffffff, 0x80046108, &(0x7f0000000000))
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x8000000, 0x0, 0xffffffff, 0x1}, &(0x7f0000000180), &(0x7f0000000040))

05:17:33 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:34 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:34 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:34 executing program 0:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$zero(0xffffff9c, &(0x7f0000000080), 0x100, 0x0)
r0 = epoll_create(0xf7)
epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:34 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000040)='2\x00', 0x2)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x8000, 0x30080)

05:17:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89b1, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd28, 0x0, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x27a]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x2c}}, 0x0) (async)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd28, 0x0, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x27a]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x2c}}, 0x0)
ioctl$CEC_G_MODE(0xffffffffffffffff, 0x80046108, &(0x7f0000000000))
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x8000000, 0x0, 0xffffffff, 0x1}, &(0x7f0000000180), &(0x7f0000000040))

05:17:34 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:34 executing program 4:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x100, 0x0)
r0 = epoll_create(0xf7)
epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:34 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000040)='2\x00', 0x2)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x8000, 0x30080)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000040)='2\x00', 0x2) (async)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000080), 0x8000, 0x30080) (async)

05:17:34 executing program 4:
r0 = syz_io_uring_setup(0x528f, &(0x7f0000000000)={0x0, 0xa2ce, 0x200, 0x0, 0x153}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:34 executing program 1:
openat$zero(0xffffff9c, 0x0, 0x100, 0x0)
r0 = epoll_create(0xf7)
epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:34 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000200)='0\x00', 0x29)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0x32300, 0x0)
write$yama_ptrace_scope(r0, &(0x7f00000005c0)='3\x00', 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x12, 0x7})
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2)
r3 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06464b8, &(0x7f0000000280))
r4 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x8000000)
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4020013, r4, 0x8000000)
read$qrtrtun(r4, &(0x7f00000006c0)=""/172, 0xac)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[{}], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x3, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, <r5=>0x0, 0x0], 0x4})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
write$yama_ptrace_scope(r0, &(0x7f0000000600)='2\x00', 0x2)
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000001c0)={r5, r6, r7, 0x6, 0xfff, 0x10000, 0x7, 0x40, 0x10000, 0x9a, 0x2, 0x9ab5})

05:17:34 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, 0x0, &(0x7f0000000680), &(0x7f00000006c0))

05:17:34 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x15}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:34 executing program 3:
r0 = syz_io_uring_setup(0x528f, &(0x7f0000000000)={0x0, 0xa2ce, 0x200, 0x0, 0x153}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x528f, &(0x7f0000000000)={0x0, 0xa2ce, 0x200, 0x0, 0x153}, &(0x7f0000000080), &(0x7f00000000c0)) (async)
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) (async)

05:17:34 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[<r2=>0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x1, 0x4}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, <r3=>0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x5, 0x9}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000840)={&(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[{}, {}], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x2, 0x7, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[<r4=>0x0, 0x0, 0x0, <r5=>0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x9, 0x4, 0x6, 0x3}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000cc0)={&(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000c40)=[0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2, 0x8, 0x0, r2}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, <r6=>0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x4, 0x7}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x8})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000a00)={r7}) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000600)={0x0, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000640)={&(0x7f00000005c0)=[r2, r3, r4, r6], 0x4, r8, r1, 0xfffffeff, 0x1, 0x81, 0x1, {0x1f, 0x7fff, 0x4, 0x1, 0xb36a, 0x9, 0x6, 0x2, 0x61, 0xb6c9, 0x2, 0x3b04, 0x1ff, 0x1, "3bb8a6c4c913d1033ec4ef51bde84c53d8fdfd13759e34b5679f17c8f2c579e0"}}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000f00)={&(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[{}, {}, {}], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x7, 0x8, 0x0, r5})

05:17:34 executing program 0:
openat$zero(0xffffff9c, 0x0, 0x100, 0x0)
r0 = epoll_create(0xf7)
epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:34 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000200)='0\x00', 0x29)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0x32300, 0x0)
write$yama_ptrace_scope(r0, &(0x7f00000005c0)='3\x00', 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x12, 0x7})
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2)
r3 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06464b8, &(0x7f0000000280))
r4 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x8000000)
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4020013, r4, 0x8000000)
read$qrtrtun(r4, &(0x7f00000006c0)=""/172, 0xac)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[{}], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x3, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, <r5=>0x0, 0x0], 0x4})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
write$yama_ptrace_scope(r0, &(0x7f0000000600)='2\x00', 0x2)
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000001c0)={r5, r6, r7, 0x6, 0xfff, 0x10000, 0x7, 0x40, 0x10000, 0x9a, 0x2, 0x9ab5})

05:17:34 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000200)='0\x00', 0x29) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0x32300, 0x0)
write$yama_ptrace_scope(r0, &(0x7f00000005c0)='3\x00', 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x12, 0x7}) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2) (async)
r3 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06464b8, &(0x7f0000000280))
r4 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x8000000) (async, rerun: 32)
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) (async, rerun: 32)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4020013, r4, 0x8000000)
read$qrtrtun(r4, &(0x7f00000006c0)=""/172, 0xac) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[{}], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x3, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, <r5=>0x0, 0x0], 0x4})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, <r6=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
write$yama_ptrace_scope(r0, &(0x7f0000000600)='2\x00', 0x2) (async)
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000001c0)={r5, r6, r7, 0x6, 0xfff, 0x10000, 0x7, 0x40, 0x10000, 0x9a, 0x2, 0x9ab5})

05:17:34 executing program 1:
openat$zero(0xffffff9c, 0x0, 0x100, 0x0)
r0 = epoll_create(0xf7)
epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:34 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x21}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:34 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[<r2=>0x0], &(0x7f0000000080)=[<r3=>0x0, 0x0], &(0x7f00000000c0)=[<r4=>0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x6, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[<r10=>0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x1, 0x5})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000840)={&(0x7f0000000800)=[r5, r4, r8, r6, r9, r10, r6, r6], 0x8, r3, r2, 0x5, 0x6, 0x3, 0x5, {0xc581, 0x81, 0xc66, 0x3f, 0xd465, 0xfba, 0x1, 0x40, 0x7ff, 0x5, 0x9f4, 0x8, 0x662, 0x9, "7bbf0f305128c1954a70812f927c925b10cf3ccfda00a5a25135d37540171360"}})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000001c0)={&(0x7f0000000180)=[<r11=>0x0, 0x0, 0x0], 0x3})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x5, 0x5, 0x0, r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r11, r3, r2, 0x7, 0xa5, 0x3ff, 0x32, 0xffffffff, 0x0, 0x80000001, 0xffff, 0x10000})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f00000008c0)={r1, 0x12b, 0xe0, 0x401, 0x1, [<r12=>0x0], [0x40, 0x7f, 0x9, 0x8], [0x4, 0x200, 0x400, 0x83f], [0x1, 0xabd, 0xff, 0x2]})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000940)={r12})

05:17:34 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x13d0, &(0x7f0000000200)={0x0, 0x502e, 0x20, 0x0, 0x2fb}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x611a, &(0x7f0000000000)={0x0, 0x4ea6, 0x400, 0x0, 0x15a}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:34 executing program 2:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = epoll_create(0xf7)
epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:35 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, 0x0, &(0x7f0000000680), &(0x7f00000006c0))

05:17:35 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x22}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:35 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[<r2=>0x0], &(0x7f0000000080)=[<r3=>0x0, 0x0], &(0x7f00000000c0)=[<r4=>0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x6, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[<r10=>0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x1, 0x5})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000840)={&(0x7f0000000800)=[r5, r4, r8, r6, r9, r10, r6, r6], 0x8, r3, r2, 0x5, 0x6, 0x3, 0x5, {0xc581, 0x81, 0xc66, 0x3f, 0xd465, 0xfba, 0x1, 0x40, 0x7ff, 0x5, 0x9f4, 0x8, 0x662, 0x9, "7bbf0f305128c1954a70812f927c925b10cf3ccfda00a5a25135d37540171360"}})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000001c0)={&(0x7f0000000180)=[<r11=>0x0, 0x0, 0x0], 0x3})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x5, 0x5, 0x0, r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r11, r3, r2, 0x7, 0xa5, 0x3ff, 0x32, 0xffffffff, 0x0, 0x80000001, 0xffff, 0x10000})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f00000008c0)={r1, 0x12b, 0xe0, 0x401, 0x1, [<r12=>0x0], [0x40, 0x7f, 0x9, 0x8], [0x4, 0x200, 0x400, 0x83f], [0x1, 0xabd, 0xff, 0x2]})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000940)={r12})

05:17:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xb}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3a}, @NL80211_ATTR_CRIT_PROT_ID={0x40, 0xb3, 0x2}]}, 0x38}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r2, @ANYBLOB="01002cbd70958b7b5ad10282d78a1703032bc2df25110010000900150dce1056bcafbc06a43d11500350b17d1f58035d33932fd98e12f95dfeebde6e223b328a68b6fc03283671b1c465ebd525c03941eb80ab346e1a15d8baeb1eefb486b22f42b997604469a2e4d5708651d215eb58cd30ccb1bf0798e2b7deba7128a264611a5abfc707e4696b1fb0144f9508cfc3f30ef1ab21deb02cc61391af", @ANYRES64=r1], 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040094}, 0x4000)
r4 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r4, 0x0, 0x0)

05:17:35 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x23}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:35 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x13d0, &(0x7f0000000200)={0x0, 0x502e, 0x20, 0x0, 0x2fb}, &(0x7f0000000280), &(0x7f00000002c0)) (async)
syz_io_uring_setup(0x13d0, &(0x7f0000000200)={0x0, 0x502e, 0x20, 0x0, 0x2fb}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x611a, &(0x7f0000000000)={0x0, 0x4ea6, 0x400, 0x0, 0x15a}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:35 executing program 2:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = epoll_create(0x0)
epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:35 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[<r2=>0x0], &(0x7f0000000080)=[<r3=>0x0, 0x0], &(0x7f00000000c0)=[<r4=>0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x6, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[<r10=>0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x1, 0x5})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000840)={&(0x7f0000000800)=[r5, r4, r8, r6, r9, r10, r6, r6], 0x8, r3, r2, 0x5, 0x6, 0x3, 0x5, {0xc581, 0x81, 0xc66, 0x3f, 0xd465, 0xfba, 0x1, 0x40, 0x7ff, 0x5, 0x9f4, 0x8, 0x662, 0x9, "7bbf0f305128c1954a70812f927c925b10cf3ccfda00a5a25135d37540171360"}})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000001c0)={&(0x7f0000000180)=[<r11=>0x0, 0x0, 0x0], 0x3})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x5, 0x5, 0x0, r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r11, r3, r2, 0x7, 0xa5, 0x3ff, 0x32, 0xffffffff, 0x0, 0x80000001, 0xffff, 0x10000})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f00000008c0)={r1, 0x12b, 0xe0, 0x401, 0x1, [<r12=>0x0], [0x40, 0x7f, 0x9, 0x8], [0x4, 0x200, 0x400, 0x83f], [0x1, 0xabd, 0xff, 0x2]})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000940)={r12})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x6, 0x4}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x1, 0x5}) (async)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000840)={&(0x7f0000000800)=[r5, r4, r8, r6, r9, r10, r6, r6], 0x8, r3, r2, 0x5, 0x6, 0x3, 0x5, {0xc581, 0x81, 0xc66, 0x3f, 0xd465, 0xfba, 0x1, 0x40, 0x7ff, 0x5, 0x9f4, 0x8, 0x662, 0x9, "7bbf0f305128c1954a70812f927c925b10cf3ccfda00a5a25135d37540171360"}}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x5, 0x5, 0x0, r7}) (async)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r11, r3, r2, 0x7, 0xa5, 0x3ff, 0x32, 0xffffffff, 0x0, 0x80000001, 0xffff, 0x10000}) (async)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f00000008c0)={r1, 0x12b, 0xe0, 0x401, 0x1, [], [0x40, 0x7f, 0x9, 0x8], [0x4, 0x200, 0x400, 0x83f], [0x1, 0xabd, 0xff, 0x2]}) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000940)={r12}) (async)

05:17:35 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, 0x0, &(0x7f0000000680), &(0x7f00000006c0))

05:17:35 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x41}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xb}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3a}, @NL80211_ATTR_CRIT_PROT_ID={0x40, 0xb3, 0x2}]}, 0x38}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r2, @ANYBLOB="01002cbd70958b7b5ad10282d78a1703032bc2df25110010000900150dce1056bcafbc06a43d11500350b17d1f58035d33932fd98e12f95dfeebde6e223b328a68b6fc03283671b1c465ebd525c03941eb80ab346e1a15d8baeb1eefb486b22f42b997604469a2e4d5708651d215eb58cd30ccb1bf0798e2b7deba7128a264611a5abfc707e4696b1fb0144f9508cfc3f30ef1ab21deb02cc61391af", @ANYRES64=r1], 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) (async)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040094}, 0x4000) (async)
r4 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r4, 0x0, 0x0)

05:17:35 executing program 2:
r0 = epoll_create(0x2)
r1 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x4002, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000240)={0x90000000})
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x341b, &(0x7f0000000280)={0x0, 0x3f10, 0x2000, 0x2, 0x1af, 0x0, r1}, &(0x7f0000000200), &(0x7f00000000c0))

05:17:35 executing program 4:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = epoll_create(0x0)
epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:35 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={0x0, 0x0, r1})

05:17:35 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x42}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:35 executing program 2:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = epoll_create(0x0)
epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:35 executing program 0:
r0 = epoll_create(0x2) (async)
r1 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x4002, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000240)={0x90000000}) (async)
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) (async)
syz_io_uring_setup(0x341b, &(0x7f0000000280)={0x0, 0x3f10, 0x2000, 0x2, 0x1af, 0x0, r1}, &(0x7f0000000200), &(0x7f00000000c0))

05:17:35 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080))
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000000)={r1, r0, 0xe0000000})

05:17:35 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={0x0, 0x0, r1})

05:17:35 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x0, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:35 executing program 0:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
epoll_create(0xf7)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:35 executing program 4:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0xb25}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x72}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dummy0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfa}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x40)
kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r0, &(0x7f00000021c0)={r0})
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x3, 0x147, 0x0, r0}, &(0x7f0000000040), &(0x7f00000000c0))

05:17:35 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x60}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:35 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x40305839, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000080)={0x6, <r1=>0x0, 0x2})
ioctl$DRM_IOCTL_SG_FREE(r0, 0x40086439, &(0x7f00000000c0)={0x3, r1})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:35 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) (async)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000000)={r1, r0, 0xe0000000})

05:17:35 executing program 1:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
epoll_create(0xf7)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:35 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x204}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:35 executing program 2:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0xb25}, 0x14}}, 0x0) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x72}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dummy0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfa}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x40) (async)
kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r0, &(0x7f00000021c0)={r0})
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x3, 0x147, 0x0, r0}, &(0x7f0000000040), &(0x7f00000000c0))

05:17:35 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x0, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:36 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x0, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:36 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = syz_io_uring_complete(0x0)
write$yama_ptrace_scope(r1, &(0x7f00000000c0)='0\x00', 0xfffffffffffffffc)
syz_open_dev$dri(&(0x7f0000000000), 0x5fb8, 0x40000)

05:17:36 executing program 4:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
epoll_create(0xf7)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0)

05:17:36 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x300}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:36 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
r1 = syz_io_uring_complete(0x0)
write$yama_ptrace_scope(r1, &(0x7f00000000c0)='0\x00', 0xfffffffffffffffc) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x5fb8, 0x40000)

05:17:36 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x0, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:36 executing program 4:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = epoll_create(0xf7)
epoll_pwait2(r0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)

05:17:36 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x12})
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:36 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x402}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:36 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x40305839, 0x0) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000080)={0x6, <r1=>0x0, 0x2})
ioctl$DRM_IOCTL_SG_FREE(r0, 0x40086439, &(0x7f00000000c0)={0x3, r1}) (async)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000040)) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0}) (rerun: 32)

05:17:36 executing program 1:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x64c, &(0x7f0000000200)={0x0, 0x1cc, 0x400, 0x0, 0x3cf, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x68a6, &(0x7f0000002500)={0x0, 0xc551, 0x4, 0x1, 0xcf, 0x0, r1}, &(0x7f0000002580), &(0x7f00000025c0))
syz_io_uring_setup(0x58f7, &(0x7f0000000300)={0x0, 0xed58, 0x0, 0x3, 0x144, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$FUSE(r2, 0x0, 0xfffffffffffffc6e)
syz_io_uring_setup(0x28bb, &(0x7f0000000000)={0x0, 0x2123, 0x800, 0x2, 0x102, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0))
r3 = openat$cuse(0xffffff9c, &(0x7f0000000400), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000000440)={0x2020, 0x0, <r4=>0x0}, 0x2020)
r5 = getuid()
r6 = openat$cuse(0xffffff9c, &(0x7f0000002100), 0x2, 0x0)
read$FUSE(r6, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
write$FUSE_ATTR(r6, &(0x7f0000002340)={0x78, 0xfffffffffffffffe, r7, {0x32c, 0x9, 0x0, {0x0, 0x7, 0x0, 0x2, 0x10001, 0x1ff, 0x2, 0xab, 0x3, 0x8000, 0xb1, r8, r9, 0x89c, 0x100}}}, 0x78)
write$FUSE_ATTR(r3, &(0x7f0000002480)={0x78, 0x0, r4, {0x8, 0x7ff, 0x0, {0x6, 0x2, 0x80000000, 0x9, 0x1, 0x79, 0x6, 0xcdfa, 0x8, 0x1000, 0x0, r5, r9, 0x51cc, 0x7fffffff}}}, 0x78)

05:17:36 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x12})
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:36 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x12}) (async, rerun: 64)
write$yama_ptrace_scope(r0, 0x0, 0x0) (rerun: 64)

05:17:36 executing program 3:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = epoll_create(0xf7)
epoll_pwait2(r0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)

05:17:36 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x0, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:36 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x406}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:36 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000040)={0x0, 0xffffff68, 0x4, 0x6000000, 0x2, [], [0x80, 0xde, 0x7, 0x192d], [0x5, 0x4, 0x6, 0x6388], [0x2, 0x9, 0x9, 0x3]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, <r2=>0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4, 0xa})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000300)={&(0x7f0000000200)=[r2, r4], 0x2, 0x0, r1, 0x40, 0x1fffc00, 0x1, 0x3f, {0x2aba, 0x8ca, 0x1, 0x4, 0x0, 0x0, 0x40, 0x5, 0xffff, 0x1, 0x764, 0x3, 0x1, 0xc, "efb1a54a8e727b49690fb7e35cc21462a1fe700d08bcb0ff56eacb951bccd0bd"}})

05:17:36 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={0x308, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x140, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdadd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x95}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdf}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff8e1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe041}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x6c, 0x3, "f611d1f85f25dc57947d452bd4384cca5e676642fbba1eb3685df0eae3d0f3131beac42c4b6b6b85f15687d37f24fc9030a87b7da5f95c7bfb08581e9a6f35afa788f3bba11e3e76835c3af3622a9b557b78a3e47c8af9ab66fb0afe080dab4a565efbb4c23c622d"}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "7731300fd1a4e44b8a42693c907821f26671497aaf9f1960c2a08ba42508686c4809bebfbe67"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1c0}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "3224d709a2b9d5d2a91aee323c59f6d7d727037ea30a3c9aae02a2f62ad8f39a8a5bf056"}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc92}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa704}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x308}, 0x1, 0x0, 0x0, 0xc000}, 0x5)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf251100000008000300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x8000)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x20c, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2af7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58a0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd7}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa34}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d39}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40040}, 0x80)
r8 = syz_io_uring_complete(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000000)={0x90000000})
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r1, &(0x7f0000000900)={0x1})

05:17:36 executing program 3:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x64c, &(0x7f0000000200)={0x0, 0x1cc, 0x400, 0x0, 0x3cf, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x68a6, &(0x7f0000002500)={0x0, 0xc551, 0x4, 0x1, 0xcf, 0x0, r1}, &(0x7f0000002580), &(0x7f00000025c0)) (async)
syz_io_uring_setup(0x58f7, &(0x7f0000000300)={0x0, 0xed58, 0x0, 0x3, 0x144, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0)) (async)
r2 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$FUSE(r2, 0x0, 0xfffffffffffffc6e) (async)
syz_io_uring_setup(0x28bb, &(0x7f0000000000)={0x0, 0x2123, 0x800, 0x2, 0x102, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0)) (async)
r3 = openat$cuse(0xffffff9c, &(0x7f0000000400), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000000440)={0x2020, 0x0, <r4=>0x0}, 0x2020)
r5 = getuid() (async)
r6 = openat$cuse(0xffffff9c, &(0x7f0000002100), 0x2, 0x0)
read$FUSE(r6, 0x0, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
write$FUSE_ATTR(r6, &(0x7f0000002340)={0x78, 0xfffffffffffffffe, r7, {0x32c, 0x9, 0x0, {0x0, 0x7, 0x0, 0x2, 0x10001, 0x1ff, 0x2, 0xab, 0x3, 0x8000, 0xb1, r8, r9, 0x89c, 0x100}}}, 0x78)
write$FUSE_ATTR(r3, &(0x7f0000002480)={0x78, 0x0, r4, {0x8, 0x7ff, 0x0, {0x6, 0x2, 0x80000000, 0x9, 0x1, 0x79, 0x6, 0xcdfa, 0x8, 0x1000, 0x0, r5, r9, 0x51cc, 0x7fffffff}}}, 0x78)

05:17:36 executing program 0:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = epoll_create(0xf7)
epoll_pwait2(r0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)

05:17:36 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x500}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:36 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000040)={0x0, 0xffffff68, 0x4, 0x6000000, 0x2, [], [0x80, 0xde, 0x7, 0x192d], [0x5, 0x4, 0x6, 0x6388], [0x2, 0x9, 0x9, 0x3]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, <r2=>0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4, 0xa})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000300)={&(0x7f0000000200)=[r2, r4], 0x2, 0x0, r1, 0x40, 0x1fffc00, 0x1, 0x3f, {0x2aba, 0x8ca, 0x1, 0x4, 0x0, 0x0, 0x40, 0x5, 0xffff, 0x1, 0x764, 0x3, 0x1, 0xc, "efb1a54a8e727b49690fb7e35cc21462a1fe700d08bcb0ff56eacb951bccd0bd"}})

05:17:36 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={0x308, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x140, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdadd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x95}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdf}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff8e1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe041}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x6c, 0x3, "f611d1f85f25dc57947d452bd4384cca5e676642fbba1eb3685df0eae3d0f3131beac42c4b6b6b85f15687d37f24fc9030a87b7da5f95c7bfb08581e9a6f35afa788f3bba11e3e76835c3af3622a9b557b78a3e47c8af9ab66fb0afe080dab4a565efbb4c23c622d"}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "7731300fd1a4e44b8a42693c907821f26671497aaf9f1960c2a08ba42508686c4809bebfbe67"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1c0}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "3224d709a2b9d5d2a91aee323c59f6d7d727037ea30a3c9aae02a2f62ad8f39a8a5bf056"}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc92}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa704}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x308}, 0x1, 0x0, 0x0, 0xc000}, 0x5)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf251100000008000300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x8000)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x20c, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2af7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58a0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd7}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa34}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d39}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40040}, 0x80)
r8 = syz_io_uring_complete(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000000)={0x90000000})
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r1, &(0x7f0000000900)={0x1})
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={0x308, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x140, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdadd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x95}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdf}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff8e1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe041}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x6c, 0x3, "f611d1f85f25dc57947d452bd4384cca5e676642fbba1eb3685df0eae3d0f3131beac42c4b6b6b85f15687d37f24fc9030a87b7da5f95c7bfb08581e9a6f35afa788f3bba11e3e76835c3af3622a9b557b78a3e47c8af9ab66fb0afe080dab4a565efbb4c23c622d"}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "7731300fd1a4e44b8a42693c907821f26671497aaf9f1960c2a08ba42508686c4809bebfbe67"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1c0}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "3224d709a2b9d5d2a91aee323c59f6d7d727037ea30a3c9aae02a2f62ad8f39a8a5bf056"}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc92}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa704}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x308}, 0x1, 0x0, 0x0, 0xc000}, 0x5) (async)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf251100000008000300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) (async)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) (async)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x20c, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2af7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58a0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd7}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa34}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d39}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async)
syz_io_uring_complete(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000000)={0x90000000}) (async)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r1, &(0x7f0000000900)={0x1}) (async)

05:17:36 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x0, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:36 executing program 0:
syz_io_uring_setup(0x6b14, &(0x7f0000000040)={0x0, 0xa714, 0x200}, &(0x7f0000000000), &(0x7f00000001c0))

05:17:36 executing program 4:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = epoll_create(0xf7)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0, 0x0)

05:17:36 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x600}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:37 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x10000, 0x400200)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x5, 0x4000000000000195, 0x1})
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:37 executing program 1:
syz_io_uring_setup(0x6b14, &(0x7f0000000040)={0x0, 0xa714, 0x200}, &(0x7f0000000000), &(0x7f00000001c0))

05:17:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000dc0)={&(0x7f00000002c0)=[<r2=>0x0], &(0x7f0000000140)=[{}, {}], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0xa, 0x1})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000e80)=ANY=[@ANYBLOB="f0cc135d3d242a0b910941d4ef4c77a92e864b5ed4984f926e9784fd7ad2fae748f52d24f7ad0966adf571f12ffb6a3bca6d263b16197ed0d5f5f81ed9f35104c836ca5e06b7efe6605e28ad9a62d4eceaf39ec57ef30b8514007ccb40d2d50b24b6306ba3776993edb85062947e238eb34fc9d6e76a9521083e6046c772e945ee03d81ae3a767ab2a9fc72fea41980132eed3681121f61ef597a60c75010375aef01d9644940c7e25c46a0c9593539d7966c7395ba38632645153b3728a0462b32a7304de4a39afaa185c593d16dcdf8f3775d0d212aeddb06b75d36a36ae8a441cae5c9f2086f4e35be32f50273f80e0bcdca16667c7db94f663b6a3aa999c88957a5c", @ANYRES16=r4, @ANYBLOB="0100000000000000000004000000"], 0x14}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r7, @ANYBLOB="0400130072efcbe7d19cd2c2c9bc11ce1c9bbb08f42427cd01019d9a1ac96d8df6b3456ccbbda5c86efc0d3b169b9b2fa1804900d2fc3d485ebd4510f0774bf875fc74f5a32c3437c865cca9b02e5371a31922c56f5680ddb753cee91812469dca2a4a61637e2cfdc946552744dbe5e985c323d43d0b27b3a56f34f49d23c45bb958fc5c01365ca41e31f7cf168ceef94fc7ad11fd8b8121f6ce3caa7f37dff094b217e3c61ca648c1bf59313665686e90117d32c99b936c33150b5d87d3"], 0x20}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="20002abd700800fa6f0000002d69000002f71bf4", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x40)
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000240)={r2, 0x0, <r8=>0x0})
r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
r10 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r11=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000480)={r11, 0x0, <r12=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12})
r13 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r14 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r15=>0x0], 0x0, 0x0, 0x0, 0x1})
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="ef", @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1799730a19763144df255300000008000300", @ANYRES32=r7, @ANYBLOB="0c009900020000007b000000"], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x1)
ioctl$DRM_IOCTL_MODE_GETPLANE(r13, 0xc02064b6, &(0x7f0000000280)={r15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3c3c3c3c3c3c6b7, 0x0, 0x4, 0x0, r15})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc00c64b5, &(0x7f0000000b00)={&(0x7f0000000ac0)=[<r16=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f0000000b80)={&(0x7f0000000b40)=[0x0], 0x1, r8, <r17=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan1\x00'})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000c40)={r16, r12, r17, 0x0, 0x0, 0x1, &(0x7f0000000c00)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000000c0)={0x0, 0x0, r12})

05:17:37 executing program 2:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = epoll_create(0xf7)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0, 0x0)

05:17:37 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x604}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:37 executing program 3:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x10000, 0x8, 0x2, 0xa4bf, 0xfffffffffffffffd, 0x5ff, 0x7, 0xffff}, &(0x7f0000000140)={0x3eb8507e, 0x2, 0x7d, 0x20, 0x3, 0x1, 0x6, 0x3}, &(0x7f0000000280)={0x5, 0x5, 0x1ff, 0x5, 0x7, 0x5, 0x5}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xfffffc00, 0x5]}, 0x8})
r1 = syz_io_uring_setup(0x19f0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x400080, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000000))
syz_io_uring_setup(0x1749, &(0x7f0000000040)={0x0, 0xb2f5, 0x40, 0x1, 0x59, 0x0, r1}, &(0x7f00000000c0), &(0x7f00000001c0))

05:17:37 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x0, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:37 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x0, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:37 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x0, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:37 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x10000, 0x400200)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x5, 0x4000000000000195, 0x1}) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:37 executing program 3:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = epoll_create(0xf7)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0, 0x0)

05:17:37 executing program 2:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000100)={0x10000, 0x8, 0x2, 0xa4bf, 0xfffffffffffffffd, 0x5ff, 0x7, 0xffff}, &(0x7f0000000140)={0x3eb8507e, 0x2, 0x7d, 0x20, 0x3, 0x1, 0x6, 0x3}, &(0x7f0000000280)={0x5, 0x5, 0x1ff, 0x5, 0x7, 0x5, 0x5}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xfffffc00, 0x5]}, 0x8}) (async)
r1 = syz_io_uring_setup(0x19f0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x400080, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000000))
syz_io_uring_setup(0x1749, &(0x7f0000000040)={0x0, 0xb2f5, 0x40, 0x1, 0x59, 0x0, r1}, &(0x7f00000000c0), &(0x7f00000001c0))

05:17:37 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:37 executing program 0:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = epoll_create(0xf7)
epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

05:17:37 executing program 2:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x0, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:37 executing program 3:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x21b3, &(0x7f0000000000)={0x0, 0x88c4, 0x800, 0x3, 0x78, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:37 executing program 1:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:37 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x700}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000dc0)={&(0x7f00000002c0)=[<r2=>0x0], &(0x7f0000000140)=[{}, {}], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0xa, 0x1})
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="0100000000000000000004000000"], 0x14}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r7, @ANYBLOB="0400130072efcbe7d19cd2c2c9bc11ce1c9bbb08f42427cd01019d9a1ac96d8df6b3456ccbbda5c86efc0d3b169b9b2fa1804900d2fc3d485ebd4510f0774bf875fc74f5a32c3437c865cca9b02e5371a31922c56f5680ddb753cee91812469dca2a4a61637e2cfdc946552744dbe5e985c323d43d0b27b3a56f34f49d23c45bb958fc5c01365ca41e31f7cf168ceef94fc7ad11fd8b8121f6ce3caa7f37dff094b217e3c61ca648c1bf59313665686e90117d32c99b936c33150b5d87d3"], 0x20}}, 0x0) (async)
sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="20002abd700800fa6f0000002d69000002f71bf4", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x40) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000240)={r2, 0x0, <r8=>0x0}) (async)
r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0) (async)
r10 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r11=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000480)={r11, 0x0, <r12=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12})
r13 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r14 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r15=>0x0], 0x0, 0x0, 0x0, 0x1})
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="ef", @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) (async)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1799730a19763144df255300000008000300", @ANYRES32=r7, @ANYBLOB="0c009900020000007b000000"], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x1) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r13, 0xc02064b6, &(0x7f0000000280)={r15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3c3c3c3c3c3c6b7, 0x0, 0x4, 0x0, r15})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc00c64b5, &(0x7f0000000b00)={&(0x7f0000000ac0)=[<r16=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f0000000b80)={&(0x7f0000000b40)=[0x0], 0x1, r8, <r17=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan1\x00'})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000c40)={r16, r12, r17, 0x0, 0x0, 0x1, &(0x7f0000000c00)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000000c0)={0x0, 0x0, r12})

05:17:37 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x101100, 0x0)
write$yama_ptrace_scope(r1, &(0x7f00000000c0)='3\x00', 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x3, 0x2, 0x4, 0x1})
write$yama_ptrace_scope(r0, 0x0, 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$yama_ptrace_scope(r2, &(0x7f0000000000)='3\x00', 0x2)

05:17:37 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x0, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:37 executing program 4:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x21b3, &(0x7f0000000000)={0x0, 0x88c4, 0x800, 0x3, 0x78, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:37 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x900}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:37 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x101100, 0x0)
write$yama_ptrace_scope(r1, &(0x7f00000000c0)='3\x00', 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x3, 0x2, 0x4, 0x1})
write$yama_ptrace_scope(r0, 0x0, 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$yama_ptrace_scope(r2, &(0x7f0000000000)='3\x00', 0x2)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
openat$zero(0xffffff9c, &(0x7f0000000080), 0x101100, 0x0) (async)
write$yama_ptrace_scope(r1, &(0x7f00000000c0)='3\x00', 0x2) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x3, 0x2, 0x4, 0x1}) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
write$yama_ptrace_scope(r2, &(0x7f0000000000)='3\x00', 0x2) (async)

05:17:37 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000240), 0x6001, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, <r2=>0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x1, 0x4, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000280)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000340)=[0x0, <r6=>0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x3, 0x6})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000200)={0x0, 0x0, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f0000000480)=[<r8=>0x0, 0x0, 0x0, <r9=>0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), &(0x7f0000000380), 0x5, 0x9})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={&(0x7f00000001c0)=[0x0, r2, r5], 0x3, r7, r9, 0x200, 0xa3ec, 0x2, 0x6, {0x2, 0x5, 0x5, 0x0, 0x1, 0x3e, 0x6, 0x1, 0x4, 0x3, 0x9, 0x9, 0xffff2fa6, 0xfffffffe, "f99975f5019b7f3bfb2e66255bc269eb3ad6a9153713e8391ba1b2d95ebfb5ee"}})
r10 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc00c64b5, &(0x7f0000000640)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0, 0x0], 0x8})
ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f00000006c0)={r11, r6, r8, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:37 executing program 3:
r0 = syz_io_uring_setup(0x35d9, &(0x7f0000000000)={0x0, 0x73eb, 0x600, 0x3, 0x392}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x46f5, &(0x7f0000000200)={0x0, 0x1c87, 0x1000, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000100))

05:17:37 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x0, 0x17, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:37 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x40a040)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x6, 0x2, [0x0, <r1=>0x0], [0x81, 0x3, 0xfffffffe, 0xfff], [0xfffffffa, 0x101, 0x1, 0x9], [0x5, 0x0, 0xfffffffffffffffe, 0x4]})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000140)={0x0, 0x40, 0x101, 0x80000001, 0x2, [0x0, 0x0, <r3=>0x0], [0x261, 0x1, 0x2, 0x5879], [0x3, 0x8, 0x101, 0x85], [0x8, 0x18f, 0x8, 0x7fffffffffffffff]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={<r4=>0x0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000200)={0x0, 0x7, 0x6, 0x7ff, 0x2, [r1, r2, r3, r4], [0x79, 0x5, 0x0, 0x56], [0x5, 0x0, 0x7f, 0x3f], [0x7, 0x0, 0x0, 0x7f]})
r5 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r5, 0x0, 0x0)

05:17:38 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xa00}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:38 executing program 4:
r0 = syz_io_uring_setup(0x35d9, &(0x7f0000000000)={0x0, 0x73eb, 0x600, 0x3, 0x392}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x46f5, &(0x7f0000000200)={0x0, 0x1c87, 0x1000, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000100))

05:17:38 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000240), 0x6001, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, <r2=>0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x1, 0x4, 0x5, 0x3}) (async)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async, rerun: 32)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000280)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000340)=[0x0, <r6=>0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x3, 0x6}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000200)={0x0, 0x0, <r7=>0x0}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f0000000480)=[<r8=>0x0, 0x0, 0x0, <r9=>0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), &(0x7f0000000380), 0x5, 0x9})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={&(0x7f00000001c0)=[0x0, r2, r5], 0x3, r7, r9, 0x200, 0xa3ec, 0x2, 0x6, {0x2, 0x5, 0x5, 0x0, 0x1, 0x3e, 0x6, 0x1, 0x4, 0x3, 0x9, 0x9, 0xffff2fa6, 0xfffffffe, "f99975f5019b7f3bfb2e66255bc269eb3ad6a9153713e8391ba1b2d95ebfb5ee"}}) (async)
r10 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc00c64b5, &(0x7f0000000640)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0, 0x0], 0x8})
ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f00000006c0)={r11, r6, r8, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:38 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x40a040)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x6, 0x2, [0x0, <r1=>0x0], [0x81, 0x3, 0xfffffffe, 0xfff], [0xfffffffa, 0x101, 0x1, 0x9], [0x5, 0x0, 0xfffffffffffffffe, 0x4]})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000140)={0x0, 0x40, 0x101, 0x80000001, 0x2, [0x0, 0x0, <r3=>0x0], [0x261, 0x1, 0x2, 0x5879], [0x3, 0x8, 0x101, 0x85], [0x8, 0x18f, 0x8, 0x7fffffffffffffff]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={<r4=>0x0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000200)={0x0, 0x7, 0x6, 0x7ff, 0x2, [r1, r2, r3, r4], [0x79, 0x5, 0x0, 0x56], [0x5, 0x0, 0x7f, 0x3f], [0x7, 0x0, 0x0, 0x7f]})
r5 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r5, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x40a040) (async)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x6, 0x2, [], [0x81, 0x3, 0xfffffffe, 0xfff], [0xfffffffa, 0x101, 0x1, 0x9], [0x5, 0x0, 0xfffffffffffffffe, 0x4]}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)) (async)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000140)={0x0, 0x40, 0x101, 0x80000001, 0x2, [], [0x261, 0x1, 0x2, 0x5879], [0x3, 0x8, 0x101, 0x85], [0x8, 0x18f, 0x8, 0x7fffffffffffffff]}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)) (async)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000200)={0x0, 0x7, 0x6, 0x7ff, 0x2, [r1, r2, r3, r4], [0x79, 0x5, 0x0, 0x56], [0x5, 0x0, 0x7f, 0x3f], [0x7, 0x0, 0x0, 0x7f]}) (async)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$yama_ptrace_scope(r5, 0x0, 0x0) (async)

05:17:38 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xe00}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:38 executing program 1:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003, 0x2010, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="808464cc5f57a4ef88245f22480ce50020583d019d8b44870e0a6532078902606c1f392adacf1ff3156473ae7b21542ab621fa5b785ef3c53a764207dee2ef7af60733a512eaa5b1c5e7de17c4a6a7d31912eaf691cc8c9270930b60f444c40610238b36e3c1f950bfefcc8b5f9e3f4a2e1edb245c4d7984d82a75716c2c99016779978a1e29a854e48f419b6fcacb3d48beda4208", @ANYRES16=r2, @ANYBLOB="010000000000000000005400000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
socketpair(0x10, 0x80000, 0x14, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x22}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000081}, 0x801)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x349}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x81}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
syz_io_uring_setup(0x4712, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x32e}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:38 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x0, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:38 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:38 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf00}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:38 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000000})
epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:38 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x1500}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:38 executing program 4:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003, 0x2010, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="808464cc5f57a4ef88245f22480ce50020583d019d8b44870e0a6532078902606c1f392adacf1ff3156473ae7b21542ab621fa5b785ef3c53a764207dee2ef7af60733a512eaa5b1c5e7de17c4a6a7d31912eaf691cc8c9270930b60f444c40610238b36e3c1f950bfefcc8b5f9e3f4a2e1edb245c4d7984d82a75716c2c99016779978a1e29a854e48f419b6fcacb3d48beda4208", @ANYRES16=r2, @ANYBLOB="010000000000000000005400000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
socketpair(0x10, 0x80000, 0x14, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x22}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000081}, 0x801)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x349}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x81}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
syz_io_uring_setup(0x4712, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x32e}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:38 executing program 0:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:38 executing program 1:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = epoll_create(0xf7)
epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

05:17:38 executing program 0:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003, 0x2010, r0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="808464cc5f57a4ef88245f22480ce50020583d019d8b44870e0a6532078902606c1f392adacf1ff3156473ae7b21542ab621fa5b785ef3c53a764207dee2ef7af60733a512eaa5b1c5e7de17c4a6a7d31912eaf691cc8c9270930b60f444c40610238b36e3c1f950bfefcc8b5f9e3f4a2e1edb245c4d7984d82a75716c2c99016779978a1e29a854e48f419b6fcacb3d48beda4208", @ANYRES16=r2, @ANYBLOB="010000000000000000005400000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
socketpair(0x10, 0x80000, 0x14, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x22}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000081}, 0x801) (async)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x349}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x81}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async)
syz_io_uring_setup(0x4712, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x32e}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:38 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000100)='0\x00', 0x2)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2793, 0xa000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), &(0x7f00000002c0)=[0x0], 0x4, 0x5, 0x0, 0x1})
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0xfffffffffffffdee)
write$yama_ptrace_scope(r0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x7, 0x4, 0x1, 0x1})
write$yama_ptrace_scope(r0, &(0x7f00000000c0)='1\x00', 0x2)

05:17:38 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x0, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:38 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x1f00}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:38 executing program 3:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x19f0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, r0}, &(0x7f0000000200), &(0x7f00000001c0))
syz_io_uring_setup(0xe9e, &(0x7f0000000500)={0x0, 0xb1d7, 0x800, 0x1, 0x58}, &(0x7f0000000580), &(0x7f00000005c0))
syz_io_uring_setup(0x7490, &(0x7f0000000000)={0x0, 0xab24, 0x4, 0x1, 0x39a, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0))
r2 = syz_io_uring_setup(0x390a, &(0x7f0000000100)={0x0, 0xdc81, 0x200, 0xfffffffc, 0x4003cc, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000300))
syz_io_uring_setup(0x66a8, &(0x7f0000000340)={0x0, 0xf665, 0x20, 0x0, 0x2a3, 0x0, r2}, &(0x7f0000000180), &(0x7f00000003c0))
syz_io_uring_setup(0x5664, &(0x7f0000000900)={0x0, 0x20db, 0x200, 0x2, 0x48, 0x0, r0}, &(0x7f0000000980), &(0x7f00000009c0))
syz_io_uring_setup(0x5, &(0x7f0000000400)={0x0, 0x784b, 0x800, 0x0, 0x2f1, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0))
r3 = syz_io_uring_setup(0x55dc, &(0x7f0000000600)={0x0, 0xc54f, 0x800, 0x2, 0x29a, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0))
syz_io_uring_setup(0x6930, &(0x7f0000000700)={0x0, 0xeada, 0x100, 0x1, 0x168, 0x0, r3}, &(0x7f0000000780), &(0x7f00000007c0))
syz_io_uring_setup(0x5bb6, &(0x7f0000000800)={0x0, 0x24dc, 0x200, 0x0, 0x138, 0x0, r3}, &(0x7f0000000880), &(0x7f00000008c0))

05:17:38 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000100)='0\x00', 0x2)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2793, 0xa000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), &(0x7f00000002c0)=[0x0], 0x4, 0x5, 0x0, 0x1})
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0xfffffffffffffdee)
write$yama_ptrace_scope(r0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x7, 0x4, 0x1, 0x1})
write$yama_ptrace_scope(r0, &(0x7f00000000c0)='1\x00', 0x2)

05:17:38 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x0, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:38 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x0, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:38 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000100)='0\x00', 0x2) (async)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2793, 0xa000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), &(0x7f00000002c0)=[0x0], 0x4, 0x5, 0x0, 0x1}) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0xfffffffffffffdee) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x7, 0x4, 0x1, 0x1})
write$yama_ptrace_scope(r0, &(0x7f00000000c0)='1\x00', 0x2)

05:17:38 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x0, 0x0, r1}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:38 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:39 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='0\x00', 0xffffffffffffff49)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$cuse(0xffffff9c, &(0x7f0000003240), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2)
mmap$qrtrtun(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x100010, r1, 0x1)
write$yama_ptrace_scope(r1, &(0x7f00000000c0)='2\x00', 0x2)

05:17:39 executing program 3:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x19f0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, r0}, &(0x7f0000000200), &(0x7f00000001c0))
syz_io_uring_setup(0xe9e, &(0x7f0000000500)={0x0, 0xb1d7, 0x800, 0x1, 0x58}, &(0x7f0000000580), &(0x7f00000005c0))
syz_io_uring_setup(0x7490, &(0x7f0000000000)={0x0, 0xab24, 0x4, 0x1, 0x39a, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0))
r2 = syz_io_uring_setup(0x390a, &(0x7f0000000100)={0x0, 0xdc81, 0x200, 0xfffffffc, 0x4003cc, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000300))
syz_io_uring_setup(0x66a8, &(0x7f0000000340)={0x0, 0xf665, 0x20, 0x0, 0x2a3, 0x0, r2}, &(0x7f0000000180), &(0x7f00000003c0))
syz_io_uring_setup(0x5664, &(0x7f0000000900)={0x0, 0x20db, 0x200, 0x2, 0x48, 0x0, r0}, &(0x7f0000000980), &(0x7f00000009c0))
syz_io_uring_setup(0x5, &(0x7f0000000400)={0x0, 0x784b, 0x800, 0x0, 0x2f1, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0))
r3 = syz_io_uring_setup(0x55dc, &(0x7f0000000600)={0x0, 0xc54f, 0x800, 0x2, 0x29a, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0))
syz_io_uring_setup(0x6930, &(0x7f0000000700)={0x0, 0xeada, 0x100, 0x1, 0x168, 0x0, r3}, &(0x7f0000000780), &(0x7f00000007c0))
syz_io_uring_setup(0x5bb6, &(0x7f0000000800)={0x0, 0x24dc, 0x200, 0x0, 0x138, 0x0, r3}, &(0x7f0000000880), &(0x7f00000008c0))
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_io_uring_setup(0x19f0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, r0}, &(0x7f0000000200), &(0x7f00000001c0)) (async)
syz_io_uring_setup(0xe9e, &(0x7f0000000500)={0x0, 0xb1d7, 0x800, 0x1, 0x58}, &(0x7f0000000580), &(0x7f00000005c0)) (async)
syz_io_uring_setup(0x7490, &(0x7f0000000000)={0x0, 0xab24, 0x4, 0x1, 0x39a, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) (async)
syz_io_uring_setup(0x390a, &(0x7f0000000100)={0x0, 0xdc81, 0x200, 0xfffffffc, 0x4003cc, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000300)) (async)
syz_io_uring_setup(0x66a8, &(0x7f0000000340)={0x0, 0xf665, 0x20, 0x0, 0x2a3, 0x0, r2}, &(0x7f0000000180), &(0x7f00000003c0)) (async)
syz_io_uring_setup(0x5664, &(0x7f0000000900)={0x0, 0x20db, 0x200, 0x2, 0x48, 0x0, r0}, &(0x7f0000000980), &(0x7f00000009c0)) (async)
syz_io_uring_setup(0x5, &(0x7f0000000400)={0x0, 0x784b, 0x800, 0x0, 0x2f1, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0)) (async)
syz_io_uring_setup(0x55dc, &(0x7f0000000600)={0x0, 0xc54f, 0x800, 0x2, 0x29a, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0)) (async)
syz_io_uring_setup(0x6930, &(0x7f0000000700)={0x0, 0xeada, 0x100, 0x1, 0x168, 0x0, r3}, &(0x7f0000000780), &(0x7f00000007c0)) (async)
syz_io_uring_setup(0x5bb6, &(0x7f0000000800)={0x0, 0x24dc, 0x200, 0x0, 0x138, 0x0, r3}, &(0x7f0000000880), &(0x7f00000008c0)) (async)

05:17:39 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:39 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='0\x00', 0xffffffffffffff49)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$cuse(0xffffff9c, &(0x7f0000003240), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2)
mmap$qrtrtun(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x100010, r1, 0x1)
write$yama_ptrace_scope(r1, &(0x7f00000000c0)='2\x00', 0x2)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='0\x00', 0xffffffffffffff49) (async)
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$cuse(0xffffff9c, &(0x7f0000003240), 0x2, 0x0) (async)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) (async)
mmap$qrtrtun(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x100010, r1, 0x1) (async)
write$yama_ptrace_scope(r1, &(0x7f00000000c0)='2\x00', 0x2) (async)

05:17:39 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x2000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:39 executing program 2:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000380)={0x18, r1, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x2}]})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000003c0)={0x20000019})
r2 = syz_io_uring_setup(0x19f0, &(0x7f0000000400)={0x0, 0x8f61, 0x800, 0x5}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x21f0, &(0x7f0000000200)={0x0, 0x71b0, 0x80, 0x2, 0x88}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x6bc7, &(0x7f0000000000)={0x0, 0x3d77, 0x2, 0x1, 0x2f4, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:39 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000000}) (async)
epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:39 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x10})
write$yama_ptrace_scope(r0, &(0x7f0000000080)='3\x00', 0x2)

05:17:39 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17}, &(0x7f0000000680), &(0x7f00000006c0))

05:17:39 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x2100}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:39 executing program 2:
openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = epoll_create(0xf7)
epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

05:17:39 executing program 3:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000380)={0x18, r1, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x2}]})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000003c0)={0x20000019})
r2 = syz_io_uring_setup(0x19f0, &(0x7f0000000400)={0x0, 0x8f61, 0x800, 0x5}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x21f0, &(0x7f0000000200)={0x0, 0x71b0, 0x80, 0x2, 0x88}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x6bc7, &(0x7f0000000000)={0x0, 0x3d77, 0x2, 0x1, 0x2f4, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:39 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, 0x0, &(0x7f00000006c0))

05:17:39 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x10})
write$yama_ptrace_scope(r0, &(0x7f0000000080)='3\x00', 0x2)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x10}) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='3\x00', 0x2) (async)

05:17:39 executing program 3:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000380)={0x18, r1, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x2}]})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000003c0)={0x20000019}) (async)
r2 = syz_io_uring_setup(0x19f0, &(0x7f0000000400)={0x0, 0x8f61, 0x800, 0x5}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x21f0, &(0x7f0000000200)={0x0, 0x71b0, 0x80, 0x2, 0x88}, &(0x7f0000000280), &(0x7f00000002c0)) (async)
syz_io_uring_setup(0x6bc7, &(0x7f0000000000)={0x0, 0x3d77, 0x2, 0x1, 0x2f4, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:39 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x2200}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:39 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, 0x0, &(0x7f00000006c0))

05:17:39 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:39 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x2f6e, 0x200}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:39 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x2300}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:39 executing program 1:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:39 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, 0x0, &(0x7f00000006c0))

05:17:39 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x4000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:40 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x2f6e, 0x200}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:40 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:40 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x4100}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:40 executing program 0:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), 0x0)

05:17:40 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:40 executing program 3:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x8000000)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, <r1=>0x0, <r2=>0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0]})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={0x0, r2, r2, 0x9, 0x8c7, 0xffff, 0x8, 0x2, 0x5b5, 0x6, 0x8, 0x6})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000240)={&(0x7f0000000200)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r3, r1, r2, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2})
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))

05:17:40 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x4200}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:40 executing program 4:
write$yama_ptrace_scope(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$isdn(0x22, 0x3, 0x25)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000080009000000e100d36078fa092dc8e51eb11cf0971d858ea1627e96af0664c34b479c3ca62403f6928b122904dfd3960bf8d0ce52568627d045d475a1f39c5119474801623ce16193ff19c35dddf9c9acc558586200ff7514d45abd7272af9bf205c3360079bcd168e1c546c0855e9e6d2775832fa6aff5cd83038a48d8afd9b3b1286e7423fd9bc856fc05482d16ba6fd5c66637f51cd985dde73a081d7541"], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0)
r5 = openat$drirender128(0xffffff9c, &(0x7f0000000340), 0x402200, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x4})
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8002001}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x74b}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x4215765cd249c63a)
bind$isdn(r0, &(0x7f0000000000)={0x22, 0x1f, 0x66, 0x0, 0x1}, 0x6)

05:17:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, <r1=>0x0, 0x0, 0x0], 0x5})
r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000640)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0], 0x9, 0x1, 0x1, 0x2})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000180)={&(0x7f0000000140)=[<r6=>0x0, 0x0, 0x0, 0x0], 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f00000001c0)=[<r7=>0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x1, 0x4, 0x3, 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r6, r5, r7, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={r1, r5, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:40 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x6000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:40 executing program 0:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x8000000)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, <r1=>0x0, <r2=>0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0]})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={0x0, r2, r2, 0x9, 0x8c7, 0xffff, 0x8, 0x2, 0x5b5, 0x6, 0x8, 0x6})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000240)={&(0x7f0000000200)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r3, r1, r2, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000000)={r2}) (async)
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))

05:17:40 executing program 4:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), 0x0)

[ 3372.240543][T25773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
05:17:40 executing program 1:
write$yama_ptrace_scope(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$isdn(0x22, 0x3, 0x25)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000080009000000e100d36078fa092dc8e51eb11cf0971d858ea1627e96af0664c34b479c3ca62403f6928b122904dfd3960bf8d0ce52568627d045d475a1f39c5119474801623ce16193ff19c35dddf9c9acc558586200ff7514d45abd7272af9bf205c3360079bcd168e1c546c0855e9e6d2775832fa6aff5cd83038a48d8afd9b3b1286e7423fd9bc856fc05482d16ba6fd5c66637f51cd985dde73a081d7541"], 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000080009000000e100d36078fa092dc8e51eb11cf0971d858ea1627e96af0664c34b479c3ca62403f6928b122904dfd3960bf8d0ce52568627d045d475a1f39c5119474801623ce16193ff19c35dddf9c9acc558586200ff7514d45abd7272af9bf205c3360079bcd168e1c546c0855e9e6d2775832fa6aff5cd83038a48d8afd9b3b1286e7423fd9bc856fc05482d16ba6fd5c66637f51cd985dde73a081d7541"], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0)
openat$drirender128(0xffffff9c, &(0x7f0000000340), 0x402200, 0x0) (async)
r5 = openat$drirender128(0xffffff9c, &(0x7f0000000340), 0x402200, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x4}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x4})
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8002001}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x74b}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x4215765cd249c63a)
bind$isdn(r0, &(0x7f0000000000)={0x22, 0x1f, 0x66, 0x0, 0x1}, 0x6)

05:17:40 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, <r1=>0x0, 0x0, 0x0], 0x5})
r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000640)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0], 0x9, 0x1, 0x1, 0x2})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000180)={&(0x7f0000000140)=[<r6=>0x0, 0x0, 0x0, 0x0], 0x4}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f00000001c0)=[<r7=>0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x1, 0x4, 0x3, 0x1}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r6, r5, r7, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={r1, r5, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:40 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x2, &(0x7f0000000280)={0x0})

05:17:40 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xe4f5}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:40 executing program 2:
syz_io_uring_setup(0x7acd, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x477b, &(0x7f0000000000)={0x0, 0xd7de, 0x8, 0x1, 0x11e}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x709f, &(0x7f0000000300)={0x0, 0x4768, 0x8a5, 0x2, 0x28d}, &(0x7f0000000380), &(0x7f00000003c0))
syz_io_uring_setup(0x3370, &(0x7f0000000400)={0x0, 0x3ebb, 0x1000, 0x0, 0xd3, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x56fc, &(0x7f0000000200)={0x0, 0x7134, 0x20, 0x3, 0xf4, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0))

05:17:40 executing program 3:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x105000, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r1})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000040)={0x0, 0x0, r3})

05:17:40 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x10, &(0x7f0000000280)={0x0})

[ 3372.493925][T25789] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3372.518542][T25792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
05:17:40 executing program 1:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), 0x0)

05:17:40 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='0\x00', 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:40 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x20000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:40 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x541b, &(0x7f0000000280)={0x0})

05:17:40 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='0\x00', 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:40 executing program 2:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x105000, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r1})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000040)={0x0, 0x0, r3})
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) (async)
openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x105000, 0x0) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r1}) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f00000000c0)) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000040)={0x0, 0x0, r3}) (async)

05:17:40 executing program 4:
syz_io_uring_setup(0x7acd, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) (async)
r0 = syz_io_uring_setup(0x477b, &(0x7f0000000000)={0x0, 0xd7de, 0x8, 0x1, 0x11e}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x709f, &(0x7f0000000300)={0x0, 0x4768, 0x8a5, 0x2, 0x28d}, &(0x7f0000000380), &(0x7f00000003c0))
syz_io_uring_setup(0x3370, &(0x7f0000000400)={0x0, 0x3ebb, 0x1000, 0x0, 0xd3, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0)) (async, rerun: 64)
syz_io_uring_setup(0x56fc, &(0x7f0000000200)={0x0, 0x7134, 0x20, 0x3, 0xf4, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) (rerun: 64)

05:17:40 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x100000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x5421, &(0x7f0000000280)={0x0})

05:17:40 executing program 3:
r0 = syz_io_uring_setup(0x79ed, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000080), &(0x7f0000000900))
syz_io_uring_setup(0x449e, &(0x7f0000000200)={0x0, 0x1daa}, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x3906, &(0x7f0000000400)={0x0, 0xcdd4}, &(0x7f0000000480), 0x0)
syz_io_uring_setup(0x2585, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
syz_io_uring_setup(0x3b92, &(0x7f0000000100)={0x0, 0x226e, 0x40, 0x0, 0x75}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x5aa1, &(0x7f0000000300)={0x0, 0xef3a, 0x1, 0x0, 0x1bd}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000)
syz_io_uring_setup(0x6e69, &(0x7f0000000b00)={0x0, 0xb2f4, 0x2, 0x2, 0x32f, 0x0, r0}, &(0x7f0000000b80), &(0x7f0000000bc0))
syz_io_uring_setup(0x309d, &(0x7f0000000600)={0x0, 0x3864, 0x8, 0x1, 0x17, 0x0, r1}, &(0x7f0000000680), 0x0)

05:17:40 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:41 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x200000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x5450, &(0x7f0000000280)={0x0})

05:17:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
r2 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$FUSE(r2, 0x0, 0xfffffffffffffc6e)
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000040)={r1, 0xffff, 0xba, 0x2, 0x2, [0x0, 0x0, <r3=>0x0], [0x40, 0x7ff, 0x18ad, 0x4], [0xe46, 0x800, 0x6, 0x1], [0x7, 0x7, 0x2]})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000000c0)={r1, 0x3, 0x7, 0xffffff08, 0x1, [<r4=>0x0], [0x81, 0x9, 0x0, 0x9], [0x5, 0xfff, 0x6, 0x1], [0x101, 0x7f, 0x9, 0x61d]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06464b8, &(0x7f0000000140)={r1, 0x5, 0x800, 0x1, 0x0, [r3, 0x0, r4], [0x469, 0x2, 0x8, 0x10000], [0x4, 0x3f, 0x8, 0x3], [0x7, 0xee, 0x313, 0x80]})

05:17:41 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x400000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:41 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x5451, &(0x7f0000000280)={0x0})

05:17:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, <r1=>0x0, 0x0, 0x0, <r2=>0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x7, 0x1, 0x2, 0x2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={<r3=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000001c0)={0x0, <r4=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)={0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000003c0)={0x0, 0x1f, 0xfffffffd, 0xff, 0x0, [], [0xe49, 0x80, 0x5, 0x6], [0x2, 0x8, 0x7, 0x9], [0xab, 0xd859, 0xd328, 0x8]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000240)={r1, 0x1, 0x5, 0x7, 0x1, [r3, 0x0, r4, r5], [0x8, 0x9, 0x3, 0xfafc], [0x1, 0x69e4, 0xede, 0x101], [0x6, 0x9, 0xff, 0x6]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000002c0)={<r6=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000340)={r2, 0x9, 0x7fffffff, 0xfff, 0x3, [r3, r6, r3, r5], [0x80000000, 0x5, 0x8, 0xfffff51d], [0xee65, 0x1, 0x5, 0x5259], [0xffffffffffff0000, 0xffffffff, 0x0, 0x8000000000000001]})

05:17:41 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x600000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:41 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2)

05:17:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
openat$zero(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r2 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$FUSE(r2, 0x0, 0xfffffffffffffc6e)
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000040)={r1, 0xffff, 0xba, 0x2, 0x2, [0x0, 0x0, <r3=>0x0], [0x40, 0x7ff, 0x18ad, 0x4], [0xe46, 0x800, 0x6, 0x1], [0x7, 0x7, 0x2]})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000000c0)={r1, 0x3, 0x7, 0xffffff08, 0x1, [<r4=>0x0], [0x81, 0x9, 0x0, 0x9], [0x5, 0xfff, 0x6, 0x1], [0x101, 0x7f, 0x9, 0x61d]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06464b8, &(0x7f0000000140)={r1, 0x5, 0x800, 0x1, 0x0, [r3, 0x0, r4], [0x469, 0x2, 0x8, 0x10000], [0x4, 0x3f, 0x8, 0x3], [0x7, 0xee, 0x313, 0x80]})

05:17:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, <r1=>0x0, 0x0, 0x0, <r2=>0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x7, 0x1, 0x2, 0x2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={<r3=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000001c0)={0x0, <r4=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)={0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000003c0)={0x0, 0x1f, 0xfffffffd, 0xff, 0x0, [], [0xe49, 0x80, 0x5, 0x6], [0x2, 0x8, 0x7, 0x9], [0xab, 0xd859, 0xd328, 0x8]}) (async)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000240)={r1, 0x1, 0x5, 0x7, 0x1, [r3, 0x0, r4, r5], [0x8, 0x9, 0x3, 0xfafc], [0x1, 0x69e4, 0xede, 0x101], [0x6, 0x9, 0xff, 0x6]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000002c0)={<r6=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000340)={r2, 0x9, 0x7fffffff, 0xfff, 0x3, [r3, r6, r3, r5], [0x80000000, 0x5, 0x8, 0xfffff51d], [0xee65, 0x1, 0x5, 0x5259], [0xffffffffffff0000, 0xffffffff, 0x0, 0x8000000000000001]})

05:17:41 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x70d7f5}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x5452, &(0x7f0000000280)={0x0})

05:17:41 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2)

05:17:41 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x70dff5}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140))
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, r5})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000040)={r5, r1, 0x2, 0x1000, 0x5})

05:17:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x5460, &(0x7f0000000280)={0x0})

05:17:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))

05:17:41 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x800000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:41 executing program 1:
openat$sysctl(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='3\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = mq_open(&(0x7f0000000000)='/proc/sys/kernel/yama/ptrace_scope\x00', 0x80, 0x4, &(0x7f0000000100)={0x1fd, 0x100, 0x1})
mq_getsetattr(r1, &(0x7f0000000140)={0x8000, 0x1ff, 0xedb9}, &(0x7f0000000180))

05:17:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0) (async)
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, r5}) (async)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000040)={r5, r1, 0x2, 0x1000, 0x5})

05:17:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x8933, &(0x7f0000000280)={0x0})

05:17:41 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x80ffff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=r1)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000180)={&(0x7f0000000140)=[<r2=>0x0], 0x1})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000480)={r5, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, r6, r1, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

05:17:41 executing program 3:
openat$sysctl(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='3\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = mq_open(&(0x7f0000000000)='/proc/sys/kernel/yama/ptrace_scope\x00', 0x80, 0x4, &(0x7f0000000100)={0x1fd, 0x100, 0x1})
mq_getsetattr(r1, &(0x7f0000000140)={0x8000, 0x1ff, 0xedb9}, &(0x7f0000000180))
openat$sysctl(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) (async)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='3\x00', 0x2) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
mq_open(&(0x7f0000000000)='/proc/sys/kernel/yama/ptrace_scope\x00', 0x80, 0x4, &(0x7f0000000100)={0x1fd, 0x100, 0x1}) (async)
mq_getsetattr(r1, &(0x7f0000000140)={0x8000, 0x1ff, 0xedb9}, &(0x7f0000000180)) (async)

05:17:41 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x95c000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x400448c9, &(0x7f0000000280)={0x0})

05:17:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300)) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=r1)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000180)={&(0x7f0000000140)=[<r2=>0x0], 0x1}) (async)
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0) (async)
r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000480)={r5, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, r6, r1, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

05:17:42 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x400448dd, &(0x7f0000000280)={0x0})

05:17:42 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='2\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2)

05:17:42 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xc09500}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:42 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, <r1=>0x0, 0x0, <r2=>0x0, <r3=>0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, <r4=>0x0], 0x5, 0x2, 0x3, 0x3})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000180)={r2, 0x4007, 0x6, 0x1, 0x0, [], [0x3, 0x10007fd, 0x3, 0x1ff], [0x9, 0xe926, 0x4, 0x9], [0x4, 0x6e4d, 0x4000000006, 0x5]})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, <r5=>0x0], 0x4})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000340)={r4, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000380)={r5, r6, r1, 0x3, 0x1, 0x9, 0x7, 0x8, 0x9, 0xcb, 0x834})
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000200)={r3})

05:17:42 executing program 2:
r0 = syz_io_uring_setup(0x19e9, &(0x7f0000000000)={0x0, 0x0, 0x20, 0xfffffffe}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x6b12, &(0x7f0000000080)={0x0, 0x8a2a, 0x0, 0x0, 0x87, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x444e, &(0x7f0000000200)={0x0, 0xfa9c, 0x8, 0x2, 0x2d5}, &(0x7f0000000280), &(0x7f00000002c0))

05:17:42 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xc0ffff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x2, &(0x7f0000000300))

05:17:42 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='2\x00', 0x2) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2)

05:17:42 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, <r1=>0x0, 0x0, <r2=>0x0, <r3=>0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, <r4=>0x0], 0x5, 0x2, 0x3, 0x3}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000180)={r2, 0x4007, 0x6, 0x1, 0x0, [], [0x3, 0x10007fd, 0x3, 0x1ff], [0x9, 0xe926, 0x4, 0x9], [0x4, 0x6e4d, 0x4000000006, 0x5]})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, <r5=>0x0], 0x4})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000340)={r4, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000380)={r5, r6, r1, 0x3, 0x1, 0x9, 0x7, 0x8, 0x9, 0xcb, 0x834}) (async)
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000200)={r3})

05:17:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x400454ca, &(0x7f0000000280)={0x0})

05:17:42 executing program 4:
read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/4, 0x4)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, <r1=>0x0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={<r2=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={<r3=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06464b8, &(0x7f0000000180)={0x0, 0x6, 0x4, 0x1, 0x3, [r1, r2, r3, r4], [0x0, 0x6d9, 0x9, 0x9], [0x7, 0x4, 0x9, 0xbf9], [0x6, 0x7, 0x8, 0x1]})

05:17:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000180)=[0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, <r3=>0x0, <r4=>0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0xa, 0x5, 0x2, 0x2})
r5 = syz_io_uring_complete(0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, <r6=>0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x9, 0x8})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r1, r6, <r7=>r1, 0x0, 0x0, 0x0, &(0x7f0000000180)})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, <r8=>0x0, 0x0, 0x0, <r9=>0x0, 0x0, 0x0, 0x0], 0xa})
ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000400)={r9, r4, r7, 0x9, 0x81, 0x1, 0x6, 0x3, 0x3, 0x1ff, 0x6, 0xff})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000480)={r8, r3, r2, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]})

05:17:42 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xe05701}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:42 executing program 2:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = syz_io_uring_complete(0x0)
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r1, 0x0, 0x5c)
syz_open_dev$dri(&(0x7f0000000380), 0x4, 0x200600)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1b8, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x18c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xda}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffc}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf22}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xf3e1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff7d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x39}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fff}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x435}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x54e3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x401}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffe00}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6916}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x48000)

05:17:42 executing program 0:
r0 = syz_io_uring_setup(0x19e9, &(0x7f0000000000)={0x0, 0x0, 0x20, 0xfffffffe}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x6b12, &(0x7f0000000080)={0x0, 0x8a2a, 0x0, 0x0, 0x87, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x444e, &(0x7f0000000200)={0x0, 0xfa9c, 0x8, 0x2, 0x2d5}, &(0x7f0000000280), &(0x7f00000002c0))

05:17:42 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x400454ca, &(0x7f0000000280)={0x0})

05:17:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x40046602, &(0x7f0000000280)={0x0})

05:17:42 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000180)=[0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, <r3=>0x0, <r4=>0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0xa, 0x5, 0x2, 0x2}) (async, rerun: 32)
r5 = syz_io_uring_complete(0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, <r6=>0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x9, 0x8})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r1, r6, <r7=>r1, 0x0, 0x0, 0x0, &(0x7f0000000180)}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, <r8=>0x0, 0x0, 0x0, <r9=>0x0, 0x0, 0x0, 0x0], 0xa})
ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000400)={r9, r4, r7, 0x9, 0x81, 0x1, 0x6, 0x3, 0x3, 0x1ff, 0x6, 0xff}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000480)={r8, r3, r2, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) (rerun: 64)

05:17:42 executing program 1:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r0 = syz_io_uring_complete(0x0)
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r1, 0x0, 0x5c) (async)
syz_open_dev$dri(&(0x7f0000000380), 0x4, 0x200600)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1b8, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x18c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xda}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffc}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf22}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xf3e1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff7d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x39}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fff}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x435}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x54e3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x401}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffe00}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6916}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x48000)

05:17:42 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x1000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:42 executing program 4:
clock_gettime(0x5, &(0x7f0000000140))
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xfffffffe}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:42 executing program 3:
read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/4, 0x4)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, <r1=>0x0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={<r2=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={<r3=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06464b8, &(0x7f0000000180)={0x0, 0x6, 0x4, 0x1, 0x3, [r1, r2, r3, r4], [0x0, 0x6d9, 0x9, 0x9], [0x7, 0x4, 0x9, 0xbf9], [0x6, 0x7, 0x8, 0x1]})
read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/4, 0x4) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300)) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r0}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)) (async)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06464b8, &(0x7f0000000180)={0x0, 0x6, 0x4, 0x1, 0x3, [r1, r2, r3, r4], [0x0, 0x6d9, 0x9, 0x9], [0x7, 0x4, 0x9, 0xbf9], [0x6, 0x7, 0x8, 0x1]}) (async)

05:17:42 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x40049409, &(0x7f0000000280)={0x0})

05:17:42 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = syz_io_uring_complete(0x0)
ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000000)=0x1000)

05:17:42 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0], 0x6})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f00000000c0)={0x9, <r3=>0x0})
r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000480)={r6, 0x0, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0, r7})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={r2, r7, r1, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000001c0)={r8})
ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40086437, &(0x7f0000000100)={r3, 0x20})

05:17:42 executing program 0:
clock_gettime(0x5, &(0x7f0000000140)) (async)
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xfffffffe}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:42 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x157e000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:42 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000040)={0x0, 0x65, 0x153, 0xf4, 0x2, [0x0, <r1=>0x0], [0x7ff, 0x4, 0x7, 0x1ca987a5], [0xcca, 0x3, 0x7, 0x7fff], [0x8000000000000000, 0x7fff, 0x2, 0x4]})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r4=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x1, 0x8})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, <r5=>0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x3, 0x8})
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000280)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
r10 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r11=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000480)={r11, 0x0, <r12=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, <r13=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000540)={&(0x7f0000000440)=[r3, r4, r5, r8], 0x4, r12, r13, 0x8, 0x856, 0xe6e, 0x0, {0x9, 0xff, 0x6, 0x8, 0x5, 0x3ff, 0x7f, 0x4974, 0x1ff, 0x6, 0x4, 0x66be, 0x8, 0x4, "df94641c5c8430396689c399f78121ec46c3f615358f396ae53e0294916e76ed"}})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={<r14=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000100)={0x0, 0x5, 0xf1e, 0x2, 0xf89b7bcd323a7691, [r1, 0x0, r14], [0xffffff81, 0xe5, 0x0, 0x8], [0x6, 0x400, 0x5619, 0x5], [0x9, 0x6, 0x8, 0x3]})

05:17:42 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x40086602, &(0x7f0000000280)={0x0})

05:17:42 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = syz_io_uring_complete(0x0)
ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000000)=0x1000)

05:17:42 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x2000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:42 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0], 0x6}) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f00000000c0)={0x9, <r3=>0x0}) (async)
r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0) (async)
r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000480)={r6, 0x0, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0, r7}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={r2, r7, r1, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000001c0)={r8}) (async)
ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40086437, &(0x7f0000000100)={r3, 0x20})

05:17:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x40186366, &(0x7f0000000280)={0x0})

05:17:43 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x7229, &(0x7f0000000000)={0x0, 0x51ce, 0x800, 0x3, 0x247}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:43 executing program 1:
r0 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x2429c2, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000280))
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40106435, &(0x7f0000000000))
r2 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r2, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, <r3=>0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000180)={r3, 0x0, 0x24, 0x6, 0x9, 0x0, 0x1})

05:17:43 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300)) (async)
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000040)={0x0, 0x65, 0x153, 0xf4, 0x2, [0x0, <r1=>0x0], [0x7ff, 0x4, 0x7, 0x1ca987a5], [0xcca, 0x3, 0x7, 0x7fff], [0x8000000000000000, 0x7fff, 0x2, 0x4]})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r4=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x1, 0x8}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, <r5=>0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x3, 0x8}) (async)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000280)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0) (async)
r10 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r11=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000480)={r11, 0x0, <r12=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, <r13=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000540)={&(0x7f0000000440)=[r3, r4, r5, r8], 0x4, r12, r13, 0x8, 0x856, 0xe6e, 0x0, {0x9, 0xff, 0x6, 0x8, 0x5, 0x3ff, 0x7f, 0x4974, 0x1ff, 0x6, 0x4, 0x66be, 0x8, 0x4, "df94641c5c8430396689c399f78121ec46c3f615358f396ae53e0294916e76ed"}}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={<r14=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000100)={0x0, 0x5, 0xf1e, 0x2, 0xf89b7bcd323a7691, [r1, 0x0, r14], [0xffffff81, 0xe5, 0x0, 0x8], [0x6, 0x400, 0x5619, 0x5], [0x9, 0x6, 0x8, 0x3]})

05:17:43 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x2040000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:43 executing program 0:
openat$sw_sync(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$zero(0xffffff9c, &(0x7f00000001c0), 0x248202, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0xf000000a})
syz_io_uring_setup(0x1642, &(0x7f0000000040)={0x0, 0xf092, 0x4, 0x5, 0xfb, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000140))
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000280)={0x0})
openat$zero(0xffffff9c, &(0x7f0000000180), 0x349002, 0x0)

05:17:43 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x401c5820, &(0x7f0000000280)={0x0})

05:17:43 executing program 3:
r0 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x2429c2, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000280))
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40106435, &(0x7f0000000000))
r2 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r2, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, <r3=>0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000180)={r3, 0x0, 0x24, 0x6, 0x9, 0x0, 0x1})

05:17:43 executing program 4:
r0 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x2429c2, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000280))
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40106435, &(0x7f0000000000)) (async)
r2 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r2, 0x0, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, <r3=>0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000180)={r3, 0x0, 0x24, 0x6, 0x9, 0x0, 0x1})

05:17:43 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x7229, &(0x7f0000000000)={0x0, 0x51ce, 0x800, 0x3, 0x247}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) (async)
syz_io_uring_setup(0x7229, &(0x7f0000000000)={0x0, 0x51ce, 0x800, 0x3, 0x247}, &(0x7f0000000080), &(0x7f00000000c0)) (async)

05:17:43 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x3000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x50b000)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))

05:17:43 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x10, &(0x7f0000000300))

05:17:43 executing program 4:
openat$sw_sync(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$zero(0xffffff9c, &(0x7f00000001c0), 0x248202, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0xf000000a}) (async)
syz_io_uring_setup(0x1642, &(0x7f0000000040)={0x0, 0xf092, 0x4, 0x5, 0xfb, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000140)) (async)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000280)={0x0}) (async)
openat$zero(0xffffff9c, &(0x7f0000000180), 0x349002, 0x0)

05:17:43 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='0\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x4020940d, &(0x7f0000000280)={0x0})

05:17:43 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x50b000)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))

05:17:43 executing program 4:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0xcae, &(0x7f0000000200)={0x0, 0xee12, 0xf28, 0x1, 0x58, 0x0, r0}, 0x0, &(0x7f0000000280))
syz_io_uring_setup(0x7b13, &(0x7f0000000000)={0x0, 0x92aa, 0x800, 0x3, 0x83, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:43 executing program 3:
r0 = syz_io_uring_setup(0x3702, &(0x7f0000000180)={0x0, 0x722f, 0x1, 0x2, 0x7a}, &(0x7f0000000200), &(0x7f0000000240))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000c, 0x1010, r0, 0x8000000)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x181801)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x8, 0x4, 0x8})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:43 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x4000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:43 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x4020940d, &(0x7f0000000280)={0x0})

05:17:43 executing program 2:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='0\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:43 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x402c5828, &(0x7f0000000280)={0x0})

05:17:43 executing program 0:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0xcae, &(0x7f0000000200)={0x0, 0xee12, 0xf28, 0x1, 0x58, 0x0, r0}, 0x0, &(0x7f0000000280)) (async, rerun: 64)
syz_io_uring_setup(0x7b13, &(0x7f0000000000)={0x0, 0x92aa, 0x800, 0x3, 0x83, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) (rerun: 64)

05:17:43 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x5000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:43 executing program 1:
syz_io_uring_setup(0x3702, &(0x7f0000000180)={0x0, 0x722f, 0x1, 0x2, 0x7a}, &(0x7f0000000200), &(0x7f0000000240)) (async)
r0 = syz_io_uring_setup(0x3702, &(0x7f0000000180)={0x0, 0x722f, 0x1, 0x2, 0x7a}, &(0x7f0000000200), &(0x7f0000000240))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000c, 0x1010, r0, 0x8000000)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x181801)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x8, 0x4, 0x8})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:43 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf25110000000800", @ANYRES32], 0x28}}, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x5a}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, <r4=>0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000040)=r4)

05:17:43 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000200), 0x7, 0x20900)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x9, 0x1, 0x7, 0x3})
write$yama_ptrace_scope(r0, &(0x7f00000001c0)='1\x00', 0x2)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000380))
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000180)='0\x00', 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x2, 0x6, 0x6})

05:17:43 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x402c5829, &(0x7f0000000280)={0x0})

05:17:43 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x6000000}, &(0x7f0000000180), &(0x7f00000001c0))

[ 3375.760742][T26025] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
05:17:43 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2})

05:17:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf25110000000800", @ANYRES32], 0x28}}, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x5a}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, <r4=>0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000040)=r4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf25110000000800", @ANYRES32], 0x28}}, 0x0) (async)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x5a}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000040)=r4) (async)

05:17:43 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000200), 0x7, 0x20900)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x9, 0x1, 0x7, 0x3})
write$yama_ptrace_scope(r0, &(0x7f00000001c0)='1\x00', 0x2) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000380))
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000180)='0\x00', 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x2, 0x6, 0x6})

05:17:44 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x402c582a, &(0x7f0000000280)={0x0})

05:17:44 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x6040000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r1}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r2}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2}) (async)

[ 3375.971947][T26037] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3375.999682][T26040] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
05:17:44 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={r1, r2, 0xf, 0x8636, 0x8e7c})

05:17:44 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x5d)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='3\x00', 0x2)
r1 = openat$qrtrtun(0xffffff9c, &(0x7f0000000c00), 0x0)
read$qrtrtun(r1, 0x0, 0x0)
r2 = openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, <r3=>0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x3, 0x8})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
read$qrtrtun(r1, &(0x7f0000000000)=""/41, 0x29)
ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000280)={r3, 0x0, 0x5, 0xc4fe, 0x7, 0x2, 0x81})

05:17:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x402c582b, &(0x7f0000000280)={0x0})

05:17:44 executing program 3:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x3000004, 0x10, r0, 0x8000000)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000100)="49d8ae4cd8ad9bdccedfe9c3131ce270eddfd8b0ec29167450da3a892bef9e70f55319416dcc44435768ac750741a9efe518a54efc04b4505cf59cfbdc14db5e42c3b165373b26d2a063cc66d219b8f31b111747b69bbfc30919fc5ac13dfa71222b642e", 0x64, 0x3})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:44 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, <r1=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={r1, r2, 0xf, 0x8636, 0x8e7c})

05:17:44 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x7000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:44 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x402c5839, &(0x7f0000000280)={0x0})

05:17:44 executing program 4:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x3000004, 0x10, r0, 0x8000000) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x3000004, 0x10, r0, 0x8000000)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000100)="49d8ae4cd8ad9bdccedfe9c3131ce270eddfd8b0ec29167450da3a892bef9e70f55319416dcc44435768ac750741a9efe518a54efc04b4505cf59cfbdc14db5e42c3b165373b26d2a063cc66d219b8f31b111747b69bbfc30919fc5ac13dfa71222b642e", 0x64, 0x3})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:44 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x7000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:44 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x8000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x80046601, &(0x7f0000000280)={0x0})

05:17:44 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000040)=@dgm={0x25, 0x9, 0x7}, 0x18)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000200000000000000696d7265673000000000000000000000d780bd4ee32928345be0f56b765fc1d30000000000"], 0x28}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000300)={0x0, <r5=>0x0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000340)={<r6=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000380)={<r7=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f00000003c0)={r3, 0x7, 0x6, 0x80, 0x2, [r4, r5, r6, r7], [0xff, 0x8001, 0x9, 0xade], [0x7, 0x10000, 0x1, 0x4], [0xffffffff, 0x6, 0x7, 0x2e38e25b]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, <r1=>0x0, 0x0], 0x6})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={r1, 0x0, r2, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]})

05:17:44 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x80086301, &(0x7f0000000280)={0x0})

05:17:44 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x9000000}, &(0x7f0000000180), &(0x7f00000001c0))

[ 3376.595854][T26078] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
05:17:44 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, <r1=>0x0, 0x0], 0x6}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={r1, 0x0, r2, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]})

05:17:44 executing program 3:
connect$caif(0xffffffffffffffff, &(0x7f0000000040)=@dgm={0x25, 0x9, 0x7}, 0x18) (async)
connect$caif(0xffffffffffffffff, &(0x7f0000000040)=@dgm={0x25, 0x9, 0x7}, 0x18)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000200000000000000696d7265673000000000000000000000d780bd4ee32928345be0f56b765fc1d30000000000"], 0x28}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000300)) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000300)={0x0, <r5=>0x0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000340)={<r6=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000380)={<r7=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f00000003c0)={r3, 0x7, 0x6, 0x80, 0x2, [r4, r5, r6, r7], [0xff, 0x8001, 0x9, 0xade], [0x7, 0x10000, 0x1, 0x4], [0xffffffff, 0x6, 0x7, 0x2e38e25b]}) (async)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f00000003c0)={r3, 0x7, 0x6, 0x80, 0x2, [r4, r5, r6, r7], [0xff, 0x8001, 0x9, 0xade], [0x7, 0x10000, 0x1, 0x4], [0xffffffff, 0x6, 0x7, 0x2e38e25b]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x80086601, &(0x7f0000000280)={0x0})

05:17:44 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xa000000}, &(0x7f0000000180), &(0x7f00000001c0))

[ 3376.803708][T26088] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
05:17:45 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x5d)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='3\x00', 0x2) (async)
r1 = openat$qrtrtun(0xffffff9c, &(0x7f0000000c00), 0x0)
read$qrtrtun(r1, 0x0, 0x0) (async)
r2 = openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, <r3=>0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x3, 0x8}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0}) (async)
read$qrtrtun(r1, &(0x7f0000000000)=""/41, 0x29)
ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000280)={r3, 0x0, 0x5, 0xc4fe, 0x7, 0x2, 0x81})

05:17:45 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xe000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:45 executing program 2:
getuid()
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000140)={r4})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, r1})
r6 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$caif(r6, &(0x7f0000000000), 0x18)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000100)={r5, r1, 0x4, 0x1, 0x8002})

05:17:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101000)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))

05:17:45 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x80111500, &(0x7f0000000280)={0x0})

05:17:45 executing program 3:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x7f39, &(0x7f0000000000)={0x0, 0x3190, 0x1000, 0x0, 0xba, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x5ff, &(0x7f0000000200)={0x0, 0xbcde, 0x28, 0x2, 0x1af, 0x0, r1}, &(0x7f0000000280), &(0x7f00000002c0))

05:17:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x801c581f, &(0x7f0000000280)={0x0})

05:17:45 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101000)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))

05:17:45 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:45 executing program 3:
getuid() (async)
getuid()
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000140)={r4})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, r1})
r6 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$caif(r6, &(0x7f0000000000), 0x18) (async)
connect$caif(r6, &(0x7f0000000000), 0x18)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000100)={r5, r1, 0x4, 0x1, 0x8002}) (async)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000100)={r5, r1, 0x4, 0x1, 0x8002})

05:17:45 executing program 2:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x7f39, &(0x7f0000000000)={0x0, 0x3190, 0x1000, 0x0, 0xba, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x5ff, &(0x7f0000000200)={0x0, 0xbcde, 0x28, 0x2, 0x1af, 0x0, r1}, &(0x7f0000000280), &(0x7f00000002c0))

05:17:45 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x10000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x840)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, <r1=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, <r2=>0x0], &(0x7f00000000c0)=[0x0, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2, 0x6, 0xa})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000180)={r6})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
r7 = openat$drirender128(0xffffff9c, &(0x7f0000000740), 0x40000, 0x0)
syz_open_dev$dri(&(0x7f0000000840), 0x8000, 0x1)
ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f00000007c0)={&(0x7f0000000780)=[r3, r5], 0x2, r2, r1, 0x9, 0x2, 0x1, 0x8001, {0x3, 0x7f, 0x2, 0x5, 0x3, 0x79b3, 0x101, 0xeecb, 0x6, 0x4, 0xffff, 0x6, 0x9, 0x9, "739165bced1cbcb1999357e0e047062c3485844b68c40f4d55c38b1bf796fbaa"}})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x7, 0x4, 0x0, r4})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000580)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500), &(0x7f0000000500), &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3c3c4e7, 0x0, 0x2, 0x0, r3})

05:17:45 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x80811501, &(0x7f0000000280)={0x0})

05:17:45 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x4, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[<r1=>0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x3})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000980)={&(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000008c0), &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x2, 0x0, r1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x3, 0x0, r1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:45 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x15000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:45 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x840)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, <r1=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, <r2=>0x0], &(0x7f00000000c0)=[0x0, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2, 0x6, 0xa})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000180)={r6})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
r7 = openat$drirender128(0xffffff9c, &(0x7f0000000740), 0x40000, 0x0)
syz_open_dev$dri(&(0x7f0000000840), 0x8000, 0x1)
ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f00000007c0)={&(0x7f0000000780)=[r3, r5], 0x2, r2, r1, 0x9, 0x2, 0x1, 0x8001, {0x3, 0x7f, 0x2, 0x5, 0x3, 0x79b3, 0x101, 0xeecb, 0x6, 0x4, 0xffff, 0x6, 0x9, 0x9, "739165bced1cbcb1999357e0e047062c3485844b68c40f4d55c38b1bf796fbaa"}})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x7, 0x4, 0x0, r4})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000580)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500), &(0x7f0000000500), &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3c3c4e7, 0x0, 0x2, 0x0, r3})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x840) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2, 0x6, 0xa}) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000180)={r6}) (async)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300)) (async)
openat$drirender128(0xffffff9c, &(0x7f0000000740), 0x40000, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000840), 0x8000, 0x1) (async)
ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f00000007c0)={&(0x7f0000000780)=[r3, r5], 0x2, r2, r1, 0x9, 0x2, 0x1, 0x8001, {0x3, 0x7f, 0x2, 0x5, 0x3, 0x79b3, 0x101, 0xeecb, 0x6, 0x4, 0xffff, 0x6, 0x9, 0x9, "739165bced1cbcb1999357e0e047062c3485844b68c40f4d55c38b1bf796fbaa"}}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x7, 0x4, 0x0, r4}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000580)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500), &(0x7f0000000500), &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3c3c4e7, 0x0, 0x2, 0x0, r3}) (async)

05:17:45 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x7898, &(0x7f0000000000)={0x0, 0x1c5c, 0x200, 0x3, 0x134}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:45 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x1f000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:45 executing program 3:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x4, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[<r1=>0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x3})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000980)={&(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000008c0), &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x2, 0x0, r1}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000980)={&(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000008c0), &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x2, 0x0, r1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x3, 0x0, r1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:45 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc0045878, &(0x7f0000000280)={0x0})

05:17:45 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x1fffefff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:45 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x32000, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0], &(0x7f0000000240)=[0x0, 0x0], 0x7, 0x2, 0x9, 0x2})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x7, 0x8, 0x0, r2})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))

05:17:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040))
r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000480)={r3, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={0x0, 0xfffffffffffffff7, r4})

05:17:45 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) (async)
syz_io_uring_setup(0x7898, &(0x7f0000000000)={0x0, 0x1c5c, 0x200, 0x3, 0x134}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:45 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc0045878, &(0x7f0000000280)={0x0})

05:17:45 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x1fffffff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x32000, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0], &(0x7f0000000240)=[0x0, 0x0], 0x7, 0x2, 0x9, 0x2})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x7, 0x8, 0x0, r2})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x32000, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x7, 0x2, 0x9, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x7, 0x8, 0x0, r2}) (async)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300)) (async)

05:17:45 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)) (async)
r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0) (async)
r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000480)={r3, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r4}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={0x0, 0xfffffffffffffff7, r4})

05:17:45 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc0189436, &(0x7f0000000280)={0x0})

05:17:45 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x34f0, &(0x7f0000000200)={0x0, 0x7d31, 0x400, 0x3, 0x377}, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_setup(0x7dff, &(0x7f0000000000)={0x0, 0x38d4, 0x40, 0x2, 0x38c}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:45 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x20000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:46 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) (async, rerun: 64)
syz_io_uring_setup(0x34f0, &(0x7f0000000200)={0x0, 0x7d31, 0x400, 0x3, 0x377}, &(0x7f0000000280), &(0x7f00000002c0)) (async, rerun: 64)
syz_io_uring_setup(0x7dff, &(0x7f0000000000)={0x0, 0x38d4, 0x40, 0x2, 0x38c}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:46 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc020660b, &(0x7f0000000280)={0x0})

05:17:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[<r1=>0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x1, 0x8, 0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x1, 0x0, r1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))

05:17:46 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0x4})

05:17:46 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x20ffffff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:46 executing program 2:
r0 = epoll_create1(0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x30002001})
r2 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2)
write$yama_ptrace_scope(r2, 0x0, 0x0)

05:17:46 executing program 0:
syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x0) (async)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0x4})

05:17:46 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x21000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864b8, &(0x7f0000000280)={0x0})

05:17:46 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[<r1=>0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x1, 0x8, 0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x1, 0x0, r1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))

05:17:46 executing program 1:
r0 = epoll_create1(0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x30002001})
r2 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2)
write$yama_ptrace_scope(r2, 0x0, 0x0)

05:17:46 executing program 0:
r0 = epoll_create1(0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x30002001})
r2 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2)
write$yama_ptrace_scope(r2, 0x0, 0x0)
epoll_create1(0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x30002001}) (async)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2) (async)
write$yama_ptrace_scope(r2, 0x0, 0x0) (async)

05:17:46 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x80000000})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x4})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:46 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864d0, &(0x7f0000000280)={0x0})

05:17:46 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x21000fff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:46 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000080), 0x4)

05:17:46 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, <r2=>r1, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0xa, 0x1, 0x9})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)=r2)

05:17:46 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x80000000})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x4})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x80000000}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x4}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0}) (async)

05:17:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:46 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000)
setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000080), 0x4)

05:17:46 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x22000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:46 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, <r2=>r1, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0xa, 0x1, 0x9}) (async)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)=r2)

05:17:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, <r1=>0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x2, 0x1, 0x4})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={0x0, r1, r2, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:46 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x2})

05:17:46 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x23000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:46 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f00000000c0)='0\x00', 0x2)
mq_timedsend(r2, &(0x7f0000000100)="7dd4f777053369c19ef5088589a7fac87dd87e0283150973385cd342b0f5182b94c66e8c6b698519d85490305b165466e0d98f1e0940bc71fe459ff0bf22ed45ee5cd68403", 0x45, 0xfffffff8, &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000007, 0x10010, r2, 0x8000000)
write$yama_ptrace_scope(r1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x1, 0x6, 0x1, 0x2})
write$yama_ptrace_scope(r0, &(0x7f0000000080)='0\x00', 0x2)
syz_open_dev$dri(&(0x7f00000001c0), 0x3ff, 0x4800)

05:17:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x800, 0x400102)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, <r2=>0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x3, 0x3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[<r3=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x4, 0x3, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[<r4=>0x0, 0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x2, 0xa})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000004c0)={&(0x7f00000001c0)=[r2], 0x1, r3, r4, 0x80000001, 0x400, 0x0, 0x0, {0x2, 0x800, 0x7fa, 0xc5, 0x20, 0x400, 0xdd3a, 0x8, 0x931, 0x3f, 0x5, 0x7, 0x5, 0x6, "88476a614aed01c7949df2d9b3e32c16d8cf30027eec22cb041c4827d2748c55"}})

05:17:46 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, <r1=>0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x2, 0x1, 0x4})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={0x0, r1, r2, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x3})

05:17:47 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x30f1ffff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:47 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f00000000c0)='0\x00', 0x2) (async)
mq_timedsend(r2, &(0x7f0000000100)="7dd4f777053369c19ef5088589a7fac87dd87e0283150973385cd342b0f5182b94c66e8c6b698519d85490305b165466e0d98f1e0940bc71fe459ff0bf22ed45ee5cd68403", 0x45, 0xfffffff8, &(0x7f0000000180)) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000007, 0x10010, r2, 0x8000000) (async, rerun: 64)
write$yama_ptrace_scope(r1, 0x0, 0x0) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x1, 0x6, 0x1, 0x2}) (async, rerun: 64)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='0\x00', 0x2) (rerun: 64)
syz_open_dev$dri(&(0x7f00000001c0), 0x3ff, 0x4800)

05:17:47 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x800, 0x400102)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, <r2=>0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x3, 0x3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[<r3=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x4, 0x3, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[<r4=>0x0, 0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x2, 0xa})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000004c0)={&(0x7f00000001c0)=[r2], 0x1, r3, r4, 0x80000001, 0x400, 0x0, 0x0, {0x2, 0x800, 0x7fa, 0xc5, 0x20, 0x400, 0xdd3a, 0x8, 0x931, 0x3f, 0x5, 0x7, 0x5, 0x6, "88476a614aed01c7949df2d9b3e32c16d8cf30027eec22cb041c4827d2748c55"}})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300)) (async)
syz_open_dev$dri(&(0x7f0000000040), 0x800, 0x400102) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x3, 0x3}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x4, 0x3, 0x4}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x2, 0xa}) (async)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000004c0)={&(0x7f00000001c0)=[r2], 0x1, r3, r4, 0x80000001, 0x400, 0x0, 0x0, {0x2, 0x800, 0x7fa, 0xc5, 0x20, 0x400, 0xdd3a, 0x8, 0x931, 0x3f, 0x5, 0x7, 0x5, 0x6, "88476a614aed01c7949df2d9b3e32c16d8cf30027eec22cb041c4827d2748c55"}}) (async)

05:17:47 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={<r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000180)=[0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[<r5=>0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x2, 0x1, 0x8})
ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000440)={r4, 0x2, 0x9, 0x3, 0x7ff, 0xfffff784, 0xa0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000240)={r6, 0x2, 0x9, 0x8000, 0x2, [], [0x4313, 0x2, 0x9, 0x1], [0x65cf, 0x0, 0x8, 0x8], [0x9, 0x4, 0x0, 0x7]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000004540)={0x0, r5, <r7=>r6, 0x0, 0x0, 0x2, &(0x7f0000004500)=[0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000004580)={r7, 0x8, 0x0, 0x0, 0x3a3, 0xe0000000})
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0xfffffffffffffde4)
r8 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x8000000)
mmap$qrtrtun(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1000000, 0x100010, r3, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000045c0)={r6, 0xfffeffff, 0x1, 0x6aef, 0x7, 0x8, 0x80000000})
r9 = syz_open_dev$dri(&(0x7f0000004600), 0xcd0, 0x6a862120d7a6fe57)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9})
r10 = openat$cuse(0xffffff9c, &(0x7f00000024c0), 0x2, 0x0)
read$FUSE(r10, &(0x7f0000004640)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={r2})

05:17:47 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x6802, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x34ac, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1})
r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x6, 0x3, 0x5, 0x0, r4})

05:17:47 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x40000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:47 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x4})

05:17:47 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0x2)

05:17:47 executing program 2:
r0 = syz_io_uring_setup(0x444a, &(0x7f0000000000)={0x0, 0x228b, 0x40, 0x0, 0xd3}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x0, 0x840, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:47 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0x2)

05:17:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x5})

05:17:47 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x41000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:47 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x6802, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x34ac, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1})
r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x6, 0x3, 0x5, 0x0, r4})

05:17:47 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:47 executing program 3:
r0 = syz_io_uring_setup(0x444a, &(0x7f0000000000)={0x0, 0x228b, 0x40, 0x0, 0xd3}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x0, 0x840, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:47 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x42000000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:47 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x6802, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x34ac, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1})
r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x6, 0x3, 0x5, 0x0, r4})
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0}) (async)
openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x6802, 0x0) (async)
syz_open_dev$dri(&(0x7f00000000c0), 0x34ac, 0x0) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1}) (async)
openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r4}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x6, 0x3, 0x5, 0x0, r4}) (async)

05:17:47 executing program 1:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:47 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x6})

05:17:47 executing program 0:
r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x1, 0x5, [{0xffffffffffffffff, 0x0, 0x1000}, {0xffffffffffffffff, 0x0, 0x8000, 0x8000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x2000, 0x100010000}, {0xffffffffffffffff, 0x0, 0x2000}]})
ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000080)='\x00')
r1 = syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x0, 0x2000, 0x80000000, 0xfffffffd}, &(0x7f0000000180), &(0x7f00000001c0))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x8010, r1, 0x8000000)

05:17:47 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x46680fff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:47 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x7})

05:17:47 executing program 2:
r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, <r1=>0x0}, 0x2020)
read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
r3 = openat$cuse(0xffffff9c, &(0x7f0000002100), 0x2, 0x0)
r4 = openat$cuse(0xffffff9c, &(0x7f00000081c0), 0x2, 0x0)
read$FUSE(r4, &(0x7f000000c240)={0x2020}, 0x2020)
read$FUSE(r3, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_ATTR(r3, &(0x7f0000002340)={0x78, 0xfffffffffffffffe, r5, {0x32c, 0x9, 0x0, {0x0, 0x7, 0x0, 0x2, 0x10001, 0x1ff, 0x2, 0xab, 0x3, 0x8000, 0xb1, r6, r7, 0x89c, 0x100}}}, 0x78)
r8 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r9 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000002040))
read$FUSE(r8, &(0x7f0000004140)={0x2020, 0x0, 0x0, 0x0, <r10=>0x0}, 0x2020)
read$FUSE(r3, &(0x7f000000a200)={0x2020, 0x0, 0x0, <r11=>0x0}, 0x2020)
write$FUSE_ATTR(r3, &(0x7f0000002440)={0x78, 0x0, 0x0, {0x45, 0xffff, 0x0, {0x2, 0x100, 0xa6, 0x6, 0x6, 0x8000000000000002, 0x5ab, 0x0, 0x5, 0x6000, 0x900, r11, r10, 0x3}}}, 0x78)
write$FUSE_ATTR(r0, &(0x7f0000004100)={0x78, 0xffffffffffffffda, r1, {0x46, 0x3, 0x0, {0x5, 0x5, 0x6, 0xff, 0x4, 0x6, 0x1, 0x2, 0x19, 0xc000, 0xfffffffe, r2, r10, 0xe565, 0x4}}}, 0x78)
r12 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r12, 0x0, 0x0)

05:17:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, <r1=>0x0, 0x0, 0x0, 0x0], 0x7})
r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r1, r5, r6, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={0x0, 0x0, 0x0, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000000c0)={r7, 0x2f, 0x8, 0x5, 0x1, [], [0x3, 0x7ff, 0x0, 0x7], [0x6, 0x8f, 0x6, 0xffffffff], [0x6, 0x3, 0x10001, 0x8000001]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x7, 0x2, 0x4})

05:17:48 executing program 3:
r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x1, 0x5, [{0xffffffffffffffff, 0x0, 0x1000}, {0xffffffffffffffff, 0x0, 0x8000, 0x8000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x2000, 0x100010000}, {0xffffffffffffffff, 0x0, 0x2000}]})
ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000080)='\x00') (async)
r1 = syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x0, 0x2000, 0x80000000, 0xfffffffd}, &(0x7f0000000180), &(0x7f00000001c0))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x8010, r1, 0x8000000)

05:17:48 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x466c8fff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:48 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x8})

05:17:48 executing program 0:
r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, <r1=>0x0}, 0x2020)
read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
r3 = openat$cuse(0xffffff9c, &(0x7f0000002100), 0x2, 0x0)
r4 = openat$cuse(0xffffff9c, &(0x7f00000081c0), 0x2, 0x0)
read$FUSE(r4, &(0x7f000000c240)={0x2020}, 0x2020)
read$FUSE(r3, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_ATTR(r3, &(0x7f0000002340)={0x78, 0xfffffffffffffffe, r5, {0x32c, 0x9, 0x0, {0x0, 0x7, 0x0, 0x2, 0x10001, 0x1ff, 0x2, 0xab, 0x3, 0x8000, 0xb1, r6, r7, 0x89c, 0x100}}}, 0x78)
r8 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r9 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000002040)) (async)
read$FUSE(r8, &(0x7f0000004140)={0x2020, 0x0, 0x0, 0x0, <r10=>0x0}, 0x2020) (async)
read$FUSE(r3, &(0x7f000000a200)={0x2020, 0x0, 0x0, <r11=>0x0}, 0x2020)
write$FUSE_ATTR(r3, &(0x7f0000002440)={0x78, 0x0, 0x0, {0x45, 0xffff, 0x0, {0x2, 0x100, 0xa6, 0x6, 0x6, 0x8000000000000002, 0x5ab, 0x0, 0x5, 0x6000, 0x900, r11, r10, 0x3}}}, 0x78) (async)
write$FUSE_ATTR(r0, &(0x7f0000004100)={0x78, 0xffffffffffffffda, r1, {0x46, 0x3, 0x0, {0x5, 0x5, 0x6, 0xff, 0x4, 0x6, 0x1, 0x2, 0x19, 0xc000, 0xfffffffe, r2, r10, 0xe565, 0x4}}}, 0x78) (async)
r12 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r12, 0x0, 0x0)

05:17:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, <r1=>0x0, 0x0, 0x0, 0x0], 0x7})
r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0) (async)
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r1, r5, r6, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={0x0, 0x0, 0x0, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000000c0)={r7, 0x2f, 0x8, 0x5, 0x1, [], [0x3, 0x7ff, 0x0, 0x7], [0x6, 0x8f, 0x6, 0xffffffff], [0x6, 0x3, 0x10001, 0x8000001]}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x7, 0x2, 0x4}) (rerun: 32)

05:17:48 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x46700fff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:48 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x9})

05:17:48 executing program 0:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x3f0a, &(0x7f0000000000)={0x0, 0xcc76, 0x8, 0x0, 0x1c6, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:48 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2)

05:17:48 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x4677ffff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0xa})

05:17:48 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2)

05:17:48 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000100)={r1, 0x1, 0x4, 0x5, &(0x7f00000000c0)=[{0x8001, 0x3, 0x8, 0xb8}, {0x40, 0x1, 0x4, 0x8427}, {0xfffb, 0x7f, 0x3ff, 0x3}, {0x4b6, 0x1, 0xa4ba}, {0x8000, 0x7, 0x8, 0x7f}]})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000180)={&(0x7f0000000140)=[<r2=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000001c0)={0x0, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, <r4=>r1, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, r3, r4, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

05:17:48 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={<r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040))
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000180)=[0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[<r5=>0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x2, 0x1, 0x8})
ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000440)={r4, 0x2, 0x9, 0x3, 0x7ff, 0xfffff784, 0xa0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000240)={r6, 0x2, 0x9, 0x8000, 0x2, [], [0x4313, 0x2, 0x9, 0x1], [0x65cf, 0x0, 0x8, 0x8], [0x9, 0x4, 0x0, 0x7]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000004540)={0x0, r5, <r7=>r6, 0x0, 0x0, 0x2, &(0x7f0000004500)=[0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000004580)={r7, 0x8, 0x0, 0x0, 0x3a3, 0xe0000000})
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0xfffffffffffffde4)
r8 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x8000000)
mmap$qrtrtun(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1000000, 0x100010, r3, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000045c0)={r6, 0xfffeffff, 0x1, 0x6aef, 0x7, 0x8, 0x80000000})
r9 = syz_open_dev$dri(&(0x7f0000004600), 0xcd0, 0x6a862120d7a6fe57)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9})
r10 = openat$cuse(0xffffff9c, &(0x7f00000024c0), 0x2, 0x0)
read$FUSE(r10, &(0x7f0000004640)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={r2})

05:17:48 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x569a7fff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:48 executing program 1:
r0 = syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x3f0a, &(0x7f0000000000)={0x0, 0xcc76, 0x8, 0x0, 0x1c6, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))

05:17:48 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0xb})

05:17:48 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0x2)

05:17:48 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000100)={r1, 0x1, 0x4, 0x5, &(0x7f00000000c0)=[{0x8001, 0x3, 0x8, 0xb8}, {0x40, 0x1, 0x4, 0x8427}, {0xfffb, 0x7f, 0x3ff, 0x3}, {0x4b6, 0x1, 0xa4ba}, {0x8000, 0x7, 0x8, 0x7f}]})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000180)={&(0x7f0000000140)=[<r2=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000001c0)={0x0, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, <r4=>r1, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, r3, r4, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={0x0}) (async)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000100)={r1, 0x1, 0x4, 0x5, &(0x7f00000000c0)=[{0x8001, 0x3, 0x8, 0xb8}, {0x40, 0x1, 0x4, 0x8427}, {0xfffb, 0x7f, 0x3ff, 0x3}, {0x4b6, 0x1, 0xa4ba}, {0x8000, 0x7, 0x8, 0x7f}]}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0], 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000001c0)) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, r1, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, r3, r4, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)

05:17:48 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x569c8fff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0xc})

05:17:48 executing program 2:
r0 = openat$sysctl(0xffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000040)='3\x00', 0x2)
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))

05:17:48 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0x2)

05:17:48 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0x2)

05:17:48 executing program 1:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0x796526f7}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:48 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0], &(0x7f0000000080)=[0x0, 0x0, <r2=>0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x5, 0x9})
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x440000)
ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000001c0)={r1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r2})

05:17:48 executing program 4:
r0 = openat$sysctl(0xffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000040)='3\x00', 0x2) (async)
syz_io_uring_setup(0x19f0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))

05:17:48 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0xd})

05:17:48 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$zero(0xffffff9c, &(0x7f0000000040), 0x101080, 0x0)

05:17:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0], &(0x7f0000000080)=[0x0, 0x0, <r2=>0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x5, 0x9}) (async)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x440000)
ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000001c0)={r1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r2})

05:17:49 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf5d76fff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:49 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0xe})

05:17:49 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000040)={0x7, 0x0, 0x1})

05:17:49 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
openat$zero(0xffffff9c, &(0x7f0000000040), 0x101080, 0x0)

05:17:49 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf5d77000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:49 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x10})

05:17:49 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='2\x00', 0x2)
r1 = openat$iommufd(0xffffff9c, &(0x7f00000000c0), 0x2001, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000180)={0x18, r2, 0x1, 0x0, &(0x7f0000000140)=[{0x7, 0x5}]})
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)

05:17:49 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000040)={0x7, 0x0, 0x1})

05:17:49 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf5df6fff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:49 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x11})

05:17:49 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='2\x00', 0x2) (async)
r1 = openat$iommufd(0xffffff9c, &(0x7f00000000c0), 0x2001, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000180)={0x18, r2, 0x1, 0x0, &(0x7f0000000140)=[{0x7, 0x5}]})
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)

05:17:49 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={r1})

05:17:49 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x12})

05:17:49 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300)) (async)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={<r2=>0x0}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) (async)
r3 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000180)=[0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[<r5=>0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x2, 0x1, 0x8})
ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000440)={r4, 0x2, 0x9, 0x3, 0x7ff, 0xfffff784, 0xa0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000240)={r6, 0x2, 0x9, 0x8000, 0x2, [], [0x4313, 0x2, 0x9, 0x1], [0x65cf, 0x0, 0x8, 0x8], [0x9, 0x4, 0x0, 0x7]}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000004540)={0x0, r5, <r7=>r6, 0x0, 0x0, 0x2, &(0x7f0000004500)=[0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000004580)={r7, 0x8, 0x0, 0x0, 0x3a3, 0xe0000000}) (async)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0xfffffffffffffde4)
r8 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x8000000)
mmap$qrtrtun(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1000000, 0x100010, r3, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000045c0)={r6, 0xfffeffff, 0x1, 0x6aef, 0x7, 0x8, 0x80000000}) (async)
r9 = syz_open_dev$dri(&(0x7f0000004600), 0xcd0, 0x6a862120d7a6fe57)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) (async)
r10 = openat$cuse(0xffffff9c, &(0x7f00000024c0), 0x2, 0x0)
read$FUSE(r10, &(0x7f0000004640)={0x2020}, 0x2020) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={r2})

05:17:49 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf5df7000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:49 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0x2)

05:17:49 executing program 2:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={r1})

05:17:49 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0x2)

05:17:49 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x18})

05:17:49 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf5e3ffff}, &(0x7f0000000180), &(0x7f00000001c0))

[ 3381.868422][T28510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 3381.878395][T28510] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 3381.886294][T28510] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 3381.899448][T28510] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
05:17:50 executing program 2:
pselect6(0x40, &(0x7f0000000040)={0x4, 0x10001, 0x5, 0x2, 0x10000, 0xf4, 0x4, 0x1ff}, &(0x7f0000000080)={0x366, 0x3, 0x100, 0x1, 0x4, 0x3, 0x6, 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x100, 0x1, 0x10000, 0x5, 0x80000000}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x401, 0x3ff]}, 0x8})
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

[ 3381.926313][T28510] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 3381.934627][T28510] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
05:17:50 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf5e40000}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:50 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x25})

[ 3381.996280][   T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
05:17:50 executing program 4:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)

05:17:50 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf5e40fff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:50 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x5c})

05:17:50 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf5e60fff}, &(0x7f0000000180), &(0x7f00000001c0))

[ 3382.165098][   T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
05:17:50 executing program 4:
pselect6(0x40, &(0x7f0000000040)={0x4, 0x10001, 0x5, 0x2, 0x10000, 0xf4, 0x4, 0x1ff}, &(0x7f0000000080)={0x366, 0x3, 0x100, 0x1, 0x4, 0x3, 0x6, 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x100, 0x1, 0x10000, 0x5, 0x80000000}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x401, 0x3ff]}, 0x8}) (async)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:50 executing program 3:
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)

05:17:50 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x300})

05:17:50 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf5e61fff}, &(0x7f0000000180), &(0x7f00000001c0))

[ 3382.329036][   T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
05:17:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x1a0, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62}]}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0d2fc8d820fcc467d17393792b530fdfbcf288a0942a0027c42ded40111533133325"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "db5e9e5faedc3e600697847ba530b70b4dd9ac05f4e4d98bd8f3d134005a"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f9c7a3d74defb972c48a6915c056c72a63b54bfbf7123d767dec41262c73e2"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "27f4170b40f7e99edb1138c1200c72bcddbcc7252d79bb874427fbaa88008e2b45ab1c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1e, 0x3, "29e7b051d44c4e6380a43fb922901657717a7fa2a748d9757bba"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="110026bd7000ffdbdf256f00000008000300", @ANYRES32=r8], 0x88}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4010)
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:50 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x500})

05:17:50 executing program 3:
write$yama_ptrace_scope(0xffffffffffffffff, 0x0, 0x0)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$qrtrtun(0xffffff9c, &(0x7f0000000000), 0x410080)
write$qrtrtun(r0, &(0x7f0000000080)="072988935f58660ec48f5239afb5", 0xe)

[ 3382.469567][   T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
05:17:50 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x600})

05:17:50 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf5e61fff}, &(0x7f0000000180), &(0x7f00000001c0))

[ 3382.583388][T26431] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.2'.
05:17:50 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf6661fff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:50 executing program 4:
write$yama_ptrace_scope(0xffffffffffffffff, 0x0, 0x0) (async)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r0 = openat$qrtrtun(0xffffff9c, &(0x7f0000000000), 0x410080)
write$qrtrtun(r0, &(0x7f0000000080)="072988935f58660ec48f5239afb5", 0xe)

05:17:50 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x700})

05:17:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x1a0, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62}]}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0d2fc8d820fcc467d17393792b530fdfbcf288a0942a0027c42ded40111533133325"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "db5e9e5faedc3e600697847ba530b70b4dd9ac05f4e4d98bd8f3d134005a"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f9c7a3d74defb972c48a6915c056c72a63b54bfbf7123d767dec41262c73e2"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "27f4170b40f7e99edb1138c1200c72bcddbcc7252d79bb874427fbaa88008e2b45ab1c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1e, 0x3, "29e7b051d44c4e6380a43fb922901657717a7fa2a748d9757bba"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="110026bd7000ffdbdf256f00000008000300", @ANYRES32=r8], 0x88}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4010)
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000280)={0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) (async)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x1a0, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62}]}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0d2fc8d820fcc467d17393792b530fdfbcf288a0942a0027c42ded40111533133325"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "db5e9e5faedc3e600697847ba530b70b4dd9ac05f4e4d98bd8f3d134005a"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f9c7a3d74defb972c48a6915c056c72a63b54bfbf7123d767dec41262c73e2"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "27f4170b40f7e99edb1138c1200c72bcddbcc7252d79bb874427fbaa88008e2b45ab1c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1e, 0x3, "29e7b051d44c4e6380a43fb922901657717a7fa2a748d9757bba"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="110026bd7000ffdbdf256f00000008000300", @ANYRES32=r8], 0x88}}, 0x0) (async)
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4010) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000280)={0x0}) (async)

[ 3382.822722][T26405] chnl_net:caif_netlink_parms(): no params data found
05:17:50 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x2014})
r5 = openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0xede5a9818081c7c6, 0x3)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000080)={0xb0000010})

05:17:50 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x900})

05:17:51 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf6861fff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0xa00})

[ 3382.960612][   T51] bridge_slave_1: left allmulticast mode
[ 3382.978868][   T51] bridge_slave_1: left promiscuous mode
[ 3382.990579][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
05:17:51 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x410100)

[ 3383.026252][   T51] bridge_slave_0: left allmulticast mode
[ 3383.042259][   T51] bridge_slave_0: left promiscuous mode
[ 3383.082646][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
05:17:51 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x2014}) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x2014})
r5 = openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0xede5a9818081c7c6, 0x3)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000080)={0xb0000010})

05:17:51 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf6a61fff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:51 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0xb00})

05:17:51 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))
syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x410100)

05:17:51 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x4, &(0x7f0000000000)={[0xffffff80, 0x2]}, 0x8)

05:17:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0xc00})

05:17:51 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf6c61fff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:51 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x321002)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))

05:17:51 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x4, &(0x7f0000000000)={[0xffffff80, 0x2]}, 0x8)

05:17:51 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0xd00})

05:17:51 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf7266579}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:51 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0x2)

[ 3383.566116][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3383.603235][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3383.648566][   T51] bond0 (unregistering): Released all slaves
05:17:51 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x321002) (async)
syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x321002)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000300))

05:17:51 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0xe00})

05:17:51 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0x2)

05:17:51 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf73bdfff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:51 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, <r1=>0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, <r2=>0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x2, 0x4, 0x9})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000200), &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x3, 0x4, 0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={0x0, 0x0, r1})

05:17:51 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xf73c5fff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:51 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x1100})

05:17:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r10 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r11, 0x8000000)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r11, 0xc05064a7, &(0x7f0000000e80)={&(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[{}, {}, {}, {}, {}], &(0x7f0000000e00)=[0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x4, 0x0, r2})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x8000000)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[{}, {}, {}], &(0x7f00000006c0), &(0x7f0000000c00)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x9})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000b80)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[{}, {}, {}, {}], &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x4, 0x0, r2})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000140)=r9)

05:17:52 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x9, 0x3, 0x4480})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8000, 0x4, 0x80})
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r1, 0x0, 0x0)

[ 3384.032933][ T3480] Bluetooth: hci4: command tx timeout
05:17:52 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, <r1=>0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, <r2=>0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x2, 0x4, 0x9})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000200), &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x3, 0x4, 0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={0x0, 0x0, r1})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x2, 0x4, 0x9}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000200), &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x3, 0x4, 0x0, 0x0, r2}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={0x0, 0x0, r1}) (async)

05:17:52 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xfeffffff}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0x541b, &(0x7f0000000300))

[ 3384.154237][T26405] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3384.196113][T26405] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3384.218743][T26405] bridge_slave_0: entered allmulticast mode
05:17:52 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r10 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r11, 0x8000000)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r11, 0xc05064a7, &(0x7f0000000e80)={&(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[{}, {}, {}, {}, {}], &(0x7f0000000e00)=[0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x4, 0x0, r2})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x8000000)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[{}, {}, {}], &(0x7f00000006c0), &(0x7f0000000c00)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x9})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000b80)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[{}, {}, {}, {}], &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x4, 0x0, r2})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000140)=r9)

05:17:52 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06464b8, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000040)={r1, 0x8, 0x1, 0x1, 0xeb, 0x6, 0x3f})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], 0x2, 0x6, 0x2, 0x1})

05:17:52 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff0f0021}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:52 executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x9, 0x3, 0x4480})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8000, 0x4, 0x80})
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r1, 0x0, 0x0)

[ 3384.251344][T26405] bridge_slave_0: entered promiscuous mode
[ 3384.284877][T26405] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3384.292054][T26405] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3384.338772][T26405] bridge_slave_1: entered allmulticast mode
[ 3384.363966][T26405] bridge_slave_1: entered promiscuous mode
05:17:52 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x9, 0x3, 0x4480})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8000, 0x4, 0x80})
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r1, 0x0, 0x0)

05:17:52 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff0f6846}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0}) (async)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06464b8, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000040)={r1, 0x8, 0x1, 0x1, 0xeb, 0x6, 0x3f}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], 0x2, 0x6, 0x2, 0x1})

05:17:52 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x1200})

05:17:52 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r10 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r11, 0x8000000)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r11, 0xc05064a7, &(0x7f0000000e80)={&(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[{}, {}, {}, {}, {}], &(0x7f0000000e00)=[0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x4, 0x0, r2})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x8000000)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[{}, {}, {}], &(0x7f00000006c0), &(0x7f0000000c00)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x9})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000b80)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[{}, {}, {}, {}], &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x4, 0x0, r2})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000140)=r9)

05:17:52 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff0f7046}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:52 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x42a100)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x100)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0xa, 0x4})
ioctl$CEC_ADAP_G_PHYS_ADDR(r1, 0x80026101, &(0x7f0000000080))

[ 3384.570264][T26405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
05:17:52 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = mq_open(&(0x7f0000000240)='\\&\b@]\'', 0x0, 0x0, 0x0)
mq_notify(r1, &(0x7f0000000480)={0x0, 0x0, 0x1, @thr={0x0, 0x0}})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

[ 3384.638273][   T51] hsr_slave_0: left promiscuous mode
05:17:52 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x1800})

05:17:52 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r10 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r11, 0x8000000)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r11, 0xc05064a7, &(0x7f0000000e80)={&(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[{}, {}, {}, {}, {}], &(0x7f0000000e00)=[0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x4, 0x0, r2})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x8000000)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[{}, {}, {}], &(0x7f00000006c0), &(0x7f0000000c00)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x9})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000b80)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[{}, {}, {}, {}], &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x4, 0x0, r2})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000140)=r9)

05:17:52 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff0fe4f5}, &(0x7f0000000180), &(0x7f00000001c0))

[ 3384.698315][   T51] hsr_slave_1: left promiscuous mode
[ 3384.724050][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
05:17:52 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
write$yama_ptrace_scope(r0, 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x42a100)
syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x100) (async)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x100)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0xa, 0x4})
ioctl$CEC_ADAP_G_PHYS_ADDR(r1, 0x80026101, &(0x7f0000000080))

[ 3384.757615][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3384.778354][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3384.800071][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
05:17:52 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = mq_open(&(0x7f0000000240)='\\&\b@]\'', 0x0, 0x0, 0x0)
mq_notify(r1, &(0x7f0000000480)={0x0, 0x0, 0x1, @thr={0x0, 0x0}})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:52 executing program 3:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, <r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x4, 0xc})
write$yama_ptrace_scope(r0, 0x0, 0x0)
r2 = openat$drirender128(0xffffff9c, &(0x7f0000000140), 0xa00, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc00c64b5, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x4})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x3, 0x4, 0x2, 0x0, r1})

05:17:52 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x2500})

05:17:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r9 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r10, 0x8000000)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000e80)={&(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[{}, {}, {}, {}, {}], &(0x7f0000000e00)=[0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x4, 0x0, r2})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x8000000)

[ 3384.843365][   T51] veth1_macvtap: left promiscuous mode
[ 3384.868468][   T51] veth0_macvtap: left promiscuous mode
[ 3384.878526][   T51] veth1_vlan: left promiscuous mode
[ 3384.887980][   T51] veth0_vlan: left promiscuous mode
05:17:53 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff0fe6f5}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x6, 0x5, 0x5})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0})

05:17:53 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x4000})

05:17:53 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='3\x00', 0x2) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, <r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x4, 0xc})
write$yama_ptrace_scope(r0, 0x0, 0x0) (async)
r2 = openat$drirender128(0xffffff9c, &(0x7f0000000140), 0xa00, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc00c64b5, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x3, 0x4, 0x2, 0x0, r1})

05:17:53 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff1f66f6}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x5c00})

05:17:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r9 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r10, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x8000000)

05:17:53 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x6, 0x5, 0x5}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0})

05:17:53 executing program 0:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000005c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0xa, 0x2, 0x8})
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0xb4100, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000340)='3\x00', 0x2)
r2 = epoll_create(0x1ff)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc00c64b5, &(0x7f0000000640)={&(0x7f0000000600)=[0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x2, 0x6, 0x7, 0x1})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x9})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x1c, 0x5, 0x4, 0x4})
epoll_pwait2(r2, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000280)={0x77359400}, &(0x7f0000000440)={[0xffff, 0x2]}, 0x8)

05:17:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x1000000})

05:17:53 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r9 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x8000000)

05:17:53 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r9 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r10, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x8000000)

05:17:53 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff1f86f6}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0})
r2 = openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x402c5839, &(0x7f0000000780))
syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000040)={r5, r1, 0x14, 0x58c})

05:17:53 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x2000000})

05:17:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r9 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x8000000)

05:17:53 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, 0x0, <r1=>0x0}) (async, rerun: 64)
r2 = openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x402c5839, &(0x7f0000000780))
syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0) (async)
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r5}) (async)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000040)={r5, r1, 0x14, 0x58c})

05:17:53 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff1fa6f6}, &(0x7f0000000180), &(0x7f00000001c0))

[ 3385.519788][   T51] team0 (unregistering): Port device team_slave_1 removed
05:17:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r9 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x8000000)

[ 3385.580230][   T51] team0 (unregistering): Port device team_slave_0 removed
05:17:53 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x3000000})

05:17:53 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff1fc6f6}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:53 executing program 4:
openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x10000)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x5, 0x2, 0x6, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[<r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x4, 0x7, 0x5})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000400)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={&(0x7f0000000380)=[r1, r2], 0x2, r3, r4, 0x0, 0x200, 0x2, 0x38912c4c, {0x7ff, 0x9, 0x7ff, 0x8, 0x6, 0xff, 0x8, 0x7fff, 0x3f, 0x5, 0x7ff, 0x0, 0x1ff, 0x5, "29b7892179aa3b1e95f702a82391d5962c95b75295998fa1907aea7c6878dfdf"}})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0})

05:17:53 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r9 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x8000000)

05:17:53 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff1fe6f5}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x4000000})

[ 3385.845489][T26405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
05:17:54 executing program 3:
openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x10000) (async)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x5, 0x2, 0x6, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[<r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x4, 0x7, 0x5}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000400)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={&(0x7f0000000380)=[r1, r2], 0x2, r3, r4, 0x0, 0x200, 0x2, 0x38912c4c, {0x7ff, 0x9, 0x7ff, 0x8, 0x6, 0xff, 0x8, 0x7fff, 0x3f, 0x5, 0x7ff, 0x0, 0x1ff, 0x5, "29b7892179aa3b1e95f702a82391d5962c95b75295998fa1907aea7c6878dfdf"}}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0})

05:17:54 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r9 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x8000000)

05:17:54 executing program 4:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff5f3cf7}, &(0x7f0000000180), &(0x7f00000001c0))

[ 3386.009210][T26405] team0: Port device team_slave_0 added
05:17:54 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x5000000})

[ 3386.063791][T26405] team0: Port device team_slave_1 added
05:17:54 executing program 2:
r0 = openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x2020)
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000280)={0x0})

05:17:54 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r9 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x8000000)

[ 3386.112705][ T3480] Bluetooth: hci4: command tx timeout
05:17:54 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff5f3cf7}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:54 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff6fd7f5}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:54 executing program 4:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$yama_ptrace_scope(r0, 0x0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000005c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0xa, 0x2, 0x8}) (async)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0xb4100, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000340)='3\x00', 0x2) (async)
r2 = epoll_create(0x1ff)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc00c64b5, &(0x7f0000000640)={&(0x7f0000000600)=[0x0, 0x0], 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x2, 0x6, 0x7, 0x1}) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x9}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x1c, 0x5, 0x4, 0x4}) (async)
epoll_pwait2(r2, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000280)={0x77359400}, &(0x7f0000000440)={[0xffff, 0x2]}, 0x8)

05:17:54 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r9 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r9, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000)

[ 3386.257884][T26405] batman_adv: batadv0: Adding interface: batadv_slave_0
05:17:54 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff6fdff5}, &(0x7f0000000180), &(0x7f00000001c0))

[ 3386.305708][T26405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3386.392641][T26405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3386.426160][T26405] batman_adv: batadv0: Adding interface: batadv_slave_1
05:17:54 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x6000000})

05:17:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r9 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r9, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000)

[ 3386.451719][T26405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3386.483761][T26405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
05:17:54 executing program 0:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff7f9a56}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:54 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81})
r9 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r9, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000)

[ 3386.646350][T26405] hsr_slave_0: entered promiscuous mode
[ 3386.671963][T26405] hsr_slave_1: entered promiscuous mode
05:17:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x7000000})

[ 3386.712495][T26405] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3386.720110][T26405] Cannot create hsr debugfs directory
05:17:54 executing program 3:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff8f6c46}, &(0x7f0000000180), &(0x7f00000001c0))

05:17:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})
r8 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r9, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x8000000)

05:17:54 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7d, 0x4355856eff03b2a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[<r2=>0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0], &(0x7f0000000f00)=[{}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0], 0x2, 0x1, 0x1, 0x0, r2}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000480)={r4, 0x0, <r5=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[<r6=>0x0, 0x0], 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={0x0, <r7=>r5, <r8=>0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r6, r7, r5, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={r1, 0x4, 0xff, 0x3df2, 0x3fea00, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, <r9=>0x0}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000006c0)={r6, r5, r8, 0xfffffff8, 0x3, 0x1, 0x2, 0x8650, 0xc05, 0x2, 0x81}) (rerun: 64)
r10 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r11, 0x8000000) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r11, 0xc05064a7, &(0x7f0000000e80)={&(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[{}, {}, {}, {}, {}], &(0x7f0000000e00)=[0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x4, 0x0, r2}) (async, rerun: 64)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x8000000) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[{}, {}, {}], &(0x7f00000006c0), &(0x7f0000000c00)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x9}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000b80)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[{}, {}, {}, {}], &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x4, 0x0, r2})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000140)=r9)

[ 3386.950315][T26680] ------------[ cut here ]------------
[ 3386.956453][T26680] WARNING: CPU: 1 PID: 26680 at drivers/gpu/drm/vkms/vkms_crtc.c:103 vkms_get_vblank_timestamp+0x1d2/0x210
[ 3386.968185][T26680] Modules linked in:
[ 3386.972111][T26680] CPU: 1 PID: 26680 Comm: syz-executor.0 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
[ 3386.982279][T26680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 3386.992414][T26680] RIP: 0010:vkms_get_vblank_timestamp+0x1d2/0x210
[ 3386.998876][T26680] Code: 00 74 08 48 89 ef e8 ad 96 22 fc 48 89 5d 00 b0 01 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 7f 46 bf fb 90 <0f> 0b 90 eb e0 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 74 fe ff ff 48
[ 3387.018497][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3387.027739][T26680] RSP: 0018:ffffc9000b0b7780 EFLAGS: 00010293
[ 3387.033954][T26680] RAX: ffffffff85d5aed1 RBX: 000003149491c4a5 RCX: ffff8880772b8000
[ 3387.041968][T26680] RDX: 0000000000000000 RSI: 000003149491c4a5 RDI: 000003149491c4a5
[ 3387.050068][T26680] RBP: ffffc9000b0b7920 R08: ffffffff85d5ae39 R09: 0000000000000000
[ 3387.058142][T26680] R10: ffffc9000423a000 R11: ffffffff85d5ad00 R12: 000003149491c4a5
[ 3387.066208][T26680] R13: 1ffff92001616f24 R14: 0000000000000000 R15: ffff88801f9e4000
[ 3387.074244][T26680] FS:  0000000000000000(0000) GS:ffff8880b9500000(0063) knlGS:0000000056c6d400
[ 3387.083299][T26680] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 3387.089913][T26680] CR2: 000000002d722000 CR3: 000000007beba000 CR4: 00000000003506f0
[ 3387.098060][T26680] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3387.106141][T26680] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 3387.115350][T26680] Call Trace:
[ 3387.119664][T26680]  <TASK>
[ 3387.122675][T26680]  ? __warn+0x163/0x4b0
[ 3387.126920][T26680]  ? vkms_get_vblank_timestamp+0x1d2/0x210
[ 3387.132847][T26680]  ? report_bug+0x2b3/0x500
[ 3387.137493][T26680]  ? vkms_get_vblank_timestamp+0x1d2/0x210
[ 3387.143388][T26680]  ? handle_bug+0x3e/0x70
05:17:55 executing program 2:
syz_io_uring_setup(0x19f0, &(0x7f0000000100)={0x0, 0xff8f9c56}, &(0x7f0000000180), &(0x7f00000001c0))

[ 3387.148339][T26680]  ? exc_invalid_op+0x1a/0x50
[ 3387.153287][T26680]  ? asm_exc_invalid_op+0x1a/0x20
[ 3387.158413][T26680]  ? __pfx_vkms_get_vblank_timestamp+0x10/0x10
[ 3387.164668][T26680]  ? vkms_get_vblank_timestamp+0x139/0x210
[ 3387.170530][T26680]  ? vkms_get_vblank_timestamp+0x1d1/0x210
[ 3387.176521][T26680]  ? vkms_get_vblank_timestamp+0x1d2/0x210
[ 3387.182803][T26680]  ? __pfx_vkms_get_vblank_timestamp+0x10/0x10
[ 3387.189003][T26680]  drm_crtc_next_vblank_start+0x22d/0x480
[ 3387.194919][T26680]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 3387.201027][T26680]  ? __pfx_drm_crtc_next_vblank_start+0x10/0x10
[ 3387.207379][T26680]  drm_atomic_helper_wait_for_fences+0x277/0x8d0
[ 3387.214983][T26680]  ? __asan_memcpy+0x40/0x70
[ 3387.220683][T26680]  ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10
[ 3387.227658][T26680]  ? drm_atomic_helper_prepare_planes+0x65f/0xb50
[ 3387.234360][T26680]  drm_atomic_helper_commit+0x53a/0x9f0
[ 3387.239969][T26680]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[ 3387.246133][T26680]  drm_atomic_commit+0x2ac/0x310
05:17:55 executing program 4:
r0 = openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x2020)
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000280)={0x0})
openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x2020) (async)
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000280)={0x0}) (async)

[ 3387.251246][T26680]  ? __pfx_drm_atomic_commit+0x10/0x10
[ 3387.256825][T26680]  ? __pfx___drm_printfn_info+0x10/0x10
[ 3387.262548][T26680]  ? __pfx___drm_atomic_helper_set_config+0x10/0x10
[ 3387.269224][T26680]  ? drm_client_rotation+0x42b/0x560
[ 3387.274648][T26680]  drm_client_modeset_commit_atomic+0x676/0x7e0
[ 3387.280951][T26680]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[ 3387.287798][T26680]  ? trace_contention_end+0x3c/0x100
[ 3387.293244][T26680]  ? __pfx___mutex_lock+0x10/0x10
[ 3387.298312][T26680]  ? drm_client_dev_restore+0xae/0x270
[ 3387.303906][T26680]  drm_client_modeset_commit_locked+0xe0/0x520
[ 3387.310110][T26680]  drm_client_modeset_commit+0x4a/0x70
[ 3387.317791][T26680]  drm_fb_helper_lastclose+0xbb/0x180
[ 3387.324385][T26680]  drm_fbdev_generic_client_restore+0x34/0x40
[ 3387.330505][T26680]  drm_client_dev_restore+0x132/0x270
[ 3387.336511][T26680]  drm_release+0x47c/0x560
[ 3387.341016][T26680]  ? __pfx_drm_release+0x10/0x10
[ 3387.346035][T26680]  __fput+0x429/0x8a0
[ 3387.350116][T26680]  __ia32_sys_close+0x7f/0x110
[ 3387.354986][T26680]  __do_fast_syscall_32+0xbe/0x120
[ 3387.360150][T26680]  ? exc_page_fault+0x585/0x890
[ 3387.365156][T26680]  do_fast_syscall_32+0x34/0x80
[ 3387.370074][T26680]  entry_SYSENTER_compat_after_hwframe+0x7a/0x84
[ 3387.376527][T26680] RIP: 0023:0xf72dd579
[ 3387.380619][T26680] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
05:17:55 executing program 2:
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000080)='2\x00', 0x2)
write$yama_ptrace_scope(r0, &(0x7f0000000040)='2\x00', 0x2)
write$yama_ptrace_scope(r0, 0x0, 0x0)

[ 3387.400266][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3387.406708][T26680] RSP: 002b:00000000f757ead0 EFLAGS: 00000206 ORIG_RAX: 0000000000000006
[ 3387.415315][T26680] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000056c6d400
[ 3387.424697][T26680] RDX: 0000000000000000 RSI: 00000000f7434ff4 RDI: 0000000000000000
[ 3387.435645][T26680] RBP: 00000000f72d9000 R08: 0000000000000000 R09: 0000000000000000
[ 3387.443695][T26680] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3387.451728][T26680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3387.459794][T26680]  </TASK>
[ 3387.462906][T26680] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 3387.470200][T26680] CPU: 1 PID: 26680 Comm: syz-executor.0 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
[ 3387.480268][T26680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 3387.490337][T26680] Call Trace:
[ 3387.493633][T26680]  <TASK>
[ 3387.496569][T26680]  dump_stack_lvl+0x241/0x360
[ 3387.501317][T26680]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3387.506533][T26680]  ? __pfx__printk+0x10/0x10
[ 3387.511181][T26680]  ? vscnprintf+0x5d/0x90
[ 3387.515521][T26680]  panic+0x349/0x860
[ 3387.519427][T26680]  ? __warn+0x172/0x4b0
[ 3387.523599][T26680]  ? __pfx_panic+0x10/0x10
[ 3387.528042][T26680]  __warn+0x31e/0x4b0
[ 3387.532028][T26680]  ? vkms_get_vblank_timestamp+0x1d2/0x210
[ 3387.537848][T26680]  report_bug+0x2b3/0x500
[ 3387.542179][T26680]  ? vkms_get_vblank_timestamp+0x1d2/0x210
[ 3387.547994][T26680]  handle_bug+0x3e/0x70
[ 3387.552151][T26680]  exc_invalid_op+0x1a/0x50
[ 3387.556651][T26680]  asm_exc_invalid_op+0x1a/0x20
[ 3387.561501][T26680] RIP: 0010:vkms_get_vblank_timestamp+0x1d2/0x210
[ 3387.567924][T26680] Code: 00 74 08 48 89 ef e8 ad 96 22 fc 48 89 5d 00 b0 01 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 7f 46 bf fb 90 <0f> 0b 90 eb e0 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 74 fe ff ff 48
[ 3387.587537][T26680] RSP: 0018:ffffc9000b0b7780 EFLAGS: 00010293
[ 3387.593631][T26680] RAX: ffffffff85d5aed1 RBX: 000003149491c4a5 RCX: ffff8880772b8000
[ 3387.601603][T26680] RDX: 0000000000000000 RSI: 000003149491c4a5 RDI: 000003149491c4a5
[ 3387.609575][T26680] RBP: ffffc9000b0b7920 R08: ffffffff85d5ae39 R09: 0000000000000000
[ 3387.617546][T26680] R10: ffffc9000423a000 R11: ffffffff85d5ad00 R12: 000003149491c4a5
[ 3387.625521][T26680] R13: 1ffff92001616f24 R14: 0000000000000000 R15: ffff88801f9e4000
[ 3387.633505][T26680]  ? __pfx_vkms_get_vblank_timestamp+0x10/0x10
[ 3387.639683][T26680]  ? vkms_get_vblank_timestamp+0x139/0x210
[ 3387.645494][T26680]  ? vkms_get_vblank_timestamp+0x1d1/0x210
[ 3387.651314][T26680]  ? __pfx_vkms_get_vblank_timestamp+0x10/0x10
[ 3387.657478][T26680]  drm_crtc_next_vblank_start+0x22d/0x480
[ 3387.663213][T26680]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 3387.669206][T26680]  ? __pfx_drm_crtc_next_vblank_start+0x10/0x10
[ 3387.675465][T26680]  drm_atomic_helper_wait_for_fences+0x277/0x8d0
[ 3387.681795][T26680]  ? __asan_memcpy+0x40/0x70
[ 3387.686399][T26680]  ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10
[ 3387.693253][T26680]  ? drm_atomic_helper_prepare_planes+0x65f/0xb50
[ 3387.699687][T26680]  drm_atomic_helper_commit+0x53a/0x9f0
[ 3387.705238][T26680]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[ 3387.711309][T26680]  drm_atomic_commit+0x2ac/0x310
[ 3387.716274][T26680]  ? __pfx_drm_atomic_commit+0x10/0x10
[ 3387.721748][T26680]  ? __pfx___drm_printfn_info+0x10/0x10
[ 3387.727310][T26680]  ? __pfx___drm_atomic_helper_set_config+0x10/0x10
[ 3387.733922][T26680]  ? drm_client_rotation+0x42b/0x560
[ 3387.739224][T26680]  drm_client_modeset_commit_atomic+0x676/0x7e0
[ 3387.745483][T26680]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[ 3387.752254][T26680]  ? trace_contention_end+0x3c/0x100
[ 3387.757558][T26680]  ? __pfx___mutex_lock+0x10/0x10
[ 3387.762593][T26680]  ? drm_client_dev_restore+0xae/0x270
[ 3387.768073][T26680]  drm_client_modeset_commit_locked+0xe0/0x520
[ 3387.774234][T26680]  drm_client_modeset_commit+0x4a/0x70
[ 3387.779701][T26680]  drm_fb_helper_lastclose+0xbb/0x180
[ 3387.785086][T26680]  drm_fbdev_generic_client_restore+0x34/0x40
[ 3387.791163][T26680]  drm_client_dev_restore+0x132/0x270
[ 3387.796555][T26680]  drm_release+0x47c/0x560
[ 3387.800977][T26680]  ? __pfx_drm_release+0x10/0x10
[ 3387.805922][T26680]  __fput+0x429/0x8a0
[ 3387.809916][T26680]  __ia32_sys_close+0x7f/0x110
[ 3387.814689][T26680]  __do_fast_syscall_32+0xbe/0x120
[ 3387.819807][T26680]  ? exc_page_fault+0x585/0x890
[ 3387.824666][T26680]  do_fast_syscall_32+0x34/0x80
[ 3387.829529][T26680]  entry_SYSENTER_compat_after_hwframe+0x7a/0x84
[ 3387.835868][T26680] RIP: 0023:0xf72dd579
[ 3387.839956][T26680] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3387.859561][T26680] RSP: 002b:00000000f757ead0 EFLAGS: 00000206 ORIG_RAX: 0000000000000006
[ 3387.867995][T26680] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000056c6d400
[ 3387.875979][T26680] RDX: 0000000000000000 RSI: 00000000f7434ff4 RDI: 0000000000000000
[ 3387.883961][T26680] RBP: 00000000f72d9000 R08: 0000000000000000 R09: 0000000000000000
[ 3387.891956][T26680] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3387.899940][T26680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3387.907946][T26680]  </TASK>
[ 3387.911279][T26680] Kernel Offset: disabled
[ 3387.915688][T26680] Rebooting in 86400 seconds..