776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:07 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:08 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x807400, 0x0, 0x13, r0, 0x10000000) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) 02:30:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x2}, 0x0) 02:30:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x6}, 0x0) 02:30:08 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) [ 2094.876399][ T34] kauditd_printk_skb: 4 callbacks suppressed [ 2094.876415][ T34] audit: type=1326 audit(1607999408.589:702): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:08 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x7}, 0x0) 02:30:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x33fe0}}, 0x0) [ 2095.067751][ T34] audit: type=1326 audit(1607999408.779:703): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4292 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:08 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:08 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x8}, 0x0) 02:30:09 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r1, 0x0, 0x0) 02:30:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3e}, @void}}}, 0x24}}, 0x0) 02:30:09 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x10000000) r2 = add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', &(0x7f0000000280)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f00000002c0)={0x0, "ef08c88e29ec299fcce7d2871ffba0a0f560e221f35222dc241d9db292540e5d8248c91cf663b6f75930caa268c16465e53be20533e4b985c7ddb7bf61901657"}, 0x48, 0xfffffffffffffffc) socket$inet_tcp(0x2, 0x1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x100010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r3) add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', 0x0, 0x0, 0x0, r2) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="5ea8520245fc622e289164872264c32fc1af7015581f40db5cd34cffffeda827d38c3083900a54270c5ddbe52b27b112a23c86899af9570fa5d3f6533d784e17921b42c9bdee69ef6dd863120b5c27f69d5e87be208e1833deeeebfe9d9d2a67bd15ae830d18737cc7000c2a90723d487283fa4cde8a695e0e167c50ad48686fef3429ac6db2bc9100d4e2f122d746df5ea3d5fa37dbb070e25115434d5023d003ece6e3f41c230b02e11e56b4e8e6b97fa431a1d3e81baf8d8d477621624d61e6319105927de3c77c6ee13227594112b7cea7aed7cb033ead73a8529e1884fb5b08941fe1ab175a9b0d32f7f4506e8b4682", 0xf2, r2) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x100, 0x1c0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000340)=0x402, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[0x8, 0x3], 0x2, 0x800, 0x0, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f00000004c0)='/dev/dri/card#\x00', 0xa6d, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000440), &(0x7f0000000480)=0x30) io_uring_setup(0x3cb8, &(0x7f00000001c0)={0x0, 0x860c, 0x8, 0x3, 0x363, 0x0, r4}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x3, 0x3, 0x4}}, 0x26) 02:30:09 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000001, 0x13, r0, 0x10000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r2 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f0000000100), 0x0, 0x4) r4 = syz_io_uring_complete(0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x8940, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) syz_io_uring_submit(r3, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r4, 0x0, &(0x7f00000001c0)="9b2b57624a26bc", 0x7, 0x800, 0x1}, 0x200) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) [ 2095.833794][ T34] audit: type=1326 audit(1607999409.549:704): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4292 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 2095.899468][ T4321] netlink: 'syz-executor.4': attribute type 62 has an invalid length. [ 2095.919118][ T34] audit: type=1326 audit(1607999409.629:705): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4317 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:09 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r1, 0x0, 0x0) 02:30:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x5}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x9}, 0x0) [ 2096.006301][ T34] audit: type=1326 audit(1607999409.679:706): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4324 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:09 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r1, 0x0, 0x0) 02:30:09 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000001, 0x13, r0, 0x10000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r2 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f0000000100), 0x0, 0x4) r4 = syz_io_uring_complete(0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x8940, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) syz_io_uring_submit(r3, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r4, 0x0, &(0x7f00000001c0)="9b2b57624a26bc", 0x7, 0x800, 0x1}, 0x200) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xe}, 0x0) [ 2096.215600][ T34] audit: type=1326 audit(1607999409.929:707): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4344 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:10 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:10 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x807400, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000000)) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) syz_io_uring_setup(0x518b, &(0x7f0000000040)={0x0, 0xb9e6, 0x4, 0x2, 0x3b1, 0x0, r2}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @empty}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000280)={0x0, 0x2}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0xff, 0x9, 0x5, @ipv4={[], [], @rand_addr=0x64010102}, @private0, 0x1, 0x10, 0x0, 0x8}}) 02:30:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xf}, 0x0) 02:30:10 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2096.748757][ T34] audit: type=1326 audit(1607999410.460:708): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4324 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) [ 2096.838260][ T34] audit: type=1326 audit(1607999410.550:709): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4367 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:10 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x3e}, 0x0) 02:30:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:10 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 2097.619285][ T34] audit: type=1326 audit(1607999411.340:710): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4367 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:11 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x807400, 0x0, 0x13, r1, 0x10000000) 02:30:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x60}, 0x0) 02:30:11 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:11 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 2097.766915][ T34] audit: type=1326 audit(1607999411.480:711): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4416 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xf0}, 0x0) 02:30:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x140, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}]}, 0x140}}, 0x0) 02:30:12 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xfffffffffffffffe, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x807400, 0x0, 0x13, r0, 0x10000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="330000e3", @ANYRES16=r1, @ANYBLOB="010325bd7000fcdbdf25060000000500530000000000050053000100000008000500060000000500530001000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000140)={0x7}) 02:30:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:12 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x300}, 0x0) 02:30:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x138, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x138}}, 0x0) 02:30:12 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x130, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}]}, 0x130}}, 0x0) 02:30:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x500}, 0x0) 02:30:12 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:13 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x42f602) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x807400, 0x0, 0x13, r0, 0x10000000) 02:30:13 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x600}, 0x0) 02:30:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x48}}, 0x0) 02:30:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:13 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x700}, 0x0) 02:30:13 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:13 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x40}}, 0x0) 02:30:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x900}, 0x0) 02:30:14 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000007, 0x50, r0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x80010, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, r1, 0x0) 02:30:14 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}]}, 0x38}}, 0x0) 02:30:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xe00}, 0x0) [ 2100.323253][ T34] kauditd_printk_skb: 4 callbacks suppressed [ 2100.323268][ T34] audit: type=1326 audit(1607999414.040:716): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4473 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 02:30:14 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) [ 2100.443928][ T34] audit: type=1326 audit(1607999414.160:717): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4502 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xf00}, 0x0) 02:30:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2101.230546][ T34] audit: type=1326 audit(1607999414.950:718): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4502 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:15 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:15 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x3e00}, 0x0) 02:30:15 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:15 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:15 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x4695}, 0x0) 02:30:15 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:15 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x10000000) r2 = add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', &(0x7f0000000280)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f00000002c0)={0x0, "ef08c88e29ec299fcce7d2871ffba0a0f560e221f35222dc241d9db292540e5d8248c91cf663b6f75930caa268c16465e53be20533e4b985c7ddb7bf61901657"}, 0x48, 0xfffffffffffffffc) socket$inet_tcp(0x2, 0x1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x100010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r3) add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', 0x0, 0x0, 0x0, r2) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="5ea8520245fc622e289164872264c32fc1af7015581f40db5cd34cffffeda827d38c3083900a54270c5ddbe52b27b112a23c86899af9570fa5d3f6533d784e17921b42c9bdee69ef6dd863120b5c27f69d5e87be208e1833deeeebfe9d9d2a67bd15ae830d18737cc7000c2a90723d487283fa4cde8a695e0e167c50ad48686fef3429ac6db2bc9100d4e2f122d746df5ea3d5fa37dbb070e25115434d5023d003ece6e3f41c230b02e11e56b4e8e6b97fa431a1d3e81baf8d8d477621624d61e6319105927de3c77c6ee13227594112b7cea7aed7cb033ead73a8529e1884fb5b08941fe1ab175a9b0d32f7f4506e8b4682", 0xf2, r2) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x100, 0x1c0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000340)=0x402, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[0x8, 0x3], 0x2, 0x800, 0x0, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f00000004c0)='/dev/dri/card#\x00', 0xa6d, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000440), &(0x7f0000000480)=0x30) io_uring_setup(0x3cb8, &(0x7f00000001c0)={0x0, 0x860c, 0x8, 0x3, 0x363, 0x0, r4}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x3, 0x3, 0x4}}, 0x26) 02:30:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:15 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:15 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x6000}, 0x0) 02:30:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2101.571497][ T34] audit: type=1326 audit(1607999415.290:719): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4545 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:15 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:15 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:15 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x3e, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x9546}, 0x0) 02:30:15 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:16 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:16 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:16 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000001, 0x13, r0, 0x10000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r2 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f0000000100), 0x0, 0x4) r4 = syz_io_uring_complete(0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x8940, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) syz_io_uring_submit(r3, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r4, 0x0, &(0x7f00000001c0)="9b2b57624a26bc", 0x7, 0x800, 0x1}, 0x200) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xf000}, 0x0) 02:30:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x30000}, 0x0) [ 2102.409331][ T34] audit: type=1326 audit(1607999416.130:720): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4576 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:16 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x34000}, 0x0) 02:30:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:16 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x400300}, 0x0) 02:30:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:16 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xf0ffff}, 0x0) 02:30:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:17 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x140, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}]}, 0x140}}, 0x0) 02:30:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x1000000}, 0x0) 02:30:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:17 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x138, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x138}}, 0x0) 02:30:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:17 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x130, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}]}, 0x130}}, 0x0) 02:30:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x2000000}, 0x0) 02:30:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x3000000}, 0x0) 02:30:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:17 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x48}}, 0x0) 02:30:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:17 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x4000000}, 0x0) 02:30:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:17 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x40}}, 0x0) 02:30:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:17 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x5000000}, 0x0) 02:30:17 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}]}, 0x38}}, 0x0) 02:30:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:17 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x6000000}, 0x0) 02:30:18 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x30}}, 0x0) 02:30:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x4000000}, 0x0) 02:30:18 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x7000000}, 0x0) 02:30:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x8000000}, 0x0) 02:30:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x9000000}, 0x0) 02:30:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x2000000}, 0x0) 02:30:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x300, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xe000000}, 0x0) 02:30:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x9000000}, 0x0) 02:30:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x300}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xf000000}, 0x0) 02:30:18 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x138, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x138}}, 0x0) 02:30:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x140, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}]}, 0x140}}, 0x0) 02:30:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x3e000000}, 0x0) 02:30:19 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x8, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:19 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2105.444582][ T4790] netlink: 'syz-executor.2': attribute type 62 has an invalid length. 02:30:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x60000000}, 0x0) 02:30:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2105.561906][ T4797] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 02:30:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x140, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}]}, 0x140}}, 0x0) 02:30:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:19 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:19 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000001, 0x13, r0, 0x10000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r2 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f0000000100), 0x0, 0x4) r4 = syz_io_uring_complete(0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x8940, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) syz_io_uring_submit(r3, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r4, 0x0, &(0x7f00000001c0)="9b2b57624a26bc", 0x7, 0x800, 0x1}, 0x200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x95460000}, 0x0) [ 2105.684602][ T4804] netlink: 'syz-executor.2': attribute type 62 has an invalid length. 02:30:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 2105.727041][ T34] audit: type=1326 audit(1607999419.440:721): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4806 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x138, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x138}}, 0x0) 02:30:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x9effffff}, 0x0) 02:30:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 2105.886299][ T4828] netlink: 'syz-executor.2': attribute type 62 has an invalid length. 02:30:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x130, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}]}, 0x130}}, 0x0) 02:30:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xf0ffffff}, 0x0) 02:30:20 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x6842, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000100)) 02:30:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x48}}, 0x0) 02:30:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xfffff000}, 0x0) 02:30:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x40}}, 0x0) 02:30:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xffffff7f}, 0x0) 02:30:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}]}, 0x38}}, 0x0) 02:30:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 02:30:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xffffff9e}, 0x0) 02:30:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xfffffff0}, 0x0) 02:30:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x3, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2107.181589][ T4901] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 02:30:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x3000000000000}, 0x0) [ 2107.228054][ T4901] __nla_validate_parse: 3 callbacks suppressed [ 2107.228066][ T4901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 02:30:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 2107.302763][ T4911] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 02:30:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x40030000000000}, 0x0) 02:30:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2107.462815][ T4922] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2107.489222][ T4922] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 02:30:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 02:30:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x100000000000000}, 0x0) 02:30:21 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x10000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x4, 0x1, 0x3, {0xa, 0x4e21, 0xe40, @dev={0xfe, 0x80, [], 0x29}, 0xd4f}}}, 0x3a) [ 2107.757455][ T4942] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 02:30:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2107.799104][ T4942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2107.805087][ T34] audit: type=1326 audit(1607999421.521:722): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4948 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:21 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x200000000000000}, 0x0) 02:30:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x129, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x129}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x300000000000000}, 0x0) 02:30:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x300000000000000}, 0x0) 02:30:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x400000000000000}, 0x0) 02:30:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:22 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:22 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000001, 0x13, r0, 0x10000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f0000000100), 0x0, 0x4) r3 = syz_io_uring_complete(0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x8940, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) syz_io_uring_submit(r2, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f00000001c0)="9b2b57624a26bc", 0x7, 0x800, 0x1}, 0x200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000240)) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x148, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0xc3, 0x7}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xe7, 0xc5, "f0b9c16274942b4fa53066352b669962d776dca00462b5bfd14045145d44fa409e13fbccaed23daa31226de325648d0f367ff5bd60bc43db26dd6b3ac57ecea75a7877f3f1923976f34db844cf6339f6a48335be82ce74b9885f20736f870c6fbb93b89172863465a8fb2cd8c2b45ef5b897275d57fc237e840dd6c301b27ba846c8b9ca9be7722f654eb7a0ce382ea1bccb12af818a18ed8266156cf3493b8c65aff6486a758539c3eee4e461256a9fb7956baa60646e31752790074aaba23713a4cdb2b9f5307ec03ff170ddf4686ab6f46d1900ee046c72e3776e14ecf0f0853c0e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x148}}, 0x0) 02:30:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x500000000000000}, 0x0) 02:30:22 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x60a, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x60a, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) 02:30:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2108.824438][ T34] audit: type=1326 audit(1607999422.541:723): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4995 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x600000000000000}, 0x0) 02:30:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x117, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x700000000000000}, 0x0) 02:30:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x34000, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:23 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000280)={0xfffffff7, 0x5, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xc7, 0x3}) sendmsg$AUDIT_SET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x3e9, 0x100, 0x70bd26, 0x25dfdbff, {0x1, 0x0, 0x0, r4, 0x3, 0x81, 0x3e, 0x3, 0x0, 0xfffffff8}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20048054) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6gre0\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @empty}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6gre0\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @empty}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0xcfb36ea6b51592c4, 0x4b, 0xc3, 0x2, 0x0, @private0={0xfc, 0x0, [], 0x1}, @mcast2, 0x700, 0x7, 0x0, 0x80}}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@RTM_DELMDB={0x98, 0x55, 0x20, 0x70bd2b, 0x25dfdbff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x1, 0x1, {@in6_addr=@private1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x2, 0x3, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@in6_addr=@rand_addr=' \x01\x00'}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x0, {@in6_addr=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x86dd}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004000}, 0x40841) 02:30:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x117}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x800000000000000}, 0x0) 02:30:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x900000000000000}, 0x0) 02:30:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:23 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) 02:30:23 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, r1, 0x3, 0x2}, 0x40) r3 = socket$inet(0x2, 0x4, 0xe064) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080)="8e11f3f0c36a15d606c361731f90", &(0x7f00000000c0)=@tcp=r3, 0x2}, 0x20) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) 02:30:23 executing program 3: getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x13, r0, 0x10000000) 02:30:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:23 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = syz_open_dev$binderN(&(0x7f0000001840)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000001880)) r4 = syz_io_uring_complete(0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x800}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x210, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x8a, 0x1}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2d}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9a}, {0x8, 0x0, 0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048005}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r6 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=@mpls_newroute={0xd8, 0x18, 0x800, 0x70bd2d, 0x25dfdbff, {0x1c, 0x4, 0x14, 0xff, 0xfd, 0x3, 0xfd, 0xb, 0x1f00}, [@RTA_VIA={0x14, 0x12, {0x29, "b5f0e4e02fbd014835654fe47630"}}, @RTA_DST={0x8, 0x1, {0x7, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x1f}, {0x7, 0x0, 0x1}, {0x4}, {0x4d22}, {0xfff80}, {0x400, 0x0, 0x1}, {0x3}, {0x3}, {0x8, 0x0, 0x1}, {0xd1a, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xc308}, {0x5}, {0x3, 0x0, 0x1}, {0x81}, {0x9, 0x0, 0x1}, {0x100}, {0x6, 0x0, 0x1}, {0x2}, {0x9, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0x96c, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3}, {0x8}, {0x7ff}, {0x1, 0x0, 0x1}, {0x7}, {0x3}, {0x8}, {0x4e92, 0x0, 0x1}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xe1}, @RTA_VIA={0x14, 0x12, {0x3, "4b737a11d1125a18317e2b1f9715"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 02:30:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 2109.898443][ T34] audit: type=1326 audit(1607999423.621:724): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5044 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xe00000000000000}, 0x0) [ 2109.945096][ T34] audit: type=1326 audit(1607999423.651:725): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:23 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:23 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:23 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x800) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x1, 0x2, 0x3, 0x101, 0x775, 0x10000, 0x1, 0x1000, 0x6}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x807400, 0x0, 0x13, r0, 0x10000000) 02:30:23 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xf00000000000000}, 0x0) [ 2110.207306][ T34] audit: type=1326 audit(1607999423.931:726): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5068 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:24 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, r1, 0x3, 0x2}, 0x40) r3 = socket$inet(0x2, 0x4, 0xe064) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080)="8e11f3f0c36a15d606c361731f90", &(0x7f00000000c0)=@tcp=r3, 0x2}, 0x20) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) 02:30:24 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x800) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x1, 0x2, 0x3, 0x101, 0x775, 0x10000, 0x1, 0x1000, 0x6}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x807400, 0x0, 0x13, r0, 0x10000000) 02:30:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x3e00000000000000}, 0x0) [ 2110.700838][ T34] audit: type=1326 audit(1607999424.421:727): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5077 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x6000000000000000}, 0x0) [ 2110.819493][ T34] audit: type=1326 audit(1607999424.541:728): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5084 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 02:30:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x9546000000000000}, 0x0) 02:30:25 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, r1, 0x3, 0x2}, 0x40) r3 = socket$inet(0x2, 0x4, 0xe064) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080)="8e11f3f0c36a15d606c361731f90", &(0x7f00000000c0)=@tcp=r3, 0x2}, 0x20) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) [ 2111.532117][ T34] audit: type=1326 audit(1607999425.251:729): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5106 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x9effffff00000000}, 0x0) 02:30:25 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mq_unlink(&(0x7f0000000000)='.\\($$\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x4000010, r0, 0x10000000) 02:30:25 executing program 1: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x531e81) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x76800000000000, 0x7, 0x63f, 0x20}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000100), 0x0, 0x4) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r6, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r7}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001800)=ANY=[@ANYBLOB="1c140000", @ANYRES16=r3, @ANYBLOB="000828bd7000ffdbdf257a00000008e37107946eaa546f71ddbe2be0dc1d218590ec96d5cc0600000037", @ANYRES32=r7, @ANYBLOB="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"], 0x141c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f0000000100), 0x0, 0x4) syz_io_uring_complete(r1) socket$phonet(0x23, 0x2, 0x1) r8 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x10000000) 02:30:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xf0ffffff00000000}, 0x0) 02:30:25 executing program 3: socket$inet6_dccp(0xa, 0x6, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x10000000) 02:30:25 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) r2 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\xa3}\'.)D!\x00', 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={r2, 0xc6, 0x78}, &(0x7f00000003c0)=ANY=[@ANYBLOB="656c633d706b63733120686173683d6469676573745f6e756c6f0000000010000000000000000000000027cc9d1e000303000000000000000000000000000000010000000000000000feffffff000000000000"], &(0x7f0000000200)="a8acd5f1363d370de90ec53b6f055abd7d42dfd10c0aa691de3c07a3432bb7ab18754ae529092bc6d4e5d4c337e67171979ffa7bd13937aebb1bbaed729ed5126b39d069c968ebda0a357b7be16fc471c485af3dad43eb1c5e060b9634613c92503aa61b5625eb1e73d9d0362ca6f91d1ccb87b30e919029cdc9a4459182de42b47e5b589c34677144b5f5bb06f5cb28b8e117a84558820e047c1bc48968c98e5c4b954c13f20a6205a2351d3620cb2794f623689f3fbf01b95e065cee8c28a1c98f2b9ffebe", &(0x7f0000000300)=""/120) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x10000000) 02:30:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 02:30:26 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, r1, 0x3, 0x2}, 0x40) r3 = socket$inet(0x2, 0x4, 0xe064) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080)="8e11f3f0c36a15d606c361731f90", &(0x7f00000000c0)=@tcp=r3, 0x2}, 0x20) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) 02:30:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x9, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x6, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xffffff7f00000000}, 0x0) 02:30:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0xab, 0x81, 0x4, @local, @loopback, 0x40, 0x20, 0x5, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x2f, 0x2, 0x3, 0x10000, 0x8, @local, @private2={0xfc, 0x2, [], 0x1}, 0x7, 0x40, 0xb79, 0xeb9a}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', r2, 0x29, 0x9, 0x2d, 0x3, 0xac, @private1, @dev, 0x40, 0x10, 0x2, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r1, 0x4, 0x1, 0x23, 0x400, 0x20, @ipv4={[], [], @broadcast}, @dev={0xfe, 0x80, [], 0x1f}, 0x7830, 0x7800, 0x6, 0x4}}) socket$kcm(0x29, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x81) setitimer(0x1, &(0x7f0000000340)={{}, {r3, r4/1000+60000}}, &(0x7f00000000c0)) syz_io_uring_setup(0x1342, &(0x7f0000000240)={0x0, 0xa5a8, 0x10, 0x2, 0xac}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 02:30:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0xfffffffffffff000}, 0x0) [ 2112.441746][ T34] audit: type=1326 audit(1607999426.161:730): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5142 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:26 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000080)={&(0x7f0000000000)=[0x40000, 0xfffffffb, 0x76fa, 0x7f], &(0x7f0000000040)=[0x0], 0x4, 0xfffffffe, 0xeeeeeeee}) 02:30:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0xab, 0x81, 0x4, @local, @loopback, 0x40, 0x20, 0x5, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x2f, 0x2, 0x3, 0x10000, 0x8, @local, @private2={0xfc, 0x2, [], 0x1}, 0x7, 0x40, 0xb79, 0xeb9a}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', r2, 0x29, 0x9, 0x2d, 0x0, 0xac, @private1, @dev={0xfe, 0x80, [], 0x37}, 0x40, 0x10, 0x2, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r1, 0x4, 0x1, 0x23, 0x400, 0x20, @ipv4={[], [], @broadcast}, @dev={0xfe, 0x80, [], 0x1f}, 0x7830, 0x7800, 0x6, 0x4}}) socket$kcm(0x29, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x81) setitimer(0x1, &(0x7f0000000340)={{}, {r3, r4/1000+60000}}, &(0x7f00000000c0)) syz_io_uring_setup(0x1342, &(0x7f0000000240)={0x0, 0xa5a8, 0x10, 0x2, 0xac}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 02:30:26 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, r0, 0x3, 0x2}, 0x40) r2 = socket$inet(0x2, 0x4, 0xe064) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080)="8e11f3f0c36a15d606c361731f90", &(0x7f00000000c0)=@tcp=r2, 0x2}, 0x20) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 02:30:26 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$binderN(&(0x7f0000001840)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000001880)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x1}) 02:30:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 02:30:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3e, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x2}, 0x0) 02:30:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x409, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:27 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}]}, 0x24}}, 0x4001) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000140)="299deaaf2b0ee02a82c2e065e0f1552d957ebde95986ed978b5ba585f26507cb", 0x20}) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r3}) 02:30:27 executing program 3: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x414d, &(0x7f0000000000)={0x0, 0x746e, 0x20, 0x3, 0x251, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x89}]}, 0x64}, 0x1, 0x0, 0x0, 0x4804}, 0x4801) getitimer(0x1, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) 02:30:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x3}, 0x0) [ 2113.339565][ T34] audit: type=1326 audit(1607999427.061:731): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5173 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2113.421190][ T5179] netlink: 'syz-executor.2': attribute type 62 has an invalid length. 02:30:27 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, r0, 0x3, 0x2}, 0x40) r2 = socket$inet(0x2, 0x4, 0xe064) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080)="8e11f3f0c36a15d606c361731f90", &(0x7f00000000c0)=@tcp=r2, 0x2}, 0x20) 02:30:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x2}, 0x0) 02:30:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x4}, 0x0) 02:30:27 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = syz_io_uring_complete(0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r5, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r6}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x160, r1, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x50}}}}, [@NL80211_ATTR_IE={0x124, 0x2a, [@tim={0x5, 0x15, {0x8, 0x80, 0x81, "47adfeff72c3819df9acd9811ef404925da1"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x80, 0x80, 0x47}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x8}}, @perr={0x84, 0xdc, {0x80, 0xe, [@not_ext={{}, @device_a, 0x400, "", 0x3a}, @not_ext={{}, @device_b, 0xffffffff, "", 0x9}, @not_ext={{}, @device_b, 0x3, "", 0x25}, @ext={{}, @broadcast, 0x2, @device_b, 0x3b}, @not_ext={{}, @device_a, 0x80, "", 0x1c}, @ext={{}, @device_b, 0x8, @device_b, 0xb}, @ext={{}, @device_b, 0xffff7e2c, @broadcast, 0x33}, @not_ext={{}, @device_b, 0x6a19bdc4, "", 0x31}, @ext={{}, @device_b, 0x5, @broadcast, 0x41}, @not_ext={{}, @device_a, 0x9, "", 0x2b}, @ext={{}, @broadcast, 0x5, @device_a, 0x2a}, @not_ext={{}, @broadcast, 0x20, "", 0x42}, @not_ext={{}, @device_b, 0xffffc810, "", 0x1d}, @ext={{}, @device_b, 0x0, @broadcast, 0x9}]}}, @peer_mgmt={0x75, 0x14, {0x1, 0x20, @void, @void, @val="a3d2e3df147b7d0aa30d1c7124e18dd9"}}, @chsw_timing={0x68, 0x4, {0x4, 0x80}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x400}]}, 0x160}, 0x1, 0x0, 0x0, 0x84}, 0x2000c811) r7 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x4, 0xe000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r9, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r10}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x95ce28ae, 0x10000000, 0x3, 0x3, 0x7, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x3f]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3cb}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x400}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xc}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x260}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xdd, 0x200, 0xfffffff7, 0x7]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x7, 0x9e92, 0x6, 0x9e32, 0x8]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) 02:30:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x7ffff000, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0xab, 0x81, 0x4, @local, @loopback, 0x40, 0x20, 0x5, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x2f, 0x2, 0x3, 0x10000, 0x8, @local, @private2={0xfc, 0x2, [], 0x1}, 0x7, 0x40, 0xb79, 0xeb9a}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r1, 0x4, 0x1, 0x23, 0x400, 0x20, @ipv4={[], [], @broadcast}, @dev={0xfe, 0x80, [], 0x1f}, 0x7830, 0x7800, 0x6, 0x4}}) socket$kcm(0x29, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x81) setitimer(0x1, &(0x7f0000000340)={{}, {r2, r3/1000+60000}}, &(0x7f00000000c0)) syz_io_uring_setup(0x1342, &(0x7f0000000240)={0x0, 0xa5a8, 0x10, 0x2, 0xac}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 02:30:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:27 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) 02:30:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x5}, 0x0) 02:30:28 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x7e13, &(0x7f0000000000)={0x0, 0xe38c, 0x8, 0x3, 0xb3}, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000100)=0x2004, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) 02:30:28 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, r0, 0x3, 0x2}, 0x40) socket$inet(0x2, 0x4, 0xe064) 02:30:28 executing program 1: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, r0, 0x3, 0x2}, 0x40) r2 = socket$inet(0x2, 0x4, 0xe064) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080)="8e11f3f0c36a15d606c361731f90", &(0x7f00000000c0)=@tcp=r2, 0x2}, 0x20) 02:30:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:28 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, r0, 0x3, 0x2}, 0x40) 02:30:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x6}, 0x0) 02:30:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x5}, 0x0) 02:30:28 executing program 3: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x3ffffff, 0x2c0002) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1, r2}) 02:30:28 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 02:30:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0xc, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x7}, 0x0) 02:30:28 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, r0, 0x3, 0x2}, 0x40) 02:30:28 executing program 3: ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x10}) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'bond_slave_1\x00'}) pselect6(0x40, &(0x7f0000000140)={0x2, 0x2, 0x7, 0xf63, 0x200, 0x1000000, 0x80, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0x40ea, 0x3, 0x4a1, 0x7fffffff, 0x0, 0x1, 0x6}, &(0x7f00000001c0)={0x4, 0x9, 0x2, 0x8, 0x8005, 0x2, 0x1, 0x4}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) clock_gettime(0x0, &(0x7f0000000080)) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0xfffff800, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x13, r0, 0x10000000) 02:30:28 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000001840)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000001880)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x1}) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x100000001, 0x482702) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x800}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r4, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_batadv\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdbe}]}, 0x80}}, 0x4840) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r5, r6}) 02:30:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000200000000000000810000000c00990000000000000000000a000600ffffffffffff00002e00334fdad40000000802110000000000"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xdc, r1, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd7, 0xf}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1, 0x10000, 0x3ff]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x647}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x928]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x8001, 0x5, 0xfff, 0x3]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x400, 0x101, 0x7, 0x7, 0x200, 0x20]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x66c}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x564}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1bd}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4803}, 0x4000085) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r3}) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) syz_io_uring_setup(0x36c1, &(0x7f00000000c0)={0x0, 0xcf4a, 0x20, 0x1, 0x2ca, 0x0, r4}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000fb0000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)={0xf21001, 0x12f, 0x2}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x12345}, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6gre0\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @empty}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', r7, 0x4, 0x2, 0x9, 0x3, 0x4, @remote, @loopback, 0x1, 0x7, 0x535a}}) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0x6) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000000)) 02:30:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x8}, 0x0) 02:30:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0xc}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0xffffff9e, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:28 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, r0, 0x3, 0x2}, 0x40) [ 2114.840952][ T5245] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2114.844833][ T5247] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2114.868132][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 02:30:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x9}, 0x0) 02:30:28 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x111000) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2}) 02:30:28 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000a00)) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x4) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0x4) r4 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x2) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f00000001c0)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x9, 0x6, 0x799d, 0xa8c, 0x95, 0x8], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x3fbdfa21, 0xe0e0e0e0}) 02:30:28 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 02:30:28 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r3}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x224d40, 0x0) syz_io_uring_complete(0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) 02:30:29 executing program 3: ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x10}) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'bond_slave_1\x00'}) pselect6(0x40, &(0x7f0000000140)={0x2, 0x2, 0x7, 0xf63, 0x200, 0x1000000, 0x80, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0x40ea, 0x3, 0x4a1, 0x7fffffff, 0x0, 0x1, 0x6}, &(0x7f00000001c0)={0x4, 0x9, 0x2, 0x8, 0x8005, 0x2, 0x1, 0x4}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) clock_gettime(0x0, &(0x7f0000000080)) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0xfffff800, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x13, r0, 0x10000000) 02:30:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xe}, 0x0) 02:30:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x9effffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 02:30:29 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1, r2}) 02:30:29 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r3}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x224d40, 0x0) syz_io_uring_complete(0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) 02:30:29 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r3}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x224d40, 0x0) syz_io_uring_complete(0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) 02:30:29 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:30:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xf}, 0x0) 02:30:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xe}, 0x0) 02:30:29 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000100)={0x6d2c, 0x3, &(0x7f0000000040)=[0xff, 0x100, 0x200], &(0x7f0000000080)=[0x9], &(0x7f00000000c0)=[0x20, 0x40b5, 0x7f]}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x80000) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x10000000) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x6a516bca2946a12}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_getaddr={0x20, 0x16, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x3f, 0x8, 0xff}, [@IFA_FLAGS={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) write$6lowpan_enable(r2, &(0x7f0000000180)='1', 0x1) 02:30:29 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:30:30 executing program 3: ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x10}) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'bond_slave_1\x00'}) pselect6(0x40, &(0x7f0000000140)={0x2, 0x2, 0x7, 0xf63, 0x200, 0x1000000, 0x80, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0x40ea, 0x3, 0x4a1, 0x7fffffff, 0x0, 0x1, 0x6}, &(0x7f00000001c0)={0x4, 0x9, 0x2, 0x8, 0x8005, 0x2, 0x1, 0x4}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) clock_gettime(0x0, &(0x7f0000000080)) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0xfffff800, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x13, r0, 0x10000000) 02:30:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x3e}, 0x0) 02:30:30 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r3}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x224d40, 0x0) syz_io_uring_complete(0x0) 02:30:30 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r4, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r5}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x47}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0xeb}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf, 0x13, r0, 0x10000000) r6 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0xc00) r7 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000080)="35e6c0836d27c7488f11", &(0x7f00000000c0)=@udp=r7}, 0x20) r8 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, 0x0) ioctl$IOC_PR_CLEAR(r8, 0x401070cd, &(0x7f0000000000)={0x7}) 02:30:30 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x4, 0x7, 0x2, 0x7, 0xfa, 0x66], 0x6, 0x0, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xc, 0x7fffffff, 0x5, 0x40, 0x810, r0, 0x20, [], 0x0, r2, 0x4, 0x4, 0x1}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x30, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x60a, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000000)=0x40, 0x4) 02:30:30 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:30:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 02:30:30 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r3}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x224d40, 0x0) 02:30:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x60}, 0x0) 02:30:30 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r3}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x224d40, 0x0) syz_io_uring_complete(0x0) 02:30:30 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x2000, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) 02:30:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 02:30:31 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r3}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x224d40, 0x0) syz_io_uring_complete(0x0) 02:30:31 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x2000, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) 02:30:31 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r3}) 02:30:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xf0}, 0x0) 02:30:31 executing program 3: ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x10}) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'bond_slave_1\x00'}) pselect6(0x40, &(0x7f0000000140)={0x2, 0x2, 0x7, 0xf63, 0x200, 0x1000000, 0x80, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0x40ea, 0x3, 0x4a1, 0x7fffffff, 0x0, 0x1, 0x6}, &(0x7f00000001c0)={0x4, 0x9, 0x2, 0x8, 0x8005, 0x2, 0x1, 0x4}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) clock_gettime(0x0, &(0x7f0000000080)) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0xfffff800, 0x4) 02:30:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x3, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 02:30:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x300}, 0x0) 02:30:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x0, 0x1, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 02:30:31 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) 02:30:31 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r3}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x224d40, 0x0) syz_io_uring_complete(0x0) 02:30:31 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x2000, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) 02:30:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x0, 0x0, 0xdf, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 02:30:31 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) socket$kcm(0x29, 0x2, 0x0) 02:30:31 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r3}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x224d40, 0x0) 02:30:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x500}, 0x0) 02:30:31 executing program 3: ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x10}) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'bond_slave_1\x00'}) pselect6(0x40, &(0x7f0000000140)={0x2, 0x2, 0x7, 0xf63, 0x200, 0x1000000, 0x80, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0x40ea, 0x3, 0x4a1, 0x7fffffff, 0x0, 0x1, 0x6}, &(0x7f00000001c0)={0x4, 0x9, 0x2, 0x8, 0x8005, 0x2, 0x1, 0x4}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) clock_gettime(0x0, &(0x7f0000000080)) 02:30:31 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x2000, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x440, 0xffffffffffffffff, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 02:30:31 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:32 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r3}) 02:30:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 02:30:32 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x600}, 0x0) 02:30:32 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x2000, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:32 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) 02:30:32 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 02:30:32 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x2000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x700}, 0x0) 02:30:32 executing program 3: ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x10}) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'bond_slave_1\x00'}) pselect6(0x40, &(0x7f0000000140)={0x2, 0x2, 0x7, 0xf63, 0x200, 0x1000000, 0x80, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0x40ea, 0x3, 0x4a1, 0x7fffffff, 0x0, 0x1, 0x6}, &(0x7f00000001c0)={0x4, 0x9, 0x2, 0x8, 0x8005, 0x2, 0x1, 0x4}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) 02:30:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 02:30:32 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) socket$kcm(0x29, 0x2, 0x0) 02:30:32 executing program 1: write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7}, 0x40) 02:30:32 executing program 1: write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:32 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x900}, 0x0) 02:30:33 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:33 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "f5cec208550a3fd345eb666334c44777fc29a78ccb46bffad7dcd206686d3b6bad4e82fb88d0361e24cf930f88ce86c6564ea14a3b03bf3ad96eae6d7a951029", 0x34}, 0x48, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:33 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:33 executing program 1: write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:33 executing program 3: ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x10}) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) pselect6(0x40, &(0x7f0000000140)={0x2, 0x2, 0x7, 0xf63, 0x200, 0x1000000, 0x80, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0x40ea, 0x3, 0x4a1, 0x7fffffff, 0x0, 0x1, 0x6}, &(0x7f00000001c0)={0x4, 0x9, 0x2, 0x8, 0x8005, 0x2, 0x1, 0x4}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) 02:30:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xe00}, 0x0) 02:30:33 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x2000, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:33 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:33 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:33 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:33 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:33 executing program 2: write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xf00}, 0x0) 02:30:33 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:33 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x2000, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:34 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:34 executing program 3: ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x10}) pselect6(0x40, &(0x7f0000000140)={0x2, 0x2, 0x7, 0xf63, 0x200, 0x1000000, 0x80, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0x40ea, 0x3, 0x4a1, 0x7fffffff, 0x0, 0x1, 0x6}, &(0x7f00000001c0)={0x4, 0x9, 0x2, 0x8, 0x8005, 0x2, 0x1, 0x4}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) 02:30:34 executing program 2: write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x3e00}, 0x0) 02:30:34 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:34 executing program 1: socket$kcm(0x29, 0x5, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:34 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x2000, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:34 executing program 1: socket$kcm(0x29, 0x5, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:34 executing program 2: write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x4695}, 0x0) 02:30:34 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:34 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:34 executing program 1: socket$kcm(0x29, 0x5, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:35 executing program 3: pselect6(0x40, &(0x7f0000000140)={0x2, 0x2, 0x7, 0xf63, 0x200, 0x1000000, 0x80, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0x40ea, 0x3, 0x4a1, 0x7fffffff, 0x0, 0x1, 0x6}, &(0x7f00000001c0)={0x4, 0x9, 0x2, 0x8, 0x8005, 0x2, 0x1, 0x4}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) 02:30:35 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x6000}, 0x0) 02:30:35 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:35 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, 0x0, 0x0) 02:30:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x4695}, 0x0) 02:30:35 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:35 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, 0x0, 0x0) 02:30:35 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, 0x0, 0x0) 02:30:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x9546}, 0x0) 02:30:35 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:35 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, 0x0, 0x0) 02:30:36 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:36 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, 0x0, 0x0) 02:30:36 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x40ea, 0x3, 0x4a1, 0x7fffffff, 0x0, 0x1, 0x6}, &(0x7f00000001c0)={0x4, 0x9, 0x2, 0x8, 0x8005, 0x2, 0x1, 0x4}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) 02:30:36 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xf000}, 0x0) 02:30:36 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x0, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:36 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, 0x0, 0x0) 02:30:36 executing program 2: socket$kcm(0x29, 0x5, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:36 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:36 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x0, 0x0, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x30000}, 0x0) 02:30:36 executing program 2: socket$kcm(0x29, 0x5, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x34000}, 0x0) 02:30:36 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x0, 0x0, 0x0, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:37 executing program 3: pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x9, 0x2, 0x8, 0x8005, 0x2, 0x1, 0x4}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) 02:30:37 executing program 5: write$nbd(0xffffffffffffffff, 0x0, 0x0) 02:30:37 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:37 executing program 2: socket$kcm(0x29, 0x5, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:37 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, &(0x7f0000000000), 0x10) 02:30:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x400300}, 0x0) 02:30:37 executing program 5: write$nbd(0xffffffffffffffff, 0x0, 0x0) 02:30:37 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:37 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, 0x0, 0x0) 02:30:37 executing program 1: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r1, 0x10000000) 02:30:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xf0ffff}, 0x0) 02:30:37 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, 0x0, 0x0) 02:30:38 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) 02:30:38 executing program 5: write$nbd(0xffffffffffffffff, 0x0, 0x0) 02:30:38 executing program 1: ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x10}) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0xc0c42) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'bond_slave_1\x00'}) pselect6(0x40, &(0x7f0000000140)={0x2, 0x2, 0x7, 0xf63, 0x200, 0x1000000, 0x80, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0x40ea, 0x3, 0x4a1, 0x7fffffff, 0x0, 0x1, 0x6}, &(0x7f00000001c0)={0x4, 0x9, 0x2, 0x8, 0x8005, 0x2, 0x1, 0x4}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) clock_gettime(0x0, &(0x7f0000000080)) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0xfffff800, 0x4) 02:30:38 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, 0xffffffffffffffff, 0x10000000) 02:30:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x1000000}, 0x0) 02:30:38 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, 0x0, 0x0) 02:30:38 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, 0xffffffffffffffff, 0x10000000) 02:30:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x2000000}, 0x0) 02:30:38 executing program 5: r0 = socket$kcm(0x29, 0x0, 0x0) write$nbd(r0, 0x0, 0x0) 02:30:38 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x0, 0x2, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:38 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, 0xffffffffffffffff, 0x10000000) 02:30:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x3000000}, 0x0) 02:30:39 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) 02:30:39 executing program 5: r0 = socket$kcm(0x29, 0x0, 0x0) write$nbd(r0, 0x0, 0x0) 02:30:39 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x0, 0x0, 0x4, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:39 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r0, 0x10000000) 02:30:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x4000000}, 0x0) 02:30:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x1000000}, 0x0) 02:30:39 executing program 5: r0 = socket$kcm(0x29, 0x0, 0x0) write$nbd(r0, 0x0, 0x0) 02:30:39 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r0, 0x10000000) 02:30:39 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)={r1, r2}) 02:30:39 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x0, 0x0, 0x0, "827db147efbb522202a6dc6f"}, 0x1c) 02:30:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x5000000}, 0x0) 02:30:39 executing program 5: socket$kcm(0x29, 0x5, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) 02:30:40 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) 02:30:40 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r0, 0x10000000) 02:30:40 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) write$nbd(r0, &(0x7f0000000000), 0x10) 02:30:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x6000000}, 0x0) 02:30:40 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)={r1, r2}) 02:30:40 executing program 5: socket$kcm(0x29, 0x5, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) 02:30:40 executing program 5: socket$kcm(0x29, 0x5, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) 02:30:40 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x807400, 0x400000000000, 0x13, r0, 0x10000000) 02:30:40 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)={r1, r2}) 02:30:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x7000000}, 0x0) 02:30:40 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r0, 0x10000000) 02:30:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x8000000}, 0x0) [ 2126.495097][ T34] audit: type=1326 audit(1607999440.212:732): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5612 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:40 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) 02:30:40 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0), 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r2, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f00000002c0)={0x4, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x6, 0x2000, 0x5, 0xf54, 0xf000, 0x855, 0x3], &(0x7f0000000280)=[0x7fff, 0x8, 0x1, 0xbe, 0x4]}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}]}, 0x34}}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xfc907b6852c37f0}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r5, @ANYBLOB="00012bbd7000fbdbdf250600000008000500040008000500060000000500530001000000"], 0x34}, 0x1, 0x0, 0x0, 0x40002}, 0x20044800) 02:30:40 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)={r1}) 02:30:40 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r0, 0x10000000) 02:30:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x9000000}, 0x0) 02:30:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xe000000}, 0x0) 02:30:41 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x807400, 0x20ffb000, 0x13, r0, 0x10000000) 02:30:41 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)) 02:30:41 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r0, 0x10000000) 02:30:41 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0), 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r2, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f00000002c0)={0x4, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x6, 0x2000, 0x5, 0xf54, 0xf000, 0x855, 0x3], &(0x7f0000000280)=[0x7fff, 0x8, 0x1, 0xbe, 0x4]}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}]}, 0x34}}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xfc907b6852c37f0}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r5, @ANYBLOB="00012bbd7000fbdbdf250600000008000500040008000500060000000500530001000000"], 0x34}, 0x1, 0x0, 0x0, 0x40002}, 0x20044800) 02:30:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xf000000}, 0x0) [ 2127.400914][ T34] audit: type=1326 audit(1607999441.122:733): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5639 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x10000000) 02:30:41 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x0) 02:30:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x3e000000}, 0x0) 02:30:41 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)) 02:30:41 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0), 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r2, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f00000002c0)={0x4, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x6, 0x2000, 0x5, 0xf54, 0xf000, 0x855, 0x3], &(0x7f0000000280)=[0x7fff, 0x8, 0x1, 0xbe, 0x4]}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}]}, 0x34}}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xfc907b6852c37f0}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r5, @ANYBLOB="00012bbd7000fbdbdf250600000008000500040008000500060000000500530001000000"], 0x34}, 0x1, 0x0, 0x0, 0x40002}, 0x20044800) 02:30:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x10000000) 02:30:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x10000000) 02:30:41 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x10000000) 02:30:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x60000000}, 0x0) 02:30:41 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0), 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r2, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f00000002c0)={0x4, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x6, 0x2000, 0x5, 0xf54, 0xf000, 0x855, 0x3], &(0x7f0000000280)=[0x7fff, 0x8, 0x1, 0xbe, 0x4]}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}]}, 0x34}}, 0x4) 02:30:41 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)) 02:30:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x10, r0, 0x10000000) 02:30:42 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={r0}) 02:30:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x10, r0, 0x10000000) 02:30:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0), 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r2, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f00000002c0)={0x4, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x6, 0x2000, 0x5, 0xf54, 0xf000, 0x855, 0x3], &(0x7f0000000280)=[0x7fff, 0x8, 0x1, 0xbe, 0x4]}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}]}, 0x34}}, 0x4) 02:30:42 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0), 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r2, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r3}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f00000002c0)={0x4, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x6, 0x2000, 0x5, 0xf54, 0xf000, 0x855, 0x3], &(0x7f0000000280)=[0x7fff, 0x8, 0x1, 0xbe, 0x4]}) 02:30:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x95460000}, 0x0) 02:30:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x60000000}, 0x0) 02:30:42 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={r0}) 02:30:42 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={r0}) 02:30:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x10, r0, 0x10000000) 02:30:42 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) socket$inet(0x2, 0x2, 0x6) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000100)=[0x8001, 0x0, 0x79a9, 0x3, 0x4, 0x2], &(0x7f0000000040)=[0x1e9, 0x6, 0x5, 0xad, 0x7ff, 0x7, 0xffe], &(0x7f0000000080)=[0x3, 0x1000, 0x18a3, 0x3f, 0x1]}) 02:30:42 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0), 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r2, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r3}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') 02:30:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x9effffff}, 0x0) 02:30:42 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, &(0x7f0000000040)={r1, r2}) 02:30:42 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0), 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r2, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r3}) socket$nl_generic(0x10, 0x3, 0x10) 02:30:43 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)={r1}) 02:30:43 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, 0xffffffffffffffff, 0x10000000) 02:30:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xf0ffffff}, 0x0) 02:30:43 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, &(0x7f0000000040)={r1, r2}) 02:30:43 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0), 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r2, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r3}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') 02:30:43 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)={r1}) 02:30:43 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, 0xffffffffffffffff, 0x10000000) 02:30:43 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0), 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r2, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r3}) 02:30:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xfffff000}, 0x0) 02:30:43 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, &(0x7f0000000040)={r1, r2}) 02:30:43 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xffffffffffffffff, 0x80002) r1 = syz_io_uring_complete(0x0) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x1, &(0x7f0000000100)=""/41, &(0x7f0000000140)=0x29) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x8c02, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x2b8, &(0x7f00000002c0)}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000000004acb55f3526776ef9d3d4ccb32925f9b6b458736049facc130ba072eadb6aba0888a314d8cf8149613ec8b39cd85532e63e89c91fae3f65221486f34c2c70fe34b2a2b5e30248ee131f4d5967237b3eb623af7b4ecffe83086f9505546b6a66916857ffe18a", @ANYRES16=0x0, @ANYBLOB="020026bd7000ffdbdf25380000000c00580002000000000000000c00580025000000000000000c00580038000000000000000c0058006900000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40004) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000000)={0x0, 0xb0b1937ec889d70d}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) 02:30:43 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)={r1}) 02:30:43 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, 0xffffffffffffffff, 0x10000000) 02:30:43 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0), 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r2, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000) socket$inet6_mptcp(0xa, 0x1, 0x106) 02:30:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xffffff7f}, 0x0) 02:30:43 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, &(0x7f0000000040)={r1}) 02:30:43 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x807400, 0x1c000000, 0x13, r0, 0x10000000) 02:30:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x807400, 0x1c000000, 0x13, r0, 0x10000000) 02:30:43 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)={r1}) 02:30:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 2129.811607][ T34] audit: type=1326 audit(1607999443.533:734): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5745 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:43 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0), 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r2, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000000) 02:30:43 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, &(0x7f0000000040)) 02:30:43 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)={r1}) [ 2129.898885][ T34] audit: type=1326 audit(1607999443.573:735): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5742 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:43 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)={r1}) 02:30:43 executing program 3: ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) 02:30:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xfffffff0}, 0x0) 02:30:43 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0), 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r2, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 02:30:43 executing program 3: ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) 02:30:44 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a1, &(0x7f0000000040)={r1, r2}) 02:30:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x3e00, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:44 executing program 1: socket$kcm(0x29, 0x5, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={r0}) 02:30:44 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0), 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r2, 0x80000000) 02:30:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x3000000000000}, 0x0) 02:30:44 executing program 3: ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) 02:30:44 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a1, &(0x7f0000000040)={r1, r2}) 02:30:44 executing program 1: socket$kcm(0x29, 0x5, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={r0}) 02:30:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x40030000000000}, 0x0) 02:30:44 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r1, 0x80000000) 02:30:44 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, &(0x7f0000000040)) 02:30:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x807400, 0xa000000, 0x13, r0, 0x10000000) 02:30:44 executing program 1: socket$kcm(0x29, 0x5, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={r0}) 02:30:44 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a1, &(0x7f0000000040)={r1, r2}) [ 2130.852226][ T34] audit: type=1326 audit(1607999444.573:736): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5795 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 02:30:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 02:30:44 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, &(0x7f0000000040)) 02:30:44 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r1, 0x80000000) 02:30:44 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, 0x0) 02:30:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x100000000000000}, 0x0) 02:30:44 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1, r2}) 02:30:44 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, &(0x7f0000000040)) 02:30:44 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, 0xffffffffffffffff, 0x80000000) 02:30:44 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, 0x0) 02:30:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0xab, 0x81, 0x4, @local, @loopback, 0x40, 0x20, 0x5, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x3, 0x10000, 0x8, @local, @private2={0xfc, 0x2, [], 0x1}, 0x7, 0x40, 0xb79, 0xeb9a}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', r2, 0x29, 0x9, 0x2d, 0x3, 0xac, @private1, @dev={0xfe, 0x80, [], 0x37}, 0x40, 0x10, 0x2, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r1, 0x4, 0x1, 0x23, 0x400, 0x20, @ipv4={[], [], @broadcast}, @dev={0xfe, 0x80, [], 0x1f}, 0x7830, 0x7800, 0x6, 0x4}}) socket$kcm(0x29, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x81) setitimer(0x1, &(0x7f0000000340)={{}, {r3, r4/1000+60000}}, &(0x7f00000000c0)) syz_io_uring_setup(0x1342, &(0x7f0000000240)={0x0, 0xa5a8, 0x10, 0x2, 0xac}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 02:30:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x200000000000000}, 0x0) 02:30:45 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1, r2}) 02:30:45 executing program 3: socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) 02:30:45 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, 0xffffffffffffffff, 0x80000000) 02:30:45 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, 0x0) 02:30:45 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)) 02:30:45 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xe55, 0x4eec2) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, 0xffffffffffffffff, 0x80000000) 02:30:45 executing program 3: socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) 02:30:45 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1, r2}) 02:30:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x300000000000000}, 0x0) 02:30:45 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8980, &(0x7f0000000040)={r1, r2}) 02:30:45 executing program 3: socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) 02:30:45 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)) 02:30:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x400000000000000}, 0x0) 02:30:45 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r1, 0x80000000) 02:30:45 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8914, &(0x7f0000000040)={r1, r2}) 02:30:45 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1}) 02:30:45 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)) 02:30:45 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, 0x0) 02:30:45 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r1, 0x80000000) 02:30:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r1, 0x80000000) 02:30:45 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1}) 02:30:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x500000000000000}, 0x0) 02:30:45 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, &(0x7f0000000040)) 02:30:46 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, 0x0) 02:30:46 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1}) 02:30:46 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r0, 0x80000000) 02:30:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r1, 0x80000000) 02:30:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x600000000000000}, 0x0) 02:30:46 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, 0x0) 02:30:46 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r0, 0x80000000) 02:30:46 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, 0x0) 02:30:46 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r1, 0x80000000) 02:30:46 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, 0x0) 02:30:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x700000000000000}, 0x0) 02:30:46 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x80000000) 02:30:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x40, 0x0, 0x3e80948b, 0x1004, 0x1, 0x8, [], 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x40) 02:30:46 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, 0xffffffffffffffff, 0x80000000) 02:30:46 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, 0x0) 02:30:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x800000000000000}, 0x0) 02:30:46 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x80000000) 02:30:46 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:46 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, 0xffffffffffffffff, 0x80000000) 02:30:46 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x80000000) 02:30:46 executing program 1: ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e2, 0x0) 02:30:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x900000000000000}, 0x0) 02:30:46 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000300)={0x0, 0x1a}) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, 0xffffffffffffffff, 0x80000000) 02:30:46 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0x80000000) 02:30:46 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={r0, r1}) 02:30:46 executing program 1: ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e2, 0x0) 02:30:46 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xe00000000000000}, 0x0) 02:30:46 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0x80000000) 02:30:46 executing program 1: ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e2, 0x0) 02:30:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r1, 0x80000000) 02:30:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xf00000000000000}, 0x0) 02:30:46 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={r0, r1}) 02:30:46 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r0, 0x80000000) 02:30:47 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)) 02:30:47 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0x80000000) 02:30:47 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, 0x0) 02:30:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x3e00000000000000}, 0x0) 02:30:47 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={r0, r1}) 02:30:47 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r0, 0x80000000) 02:30:47 executing program 5: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, 0xffffffffffffffff, 0x80000000) 02:30:47 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, 0x0) 02:30:47 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)) 02:30:47 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x80000000) 02:30:47 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1, r2}) 02:30:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x6000000000000000}, 0x0) 02:30:47 executing program 5: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, 0xffffffffffffffff, 0x80000000) 02:30:47 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x80000000) 02:30:47 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, 0x0) 02:30:47 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)) 02:30:47 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1, r2}) 02:30:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x9546000000000000}, 0x0) 02:30:47 executing program 5: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, 0xffffffffffffffff, 0x80000000) 02:30:47 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x80000000) 02:30:47 executing program 1: socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e2, 0x0) 02:30:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r0}) 02:30:47 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1, r2}) 02:30:47 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r0, 0x0) 02:30:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 02:30:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r0}) 02:30:47 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x80000000) 02:30:47 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1, r2}) 02:30:47 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r0, 0x0) 02:30:47 executing program 1: socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e2, 0x0) 02:30:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 02:30:47 executing program 4: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x80000000) 02:30:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r0}) 02:30:47 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1, r2}) 02:30:47 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r0, 0x0) 02:30:47 executing program 4: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x80000000) 02:30:48 executing program 1: socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e2, 0x0) 02:30:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 02:30:48 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:48 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1, r2}) 02:30:48 executing program 4: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x80000000) 02:30:48 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1, r2}) 02:30:48 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)) 02:30:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 02:30:48 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1, r2}) 02:30:48 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x60, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:48 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 02:30:48 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)) 02:30:48 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1, r2}) 02:30:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:48 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:48 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000040)={r1, r2}) 02:30:48 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 02:30:48 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)) 02:30:48 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1, r2}) 02:30:48 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 02:30:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x800, 0x70bd2c, 0xd40, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x40805) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000000)=0x7, 0x0, 0x4) 02:30:48 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 02:30:48 executing program 1: ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)) 02:30:48 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x3}, 0x0) 02:30:48 executing program 2: socket$kcm(0x29, 0x5, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={r0, r1}) 02:30:48 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1, r2}) 02:30:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x800, 0x70bd2c, 0xd40, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x40805) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000000)=0x7, 0x0, 0x4) 02:30:48 executing program 1: ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)) 02:30:48 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:30:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 02:30:48 executing program 2: socket$kcm(0x29, 0x5, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={r0, r1}) 02:30:49 executing program 3: socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r0}) 02:30:49 executing program 1: ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)) 02:30:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x800, 0x70bd2c, 0xd40, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x40805) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000000)=0x7, 0x0, 0x4) 02:30:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) 02:30:49 executing program 3: socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r0}) 02:30:49 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:49 executing program 2: socket$kcm(0x29, 0x5, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={r0, r1}) 02:30:49 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)) 02:30:49 executing program 3: socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r0}) 02:30:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x6}, 0x0) 02:30:49 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, 0x0) 02:30:49 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4c01, &(0x7f0000000040)={r1, r2}) 02:30:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x800, 0x70bd2c, 0xd40, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x40805) 02:30:49 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)) 02:30:49 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, 0x0) 02:30:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0xab, 0x0, 0x4, @local, @loopback, 0x40, 0x20, 0x5, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x2f, 0x2, 0x3, 0x10000, 0x8, @local, @private2={0xfc, 0x2, [], 0x1}, 0x7, 0x40, 0xb79, 0xeb9a}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', r2, 0x29, 0x9, 0x2d, 0x3, 0xac, @private1, @dev={0xfe, 0x80, [], 0x37}, 0x40, 0x10, 0x2, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r1, 0x4, 0x1, 0x23, 0x400, 0x20, @ipv4={[], [], @broadcast}, @dev={0xfe, 0x80, [], 0x1f}, 0x7830, 0x7800, 0x6, 0x4}}) socket$kcm(0x29, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x81) setitimer(0x1, &(0x7f0000000340)={{}, {r3, r4/1000+60000}}, &(0x7f00000000c0)) syz_io_uring_setup(0x1342, &(0x7f0000000240)={0x0, 0xa5a8, 0x10, 0x2, 0xac}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 02:30:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x7}, 0x0) 02:30:49 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, 0x0) 02:30:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:49 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, 0x0) 02:30:49 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)) 02:30:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x800, 0x70bd2c, 0xd40, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x40805) 02:30:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x0) 02:30:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:49 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, 0x0) 02:30:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x800, 0x70bd2c, 0xd40, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x40805) 02:30:49 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, 0x0) 02:30:49 executing program 1: socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)) 02:30:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x0) 02:30:49 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:49 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)) 02:30:49 executing program 1: socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)) 02:30:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x800, 0x70bd2c, 0xd40, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x40805) 02:30:50 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)) 02:30:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xe}, 0x0) 02:30:50 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:50 executing program 1: socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)) 02:30:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:50 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:30:50 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)) 02:30:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xf}, 0x0) 02:30:50 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, 0x0) 02:30:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x3e}, 0x0) 02:30:50 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1}) 02:30:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:50 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, 0x0) 02:30:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:50 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, 0x0) 02:30:50 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1}) 02:30:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x60}, 0x0) 02:30:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 02:30:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x300}, 0x0) 02:30:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:50 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1}) 02:30:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x500}, 0x0) 02:30:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x600}, 0x0) 02:30:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x700}, 0x0) 02:30:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x900}, 0x0) 02:30:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 02:30:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:51 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 02:30:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x3e00}, 0x0) 02:30:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4695}, 0x0) 02:30:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 02:30:52 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x9546}, 0x0) 02:30:52 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 02:30:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:52 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 02:30:53 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 02:30:53 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 02:30:53 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 02:30:53 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 02:30:53 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 02:30:53 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:53 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 02:30:54 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 02:30:54 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 02:30:54 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 02:30:54 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:30:54 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:30:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 02:30:54 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:30:54 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:30:54 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 02:30:54 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:30:55 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:30:55 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 02:30:55 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:30:55 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:30:55 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 02:30:55 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:30:55 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:30:55 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 02:30:55 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:30:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x3e000000}, 0x0) 02:30:55 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:30:55 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:30:55 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 02:30:55 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:55 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x95460000}, 0x0) 02:30:56 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 02:30:56 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 02:30:56 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 02:30:56 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 02:30:56 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 02:30:56 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:30:56 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 02:30:56 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:56 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:30:57 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 02:30:57 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:30:57 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 02:30:57 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:30:57 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x2) 02:30:57 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:30:57 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x3) 02:30:57 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:30:57 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x4) 02:30:57 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x5) 02:30:58 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x6) 02:30:58 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x7) 02:30:58 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:30:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x8) 02:30:58 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:30:58 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x9) 02:30:58 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:30:58 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xe) 02:30:58 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xf) 02:30:58 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:30:58 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:30:58 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:30:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x3e) 02:30:58 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:30:58 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x60) 02:30:59 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xf0) 02:30:59 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:30:59 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x300) 02:30:59 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x500) 02:30:59 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x600) 02:30:59 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x700) 02:30:59 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 2: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 1: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:30:59 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:30:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x900) 02:31:00 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 3: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 2: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 1: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xe00) 02:31:00 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 3: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:00 executing program 1: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 2: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xf00) 02:31:00 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:00 executing program 3: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x3e00) 02:31:00 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:00 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x4695) 02:31:00 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:00 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x6000) 02:31:00 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:00 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:01 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x9546) 02:31:01 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 5: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xf000) 02:31:01 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:01 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 5: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 3: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:01 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x30000) 02:31:01 executing program 5: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 3: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xf000) 02:31:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x6000) 02:31:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x34000) 02:31:01 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:01 executing program 3: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x400300) 02:31:01 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:01 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:01 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xf0ffff) 02:31:02 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:02 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x1000000) 02:31:02 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:02 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x2000000) 02:31:02 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x3000000) 02:31:02 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 3: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x4000000) 02:31:02 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 3: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x5000000) 02:31:02 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 1: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 3: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:02 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x6000000) 02:31:03 executing program 1: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x7000000) 02:31:03 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:03 executing program 1: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x8000000) 02:31:03 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 2: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 2: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x9000000) 02:31:03 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xe000000) 02:31:03 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xf000000) 02:31:03 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:03 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:03 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:04 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x3e000000) 02:31:04 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x60000000) 02:31:04 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:04 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x95460000) 02:31:04 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:04 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x9effffff) 02:31:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:04 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:04 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xf0ffffff) 02:31:04 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:04 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:04 executing program 1: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xfffff000) 02:31:04 executing program 4: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:04 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:05 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 1: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 2: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:05 executing program 1: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xffffff7f) 02:31:05 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:05 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:05 executing program 5: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xffffff9e) 02:31:05 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:05 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xfffffff0) 02:31:05 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:05 executing program 2: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x3000000000000) 02:31:05 executing program 3: syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x40030000000000) 02:31:05 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 3: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xf0ffffffffffff) 02:31:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 02:31:06 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x100000000000000) 02:31:06 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x200000000000000) 02:31:06 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:06 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:06 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x300000000000000) 02:31:06 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:06 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x400000000000000) 02:31:06 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:06 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000004c0)) 02:31:06 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:06 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x500000000000000) 02:31:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x600000000000000) 02:31:06 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:06 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:06 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:06 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:07 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 5: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x700000000000000) 02:31:07 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:07 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x800000000000000) 02:31:07 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:07 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:07 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x900000000000000) 02:31:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), 0x0) 02:31:07 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 2: syz_genetlink_get_family_id$nl80211(0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xe00000000000000) 02:31:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xf00000000000000) 02:31:07 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x10000000) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x3e00000000000000) 02:31:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xf00000000000000) 02:31:08 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x6000000000000000) 02:31:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={r1}) 02:31:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x9546000000000000) 02:31:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, 0x0) 02:31:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000040)={0xffffffffffffffff, r1}) 02:31:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x9effffff00000000) 02:31:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x59d2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x433d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab87}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xda}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x80002) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x20010, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x110d, 0x0, 0x2, 0x2eb, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0xab, 0x0, 0x4, @local, @loopback, 0x40, 0x20, 0x5, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x2f, 0x2, 0x3, 0x10000, 0x8, @local, @private2={0xfc, 0x2, [], 0x1}, 0x7, 0x40, 0xb79, 0xeb9a}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', r2, 0x29, 0x9, 0x2d, 0x3, 0xac, @private1, @dev={0xfe, 0x80, [], 0x37}, 0x40, 0x10, 0x2, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r1, 0x4, 0x1, 0x23, 0x400, 0x20, @ipv4={[], [], @broadcast}, @dev={0xfe, 0x80, [], 0x1f}, 0x7830, 0x7800, 0x6, 0x4}}) socket$kcm(0x29, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x81) setitimer(0x1, &(0x7f0000000340)={{}, {r3, r4/1000+60000}}, &(0x7f00000000c0)) syz_io_uring_setup(0x1342, &(0x7f0000000240)={0x0, 0xa5a8, 0x10, 0x2, 0xac}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 02:31:08 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 2 (fault-call:2 fault-nth:0): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xf0ffffff00000000) [ 2155.094559][ T8910] FAULT_INJECTION: forcing a failure. [ 2155.094559][ T8910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2155.117219][ T8914] FAULT_INJECTION: forcing a failure. [ 2155.117219][ T8914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2155.135215][ T8910] CPU: 0 PID: 8910 Comm: syz-executor.4 Not tainted 5.10.0-syzkaller #0 02:31:08 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2155.143554][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2155.153608][ T8910] Call Trace: [ 2155.156907][ T8910] dump_stack+0x107/0x163 [ 2155.161246][ T8910] should_fail.cold+0x5/0xa [ 2155.165763][ T8910] _copy_from_user+0x2c/0x180 [ 2155.170455][ T8910] io_uring_setup+0xa3/0x3770 [ 2155.175141][ T8910] ? ksys_write+0x12d/0x250 [ 2155.179663][ T8910] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2155.183313][ T8917] FAULT_INJECTION: forcing a failure. [ 2155.183313][ T8917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2155.184872][ T8910] ? wait_for_completion+0x260/0x260 [ 2155.204501][ T8910] ? vfs_write+0x18e/0xa30 [ 2155.209144][ T8910] ? fput_many+0x2f/0x1a0 [ 2155.214953][ T8910] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2155.220854][ T8910] do_syscall_64+0x2d/0x70 [ 2155.226155][ T8910] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2155.232959][ T8910] RIP: 0033:0x45e159 [ 2155.236863][ T8910] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2155.256470][ T8910] RSP: 002b:00007f1aa7fedbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2155.264880][ T8910] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2155.273037][ T8910] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2155.281010][ T8910] RBP: 00007f1aa7fedca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2155.288979][ T8910] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2155.296947][ T8910] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2155.306343][ T8917] CPU: 1 PID: 8917 Comm: syz-executor.1 Not tainted 5.10.0-syzkaller #0 [ 2155.314059][ T8919] FAULT_INJECTION: forcing a failure. [ 2155.314059][ T8919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2155.314673][ T8917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2155.314680][ T8917] Call Trace: [ 2155.314702][ T8917] dump_stack+0x107/0x163 [ 2155.314724][ T8917] should_fail.cold+0x5/0xa [ 2155.349803][ T8917] _copy_from_user+0x2c/0x180 [ 2155.354478][ T8917] io_uring_setup+0xa3/0x3770 [ 2155.359146][ T8917] ? ksys_write+0x12d/0x250 [ 2155.363645][ T8917] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2155.368839][ T8917] ? wait_for_completion+0x260/0x260 [ 2155.374120][ T8917] ? vfs_write+0x18e/0xa30 [ 2155.378529][ T8917] ? fput_many+0x2f/0x1a0 [ 2155.382860][ T8917] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2155.388744][ T8917] do_syscall_64+0x2d/0x70 [ 2155.393150][ T8917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2155.399026][ T8917] RIP: 0033:0x45e159 [ 2155.402924][ T8917] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2155.422512][ T8917] RSP: 002b:00007f4112469be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2155.430916][ T8917] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2155.438888][ T8917] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2155.446850][ T8917] RBP: 00007f4112469ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2155.454809][ T8917] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2155.462857][ T8917] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2155.470837][ T8919] CPU: 0 PID: 8919 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2155.479173][ T8919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2155.489226][ T8919] Call Trace: [ 2155.493720][ T8919] dump_stack+0x107/0x163 [ 2155.498057][ T8919] should_fail.cold+0x5/0xa [ 2155.502559][ T8919] _copy_from_user+0x2c/0x180 [ 2155.507231][ T8919] io_uring_setup+0xa3/0x3770 [ 2155.511909][ T8919] ? ksys_write+0x12d/0x250 [ 2155.516798][ T8919] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2155.522011][ T8919] ? wait_for_completion+0x260/0x260 [ 2155.527296][ T8919] ? vfs_write+0x18e/0xa30 [ 2155.531717][ T8919] ? fput_many+0x2f/0x1a0 [ 2155.536081][ T8919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2155.541977][ T8919] do_syscall_64+0x2d/0x70 [ 2155.546385][ T8919] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2155.552271][ T8919] RIP: 0033:0x45e159 [ 2155.556935][ T8919] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2155.576551][ T8919] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2155.584983][ T8919] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2155.592957][ T8919] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2155.600924][ T8919] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2155.608890][ T8919] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2155.616898][ T8919] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2155.624887][ T8914] CPU: 1 PID: 8914 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 2155.633222][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2155.643277][ T8914] Call Trace: [ 2155.646578][ T8914] dump_stack+0x107/0x163 [ 2155.650914][ T8914] should_fail.cold+0x5/0xa [ 2155.655428][ T8914] _copy_from_user+0x2c/0x180 [ 2155.660118][ T8914] io_uring_setup+0xa3/0x3770 [ 2155.664802][ T8914] ? ksys_write+0x12d/0x250 [ 2155.669947][ T8914] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2155.676079][ T8914] ? wait_for_completion+0x260/0x260 [ 2155.683694][ T8914] ? vfs_write+0x18e/0xa30 [ 2155.689415][ T8914] ? fput_many+0x2f/0x1a0 [ 2155.693765][ T8914] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2155.699907][ T8914] do_syscall_64+0x2d/0x70 [ 2155.705802][ T8914] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2155.711922][ T8914] RIP: 0033:0x45e159 [ 2155.717518][ T8914] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2155.737124][ T8914] RSP: 002b:00007f1c1f14cbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 02:31:09 executing program 3 (fault-call:2 fault-nth:1): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2155.746010][ T8914] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2155.755769][ T8914] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2155.763996][ T8914] RBP: 00007f1c1f14cca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2155.772211][ T8914] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2155.780444][ T8914] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:09 executing program 4 (fault-call:2 fault-nth:1): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:09 executing program 1 (fault-call:2 fault-nth:1): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2155.855274][ T8924] FAULT_INJECTION: forcing a failure. [ 2155.855274][ T8924] name failslab, interval 1, probability 0, space 0, times 0 [ 2155.881238][ T8925] FAULT_INJECTION: forcing a failure. [ 2155.881238][ T8925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2155.924833][ T8924] CPU: 1 PID: 8924 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2155.933190][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2155.943251][ T8924] Call Trace: [ 2155.946560][ T8924] dump_stack+0x107/0x163 [ 2155.950904][ T8924] should_fail.cold+0x5/0xa [ 2155.952965][ T8928] FAULT_INJECTION: forcing a failure. [ 2155.952965][ T8928] name failslab, interval 1, probability 0, space 0, times 0 [ 2155.955420][ T8924] ? io_uring_setup+0x1e1c/0x3770 [ 2155.955442][ T8924] ? io_uring_setup+0x1e1c/0x3770 [ 2155.955461][ T8924] should_failslab+0x5/0x10 [ 2155.955485][ T8924] kmem_cache_alloc_trace+0x55/0x360 [ 2155.987810][ T8924] io_uring_setup+0x1e1c/0x3770 [ 2155.992677][ T8924] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2155.997874][ T8924] ? wait_for_completion+0x260/0x260 [ 2156.003163][ T8924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.009047][ T8924] do_syscall_64+0x2d/0x70 [ 2156.013467][ T8924] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2156.019348][ T8924] RIP: 0033:0x45e159 [ 2156.023232][ T8924] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2156.042831][ T8924] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2156.051243][ T8924] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2156.059206][ T8924] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2156.067171][ T8924] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 02:31:09 executing program 2 (fault-call:2 fault-nth:1): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2156.075137][ T8924] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2156.083092][ T8924] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2156.106668][ T8928] CPU: 0 PID: 8928 Comm: syz-executor.4 Not tainted 5.10.0-syzkaller #0 [ 2156.115007][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2156.125062][ T8928] Call Trace: [ 2156.128361][ T8928] dump_stack+0x107/0x163 [ 2156.130812][ T8930] FAULT_INJECTION: forcing a failure. [ 2156.130812][ T8930] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.132694][ T8928] should_fail.cold+0x5/0xa [ 2156.149885][ T8928] ? io_uring_setup+0x1e1c/0x3770 [ 2156.154923][ T8928] ? io_uring_setup+0x1e1c/0x3770 [ 2156.160966][ T8928] should_failslab+0x5/0x10 [ 2156.165478][ T8928] kmem_cache_alloc_trace+0x55/0x360 [ 2156.171374][ T8928] io_uring_setup+0x1e1c/0x3770 [ 2156.177678][ T8928] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2156.182871][ T8928] ? wait_for_completion+0x260/0x260 [ 2156.188164][ T8928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.194060][ T8928] do_syscall_64+0x2d/0x70 [ 2156.198511][ T8928] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2156.204401][ T8928] RIP: 0033:0x45e159 [ 2156.209707][ T8928] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2156.229967][ T8928] RSP: 002b:00007f1aa7fedbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2156.238381][ T8928] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2156.246343][ T8928] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2156.254495][ T8928] RBP: 00007f1aa7fedca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2156.262465][ T8928] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 02:31:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xffffff7f00000000) [ 2156.270432][ T8928] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2156.278413][ T8930] CPU: 1 PID: 8930 Comm: syz-executor.1 Not tainted 5.10.0-syzkaller #0 [ 2156.286740][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2156.296798][ T8930] Call Trace: [ 2156.300097][ T8930] dump_stack+0x107/0x163 [ 2156.304432][ T8930] should_fail.cold+0x5/0xa [ 2156.308927][ T8930] ? io_uring_setup+0x1e1c/0x3770 [ 2156.313951][ T8930] ? io_uring_setup+0x1e1c/0x3770 [ 2156.318970][ T8930] should_failslab+0x5/0x10 [ 2156.323463][ T8930] kmem_cache_alloc_trace+0x55/0x360 [ 2156.328749][ T8930] io_uring_setup+0x1e1c/0x3770 [ 2156.333603][ T8930] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2156.338792][ T8930] ? wait_for_completion+0x260/0x260 [ 2156.344092][ T8930] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.349990][ T8930] do_syscall_64+0x2d/0x70 [ 2156.354407][ T8930] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2156.360286][ T8930] RIP: 0033:0x45e159 [ 2156.364181][ T8930] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2156.383779][ T8930] RSP: 002b:00007f4112469be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2156.392182][ T8930] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2156.400159][ T8930] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2156.408133][ T8930] RBP: 00007f4112469ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2156.416095][ T8930] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2156.424059][ T8930] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2156.432043][ T8925] CPU: 0 PID: 8925 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2156.440371][ T8925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2156.451271][ T8925] Call Trace: [ 2156.454571][ T8925] dump_stack+0x107/0x163 [ 2156.460372][ T8925] should_fail.cold+0x5/0xa [ 2156.464891][ T8925] _copy_from_user+0x2c/0x180 [ 2156.470909][ T8925] io_uring_setup+0xa3/0x3770 [ 2156.475595][ T8925] ? ksys_write+0x12d/0x250 [ 2156.481565][ T8925] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2156.487609][ T8925] ? wait_for_completion+0x260/0x260 [ 2156.493894][ T8925] ? vfs_write+0x18e/0xa30 [ 2156.498427][ T8925] ? fput_many+0x2f/0x1a0 [ 2156.502779][ T8925] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.509181][ T8925] do_syscall_64+0x2d/0x70 [ 2156.513608][ T8925] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2156.520153][ T8925] RIP: 0033:0x45e159 [ 2156.524347][ T8925] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2156.543950][ T8925] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2156.553451][ T8925] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2156.561428][ T8925] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2156.569533][ T8925] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2156.577858][ T8925] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2156.585831][ T8925] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:10 executing program 1 (fault-call:2 fault-nth:2): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:10 executing program 3 (fault-call:2 fault-nth:2): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:10 executing program 4 (fault-call:2 fault-nth:2): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:10 executing program 5 (fault-call:2 fault-nth:1): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2156.708216][ T8934] FAULT_INJECTION: forcing a failure. [ 2156.708216][ T8934] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.758670][ T8934] CPU: 1 PID: 8934 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 2156.767028][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2156.777087][ T8934] Call Trace: [ 2156.780390][ T8934] dump_stack+0x107/0x163 [ 2156.784730][ T8934] should_fail.cold+0x5/0xa [ 2156.785122][ T8940] FAULT_INJECTION: forcing a failure. [ 2156.785122][ T8940] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.789237][ T8934] ? io_uring_setup+0x1e1c/0x3770 02:31:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0xfffffffffffff000) [ 2156.789264][ T8934] ? io_uring_setup+0x1e1c/0x3770 [ 2156.789281][ T8934] should_failslab+0x5/0x10 [ 2156.789303][ T8934] kmem_cache_alloc_trace+0x55/0x360 [ 2156.815545][ T8941] FAULT_INJECTION: forcing a failure. [ 2156.815545][ T8941] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.816377][ T8934] io_uring_setup+0x1e1c/0x3770 [ 2156.839036][ T8934] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2156.844244][ T8934] ? wait_for_completion+0x260/0x260 [ 2156.849541][ T8934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.855444][ T8934] do_syscall_64+0x2d/0x70 [ 2156.859871][ T8934] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2156.865775][ T8934] RIP: 0033:0x45e159 [ 2156.869662][ T8934] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2156.889266][ T8934] RSP: 002b:00007f1c1f14cbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2156.897678][ T8934] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 02:31:10 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') [ 2156.905638][ T8934] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2156.913603][ T8934] RBP: 00007f1c1f14cca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2156.921574][ T8934] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2156.929671][ T8934] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2156.938973][ T8940] CPU: 0 PID: 8940 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2156.947643][ T8940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2156.957910][ T8940] Call Trace: [ 2156.961208][ T8940] dump_stack+0x107/0x163 [ 2156.965547][ T8940] should_fail.cold+0x5/0xa [ 2156.967588][ T8946] FAULT_INJECTION: forcing a failure. [ 2156.967588][ T8946] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.970054][ T8940] ? io_uring_setup+0x4c5/0x3770 [ 2156.970075][ T8940] should_failslab+0x5/0x10 [ 2156.970090][ T8940] kmem_cache_alloc+0x5b/0x440 [ 2156.970114][ T8940] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 2157.003924][ T8940] io_uring_setup+0x4c5/0x3770 [ 2157.008689][ T8940] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2157.013890][ T8940] ? wait_for_completion+0x260/0x260 [ 2157.020641][ T8940] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2157.026541][ T8940] do_syscall_64+0x2d/0x70 [ 2157.030954][ T8940] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2157.036836][ T8940] RIP: 0033:0x45e159 [ 2157.040728][ T8940] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2157.057151][ T8948] FAULT_INJECTION: forcing a failure. [ 2157.057151][ T8948] name failslab, interval 1, probability 0, space 0, times 0 [ 2157.060319][ T8940] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2157.060340][ T8940] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2157.060352][ T8940] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2157.060363][ T8940] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2157.060375][ T8940] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2157.060386][ T8940] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2157.065104][ T8941] CPU: 0 PID: 8941 Comm: syz-executor.4 Not tainted 5.10.0-syzkaller #0 [ 2157.130186][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2157.140232][ T8941] Call Trace: [ 2157.144226][ T8941] dump_stack+0x107/0x163 [ 2157.148718][ T8941] should_fail.cold+0x5/0xa [ 2157.153238][ T8941] ? io_uring_setup+0x4c5/0x3770 [ 2157.158177][ T8941] should_failslab+0x5/0x10 [ 2157.162675][ T8941] kmem_cache_alloc+0x5b/0x440 [ 2157.167437][ T8941] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 2157.173248][ T8941] io_uring_setup+0x4c5/0x3770 [ 2157.178019][ T8941] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2157.183213][ T8941] ? wait_for_completion+0x260/0x260 [ 2157.189834][ T8941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2157.195734][ T8941] do_syscall_64+0x2d/0x70 [ 2157.200145][ T8941] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2157.206966][ T8941] RIP: 0033:0x45e159 [ 2157.210865][ T8941] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2157.231730][ T8941] RSP: 002b:00007f1aa7fedbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2157.240148][ T8941] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2157.248121][ T8941] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2157.256815][ T8941] RBP: 00007f1aa7fedca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2157.264816][ T8941] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2157.274010][ T8941] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2157.281999][ T8946] CPU: 1 PID: 8946 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2157.290330][ T8946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2157.300382][ T8946] Call Trace: [ 2157.303683][ T8946] dump_stack+0x107/0x163 [ 2157.308206][ T8946] should_fail.cold+0x5/0xa [ 2157.312712][ T8946] ? io_uring_setup+0x1e1c/0x3770 [ 2157.317832][ T8946] ? io_uring_setup+0x1e1c/0x3770 [ 2157.322867][ T8946] should_failslab+0x5/0x10 [ 2157.327380][ T8946] kmem_cache_alloc_trace+0x55/0x360 [ 2157.333964][ T8946] io_uring_setup+0x1e1c/0x3770 [ 2157.338837][ T8946] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2157.344049][ T8946] ? wait_for_completion+0x260/0x260 [ 2157.349363][ T8946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2157.355266][ T8946] do_syscall_64+0x2d/0x70 02:31:11 executing program 4 (fault-call:2 fault-nth:3): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:11 executing program 3 (fault-call:2 fault-nth:3): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:11 executing program 2 (fault-call:2 fault-nth:2): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2157.359689][ T8946] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2157.365589][ T8946] RIP: 0033:0x45e159 [ 2157.369490][ T8946] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2157.389097][ T8946] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2157.397522][ T8946] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2157.405502][ T8946] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2157.413482][ T8946] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2157.422691][ T8946] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2157.430693][ T8946] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2157.446399][ T8948] CPU: 1 PID: 8948 Comm: syz-executor.1 Not tainted 5.10.0-syzkaller #0 [ 2157.454737][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2157.463985][ T8953] FAULT_INJECTION: forcing a failure. [ 2157.463985][ T8953] name failslab, interval 1, probability 0, space 0, times 0 [ 2157.464785][ T8948] Call Trace: [ 2157.464808][ T8948] dump_stack+0x107/0x163 [ 2157.464829][ T8948] should_fail.cold+0x5/0xa [ 2157.464851][ T8948] ? io_uring_setup+0x4c5/0x3770 [ 2157.464870][ T8948] should_failslab+0x5/0x10 [ 2157.464891][ T8948] kmem_cache_alloc+0x5b/0x440 [ 2157.504496][ T8948] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 2157.511822][ T8948] io_uring_setup+0x4c5/0x3770 [ 2157.516646][ T8948] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2157.522004][ T8948] ? wait_for_completion+0x260/0x260 [ 2157.527319][ T8948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2157.533220][ T8948] do_syscall_64+0x2d/0x70 [ 2157.536805][ T8956] FAULT_INJECTION: forcing a failure. [ 2157.536805][ T8956] name failslab, interval 1, probability 0, space 0, times 0 [ 2157.537719][ T8948] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2157.537732][ T8948] RIP: 0033:0x45e159 [ 2157.537750][ T8948] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2157.537761][ T8948] RSP: 002b:00007f4112427be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2157.537781][ T8948] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2157.537793][ T8948] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2157.537803][ T8948] RBP: 00007f4112427ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2157.537821][ T8948] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2157.621803][ T8948] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2157.629828][ T8953] CPU: 0 PID: 8953 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2157.638158][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2157.648211][ T8953] Call Trace: [ 2157.652755][ T8953] dump_stack+0x107/0x163 [ 2157.657164][ T8953] should_fail.cold+0x5/0xa [ 2157.663143][ T8953] ? io_uring_setup+0x560/0x3770 [ 2157.669027][ T8953] ? io_uring_setup+0x560/0x3770 [ 2157.673976][ T8953] should_failslab+0x5/0x10 [ 2157.678476][ T8953] __kmalloc+0x72/0x3e0 [ 2157.683849][ T8953] io_uring_setup+0x560/0x3770 [ 2157.689634][ T8953] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2157.694843][ T8953] ? wait_for_completion+0x260/0x260 [ 2157.700208][ T8953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2157.706116][ T8953] do_syscall_64+0x2d/0x70 [ 2157.711978][ T8953] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2157.717877][ T8953] RIP: 0033:0x45e159 [ 2157.721778][ T8953] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2157.742695][ T8953] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2157.751286][ T8953] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 02:31:11 executing program 1 (fault-call:2 fault-nth:3): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2157.759257][ T8953] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2157.767666][ T8953] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2157.776112][ T8953] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2157.784462][ T8953] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2157.805950][ T8956] CPU: 0 PID: 8956 Comm: syz-executor.4 Not tainted 5.10.0-syzkaller #0 [ 2157.814288][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2157.824342][ T8956] Call Trace: [ 2157.827641][ T8956] dump_stack+0x107/0x163 [ 2157.832377][ T8956] should_fail.cold+0x5/0xa [ 2157.836889][ T8956] ? io_uring_setup+0x560/0x3770 [ 2157.841837][ T8956] ? io_uring_setup+0x560/0x3770 [ 2157.846782][ T8956] should_failslab+0x5/0x10 [ 2157.852517][ T8956] __kmalloc+0x72/0x3e0 [ 2157.856694][ T8956] io_uring_setup+0x560/0x3770 02:31:11 executing program 5 (fault-call:2 fault-nth:2): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2157.861479][ T8956] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2157.866691][ T8956] ? wait_for_completion+0x260/0x260 [ 2157.872004][ T8956] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2157.877909][ T8956] do_syscall_64+0x2d/0x70 [ 2157.882339][ T8956] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2157.889568][ T8956] RIP: 0033:0x45e159 [ 2157.893853][ T8956] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2157.913461][ T8956] RSP: 002b:00007f1aa7fabbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2157.922366][ T8956] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2157.931187][ T8956] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2157.940271][ T8956] RBP: 00007f1aa7fabca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2157.949294][ T8956] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2157.957268][ T8956] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:11 executing program 3 (fault-call:2 fault-nth:4): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000001c0)={0x0, "fc30fae48bef507ab2ab28d424200948214432feaa36409da1b0bb4c7db1d1374ea1ca98f52496a499020a57c3d1f113de333743aee3b602b9e06f241a218251"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', 0x0, 0x0, 0x0, r3) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r1, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x73}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1245}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa01}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x437}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x669}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x130}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000041}, 0x4) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000240)={'nr0\x00'}) [ 2158.037127][ T8963] FAULT_INJECTION: forcing a failure. [ 2158.037127][ T8963] name failslab, interval 1, probability 0, space 0, times 0 [ 2158.057200][ T8964] FAULT_INJECTION: forcing a failure. [ 2158.057200][ T8964] name failslab, interval 1, probability 0, space 0, times 0 [ 2158.058932][ T8962] FAULT_INJECTION: forcing a failure. [ 2158.058932][ T8962] name failslab, interval 1, probability 0, space 0, times 0 [ 2158.075642][ T8963] CPU: 0 PID: 8963 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2158.090784][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2158.100959][ T8963] Call Trace: [ 2158.105346][ T8963] dump_stack+0x107/0x163 [ 2158.109847][ T8963] should_fail.cold+0x5/0xa [ 2158.114363][ T8963] ? io_uring_setup+0x4c5/0x3770 [ 2158.119954][ T8963] should_failslab+0x5/0x10 [ 2158.124463][ T8963] kmem_cache_alloc+0x5b/0x440 [ 2158.130276][ T8963] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 2158.136098][ T8963] io_uring_setup+0x4c5/0x3770 [ 2158.140885][ T8963] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2158.146079][ T8963] ? wait_for_completion+0x260/0x260 [ 2158.151377][ T8963] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2158.158610][ T8963] do_syscall_64+0x2d/0x70 [ 2158.163046][ T8963] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2158.168935][ T8963] RIP: 0033:0x45e159 [ 2158.173063][ T8963] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2158.192668][ T8963] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2158.201477][ T8963] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2158.209458][ T8963] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2158.217426][ T8963] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2158.226063][ T8963] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2158.234045][ T8963] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2158.246381][ T8964] CPU: 0 PID: 8964 Comm: syz-executor.1 Not tainted 5.10.0-syzkaller #0 [ 2158.254714][ T8964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2158.264773][ T8964] Call Trace: [ 2158.268072][ T8964] dump_stack+0x107/0x163 [ 2158.272788][ T8964] should_fail.cold+0x5/0xa [ 2158.277301][ T8964] ? io_uring_setup+0x560/0x3770 [ 2158.282248][ T8964] ? io_uring_setup+0x560/0x3770 [ 2158.287191][ T8964] should_failslab+0x5/0x10 [ 2158.291696][ T8964] __kmalloc+0x72/0x3e0 [ 2158.295873][ T8964] io_uring_setup+0x560/0x3770 [ 2158.301870][ T8964] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2158.307084][ T8964] ? wait_for_completion+0x260/0x260 [ 2158.312401][ T8964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2158.319275][ T8964] do_syscall_64+0x2d/0x70 [ 2158.323709][ T8964] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2158.329606][ T8964] RIP: 0033:0x45e159 [ 2158.333502][ T8964] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2158.353781][ T8964] RSP: 002b:00007f4112469be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2158.362202][ T8964] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2158.370176][ T8964] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2158.378147][ T8964] RBP: 00007f4112469ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2158.386119][ T8964] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2158.394094][ T8964] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2158.409523][ T8962] CPU: 1 PID: 8962 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 2158.417873][ T8962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2158.427932][ T8962] Call Trace: [ 2158.431236][ T8962] dump_stack+0x107/0x163 [ 2158.435580][ T8962] should_fail.cold+0x5/0xa [ 2158.440105][ T8962] ? io_uring_setup+0x4c5/0x3770 [ 2158.445063][ T8962] should_failslab+0x5/0x10 [ 2158.449568][ T8962] kmem_cache_alloc+0x5b/0x440 [ 2158.454340][ T8962] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 2158.460157][ T8962] io_uring_setup+0x4c5/0x3770 [ 2158.464941][ T8962] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2158.470150][ T8962] ? wait_for_completion+0x260/0x260 [ 2158.475466][ T8962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2158.481370][ T8962] do_syscall_64+0x2d/0x70 [ 2158.483292][ T8970] FAULT_INJECTION: forcing a failure. [ 2158.483292][ T8970] name failslab, interval 1, probability 0, space 0, times 0 [ 2158.485802][ T8962] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2158.485816][ T8962] RIP: 0033:0x45e159 [ 2158.485837][ T8962] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2158.527711][ T8962] RSP: 002b:00007f1c1f14cbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 02:31:12 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:12 executing program 5 (fault-call:2 fault-nth:3): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2158.536116][ T8962] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2158.544073][ T8962] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2158.552034][ T8962] RBP: 00007f1c1f14cca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2158.559991][ T8962] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2158.567968][ T8962] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2158.575947][ T8970] CPU: 0 PID: 8970 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 02:31:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x20010080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x30, r2, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0x200, 0x7}}}}}, 0x30}}, 0x4044011) getpid() r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\b@', @ANYRES16=r2, @ANYBLOB="20002dbd7000fbdbdf25860000000c00990000000000490000000800a0000104000008009f0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x440, 0x3f3, 0xc00, 0x70bd2a, 0x25dfdbff, {0x3, 0x0, 0x17, [0x10000, 0x800, 0x5, 0x80000001, 0xd3, 0x0, 0x4, 0x80, 0xde, 0x60ad, 0x81, 0x8, 0x2, 0x6, 0x0, 0x1, 0x7, 0x7f, 0x1, 0x9, 0x800, 0x4, 0x3f, 0x2, 0x4, 0x9, 0x80, 0x3f, 0x612, 0x564, 0xfff, 0x400, 0x5, 0xea58, 0x5, 0x7, 0x9, 0x4, 0x7fffffff, 0x0, 0x7, 0xfffffffc, 0x80000001, 0x5, 0x0, 0x7fff, 0xfff, 0x5, 0x20bb, 0x8, 0x7, 0x0, 0x6, 0x3, 0x3, 0x8, 0x0, 0x9723, 0x7, 0x6, 0x0, 0x2, 0x3, 0x2], [0x1, 0x1f, 0xfbb4, 0xff000000, 0x9, 0x7fff, 0xe3, 0x0, 0x4, 0x1, 0x1, 0x7fff, 0x81, 0x8, 0x6, 0x37c, 0x8, 0x1, 0x1ff, 0x2, 0x1, 0x7ff, 0x7f, 0x10001, 0x1, 0x6, 0x0, 0x800, 0x7, 0x0, 0x1000, 0x4d40, 0xffffff7f, 0x0, 0x1, 0x8000, 0x4, 0x7, 0x5, 0x343d, 0x0, 0x6, 0x80000000, 0x0, 0x0, 0x2, 0xfffff4e0, 0x5, 0x7ff, 0x5, 0x5, 0x141d, 0x0, 0x100, 0x1, 0x8000000, 0x7f, 0x3, 0x10001, 0x76, 0x2, 0xffff, 0x7, 0x20], [0x8, 0x2, 0x7f, 0xfffffffe, 0x4d1, 0x5, 0x8001, 0xab0, 0x3, 0x7f, 0x2, 0x5, 0x8, 0xdf, 0xffffffff, 0x0, 0x7fff, 0x0, 0x7, 0x227, 0x3, 0xffff, 0xa1, 0x9, 0x7, 0x6, 0x8, 0x2, 0x9, 0x8, 0x6, 0xac2, 0x3f, 0x1, 0xfa7336d, 0x8, 0x1, 0x4, 0x4, 0x5, 0xa09a, 0x9, 0x10001, 0x400000, 0x9cf, 0x6, 0x5, 0x6, 0xf73, 0x1c9f, 0x8, 0x401, 0x3, 0x9, 0x5, 0x2, 0x9, 0x6, 0x200000, 0x5, 0xd9e3, 0x7, 0x7f, 0x9], [0x6, 0x2, 0x4ef48211, 0x1ff, 0x2, 0x40, 0x20, 0x81, 0x5, 0xffffffe0, 0x23, 0x4, 0xffff2071, 0x5, 0x1, 0x7, 0x5, 0x80000001, 0x45, 0xfff, 0x6, 0x1, 0xe7b, 0xffffffc0, 0x8000, 0x6da, 0x0, 0x7, 0xfffffffc, 0x0, 0x584, 0x1f, 0x3, 0x8, 0xf7, 0xd277, 0x2, 0x7, 0xffff, 0x200, 0xd6, 0x401, 0x7fffffff, 0x8183, 0x8806, 0x7, 0x3f, 0x4, 0x4, 0x3, 0x6ba, 0x5, 0x4, 0x9, 0x4, 0x4, 0x400, 0x3, 0x260, 0x9, 0x8, 0x5, 0x2f40, 0x5], 0x1e, [')]\'\\\x00', '\x00', 'nl80211\x00', '\x00', '!*^-\x00', '/dev/vcs#\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) r5 = syz_genetlink_get_family_id$nl80211(0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r8, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x12c, r8, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x59}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_IE={0xc9, 0x2a, [@random={0x4, 0xb1, "33bce2529fa89653d6b2316f9be810007cb9d6cc70d4c6f4f8d01e9a64f461f4c94a3c4ec565773f87f3050c3df49ebb8a0fcc30c5f91fc6a2b2a0a1b73d6b4700189ca662972dea59f8f75e362194e4dcc8a8e666ee1c97b927f42027818ed6c650b38cdf795517ff3236166c10bf45a2fe1038ff2858ecc03845bdec1c5a721522afc5476ca33a600d34a2dd6da8f71f21218e7e3edd3eeb3885fcc3e87da0960e738531c298d88b9bfabdbd1b5e4b84"}, @ibss={0x6, 0x2, 0xfff}, @mesh_chsw={0x76, 0x6, {0x1a, 0x26, 0xb, 0x80}}, @chsw_timing={0x68, 0x4, {0x9, 0xdbb}}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x2c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffff}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0xc1}, 0x48000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008040) [ 2158.584280][ T8970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2158.594335][ T8970] Call Trace: [ 2158.597636][ T8970] dump_stack+0x107/0x163 [ 2158.601976][ T8970] should_fail.cold+0x5/0xa [ 2158.606489][ T8970] ? percpu_ref_init+0xcc/0x3a0 [ 2158.611356][ T8970] ? percpu_ref_init+0xcc/0x3a0 [ 2158.616213][ T8970] should_failslab+0x5/0x10 [ 2158.620722][ T8970] kmem_cache_alloc_trace+0x55/0x360 [ 2158.626016][ T8970] ? __io_openat_prep+0x390/0x390 [ 2158.631046][ T8970] percpu_ref_init+0xcc/0x3a0 [ 2158.635737][ T8970] io_uring_setup+0x60b/0x3770 [ 2158.641916][ T8970] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2158.647956][ T8970] ? wait_for_completion+0x260/0x260 [ 2158.654592][ T8970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2158.661230][ T8970] do_syscall_64+0x2d/0x70 [ 2158.665694][ T8970] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2158.672046][ T8970] RIP: 0033:0x45e159 [ 2158.676378][ T8970] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2158.695989][ T8970] RSP: 002b:00007f49c4067be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2158.704945][ T8970] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2158.713862][ T8970] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2158.721838][ T8970] RBP: 00007f49c4067ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2158.729817][ T8970] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2158.738221][ T8970] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:12 executing program 1 (fault-call:2 fault-nth:4): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:12 executing program 2 (fault-call:2 fault-nth:3): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2158.841188][ T8977] FAULT_INJECTION: forcing a failure. [ 2158.841188][ T8977] name failslab, interval 1, probability 0, space 0, times 0 [ 2158.905443][ T8977] CPU: 1 PID: 8977 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2158.913811][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2158.924438][ T8977] Call Trace: [ 2158.927743][ T8977] dump_stack+0x107/0x163 [ 2158.932168][ T8977] should_fail.cold+0x5/0xa [ 2158.932292][ T8986] FAULT_INJECTION: forcing a failure. [ 2158.932292][ T8986] name failslab, interval 1, probability 0, space 0, times 0 [ 2158.936674][ T8977] ? io_uring_setup+0x560/0x3770 [ 2158.936695][ T8977] ? io_uring_setup+0x560/0x3770 [ 2158.936714][ T8977] should_failslab+0x5/0x10 [ 2158.936735][ T8977] __kmalloc+0x72/0x3e0 [ 2158.970333][ T8977] io_uring_setup+0x560/0x3770 [ 2158.975098][ T8977] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2158.980292][ T8977] ? wait_for_completion+0x260/0x260 [ 2158.985585][ T8977] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2158.992394][ T8977] do_syscall_64+0x2d/0x70 [ 2158.996818][ T8977] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2159.002702][ T8977] RIP: 0033:0x45e159 [ 2159.006589][ T8977] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2159.026186][ T8977] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2159.034594][ T8977] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2159.042625][ T8977] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 02:31:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r4, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r5}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xb8, r1, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="96bc82ca1449"}, @NL80211_ATTR_SSID={0x8, 0x34, @random="63aeb087"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x3f, 0x2a, [@mesh_chsw={0x76, 0x6, {0x83, 0xcb, 0x3c, 0xaacc}}, @ht={0x2d, 0x1a, {0x400, 0x1, 0x0, 0x0, {0xffff, 0x80, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x3}, 0x800, 0x5, 0x8}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x7f, 0x1, @broadcast, 0x9, 0xfffffffa, 0x8}}]}, @NL80211_ATTR_IE={0x26, 0x2a, [@dsss={0x3, 0x1, 0x4}, @peer_mgmt={0x75, 0x4, {0x1, 0xfffd, @void, @void, @void}}, @dsss={0x3, 0x1, 0xb2}, @chsw_timing={0x68, 0x4, {0x1000, 0xd0}}, @cf={0x4, 0x6, {0x8, 0x7f, 0x112c, 0x8}}, @cf={0x4, 0x6, {0x18, 0xfb, 0x9, 0x6}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) [ 2159.051330][ T8977] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2159.059300][ T8977] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2159.068693][ T8977] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2159.076686][ T8986] CPU: 0 PID: 8986 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 2159.085019][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2159.095072][ T8986] Call Trace: [ 2159.098370][ T8986] dump_stack+0x107/0x163 [ 2159.102713][ T8986] should_fail.cold+0x5/0xa [ 2159.107224][ T8986] ? io_uring_setup+0x560/0x3770 [ 2159.112174][ T8986] ? io_uring_setup+0x560/0x3770 [ 2159.117124][ T8986] should_failslab+0x5/0x10 [ 2159.121632][ T8986] __kmalloc+0x72/0x3e0 [ 2159.125802][ T8986] io_uring_setup+0x560/0x3770 [ 2159.130583][ T8986] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2159.135788][ T8986] ? wait_for_completion+0x260/0x260 [ 2159.141104][ T8986] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2159.143089][ T8985] FAULT_INJECTION: forcing a failure. [ 2159.143089][ T8985] name failslab, interval 1, probability 0, space 0, times 0 [ 2159.147007][ T8986] do_syscall_64+0x2d/0x70 [ 2159.163966][ T8986] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2159.169859][ T8986] RIP: 0033:0x45e159 [ 2159.173759][ T8986] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2159.193375][ T8986] RSP: 002b:00007f1c1f14cbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 02:31:12 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2159.201802][ T8986] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2159.209761][ T8986] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2159.217720][ T8986] RBP: 00007f1c1f14cca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2159.225679][ T8986] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2159.233634][ T8986] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:13 executing program 5 (fault-call:2 fault-nth:4): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2159.290031][ T8985] CPU: 0 PID: 8985 Comm: syz-executor.1 Not tainted 5.10.0-syzkaller #0 [ 2159.298399][ T8985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2159.308474][ T8985] Call Trace: [ 2159.311782][ T8985] dump_stack+0x107/0x163 [ 2159.316125][ T8985] should_fail.cold+0x5/0xa [ 2159.320640][ T8985] ? percpu_ref_init+0xcc/0x3a0 [ 2159.325504][ T8985] ? percpu_ref_init+0xcc/0x3a0 [ 2159.330367][ T8985] should_failslab+0x5/0x10 [ 2159.334875][ T8985] kmem_cache_alloc_trace+0x55/0x360 [ 2159.340176][ T8985] ? __io_openat_prep+0x390/0x390 [ 2159.345211][ T8985] percpu_ref_init+0xcc/0x3a0 [ 2159.349896][ T8985] io_uring_setup+0x60b/0x3770 [ 2159.354655][ T8985] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2159.359858][ T8985] ? wait_for_completion+0x260/0x260 [ 2159.365160][ T8985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2159.371049][ T8985] do_syscall_64+0x2d/0x70 [ 2159.375459][ T8985] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2159.381339][ T8985] RIP: 0033:0x45e159 [ 2159.385224][ T8985] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2159.404815][ T8985] RSP: 002b:00007f4112469be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2159.413221][ T8985] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2159.421184][ T8985] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2159.429157][ T8985] RBP: 00007f4112469ca0 R08: 00000000200004c0 R09: 00000000200004c0 02:31:13 executing program 3 (fault-call:2 fault-nth:5): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', &(0x7f0000000280)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f00000002c0)={0x0, "ef08c88e29ec299fcce7d2871ffba0a0f560e221f35222dc241d9db292540e5d8248c91cf663b6f75930caa268c16465e53be20533e4b985c7ddb7bf61901657"}, 0x48, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', 0x0, 0x0, 0x0, r3) r4 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'fscrypt:', @auto=[0x61, 0x35, 0x36, 0x0, 0x35, 0x35, 0x64, 0x31, 0x61, 0x36, 0x35, 0x35, 0x30, 0x61, 0x65, 0xe]}, &(0x7f0000000240)={0x0, "e08b0174d796c8837e2267b29b9c873ffbe85cc8a2de59715f9867f6148792c286eefee22a5f9cca8e0c85b4ce1d73eb00e4974bca2c9cdadcfac04a94d37850", 0x14}, 0x48, 0x0) keyctl$unlink(0x9, r3, r4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x49}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc811}, 0x8000) [ 2159.437129][ T8985] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2159.445089][ T8985] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2159.525514][ T8995] FAULT_INJECTION: forcing a failure. [ 2159.525514][ T8995] name failslab, interval 1, probability 0, space 0, times 0 [ 2159.553017][ T8995] CPU: 0 PID: 8995 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2159.560209][ T9003] FAULT_INJECTION: forcing a failure. [ 2159.560209][ T9003] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2159.561384][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2159.561391][ T8995] Call Trace: [ 2159.561416][ T8995] dump_stack+0x107/0x163 [ 2159.561436][ T8995] should_fail.cold+0x5/0xa [ 2159.561454][ T8995] ? percpu_ref_init+0xcc/0x3a0 [ 2159.561477][ T8995] ? percpu_ref_init+0xcc/0x3a0 [ 2159.606427][ T8995] should_failslab+0x5/0x10 [ 2159.610946][ T8995] kmem_cache_alloc_trace+0x55/0x360 [ 2159.616242][ T8995] ? __io_openat_prep+0x390/0x390 [ 2159.621272][ T8995] percpu_ref_init+0xcc/0x3a0 [ 2159.625962][ T8995] io_uring_setup+0x60b/0x3770 [ 2159.630739][ T8995] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2159.635944][ T8995] ? wait_for_completion+0x260/0x260 [ 2159.641241][ T8995] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2159.647136][ T8995] do_syscall_64+0x2d/0x70 [ 2159.651554][ T8995] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2159.657433][ T8995] RIP: 0033:0x45e159 [ 2159.661324][ T8995] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2159.680928][ T8995] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2159.689341][ T8995] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2159.697316][ T8995] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2159.705288][ T8995] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2159.713262][ T8995] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2159.721228][ T8995] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2159.730849][ T9003] CPU: 1 PID: 9003 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2159.740722][ T9003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2159.751686][ T9003] Call Trace: [ 2159.755779][ T9003] dump_stack+0x107/0x163 [ 2159.761576][ T9003] should_fail.cold+0x5/0xa [ 2159.766094][ T9003] __alloc_pages_nodemask+0x189/0x730 [ 2159.772239][ T9003] ? __alloc_pages_slowpath.constprop.0+0x2510/0x2510 [ 2159.780419][ T9003] ? io_uring_setup+0x11f2/0x3770 [ 2159.786381][ T9003] ? lock_downgrade+0x6d0/0x6d0 [ 2159.792549][ T9003] alloc_pages_current+0x191/0x2a0 [ 2159.798572][ T9003] __get_free_pages+0x8/0x40 [ 2159.803168][ T9003] io_uring_setup+0x142b/0x3770 [ 2159.809119][ T9003] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2159.815195][ T9003] ? wait_for_completion+0x260/0x260 [ 2159.821543][ T9003] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2159.827737][ T9003] do_syscall_64+0x2d/0x70 [ 2159.832165][ T9003] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2159.838928][ T9003] RIP: 0033:0x45e159 [ 2159.843154][ T9003] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2159.862759][ T9003] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 02:31:13 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2159.871181][ T9003] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2159.879825][ T9003] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2159.888311][ T9003] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2159.896286][ T9003] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2159.905174][ T9003] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:13 executing program 3 (fault-call:2 fault-nth:6): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:13 executing program 5 (fault-call:2 fault-nth:5): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:13 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:13 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x1c5040, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000380)={0xffffffffffffffff, 0x7fff, 0x800, 0xffff3a11}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x80, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46ae}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x4000) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x48, 0x0, 0x969590a286a12125, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x20}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1c}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3, 0x1, 0x9]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:31:13 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:13 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2160.076087][ T9012] FAULT_INJECTION: forcing a failure. [ 2160.076087][ T9012] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2160.127074][ T9012] CPU: 1 PID: 9012 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2160.129909][ T9018] FAULT_INJECTION: forcing a failure. [ 2160.129909][ T9018] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2160.135422][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2160.135430][ T9012] Call Trace: [ 2160.135454][ T9012] dump_stack+0x107/0x163 [ 2160.135474][ T9012] should_fail.cold+0x5/0xa [ 2160.135498][ T9012] __alloc_pages_nodemask+0x189/0x730 [ 2160.135521][ T9012] ? __alloc_pages_slowpath.constprop.0+0x2510/0x2510 [ 2160.135546][ T9012] ? io_uring_setup+0x11f2/0x3770 [ 2160.135562][ T9012] ? lock_downgrade+0x6d0/0x6d0 [ 2160.135588][ T9012] alloc_pages_current+0x191/0x2a0 [ 2160.135611][ T9012] __get_free_pages+0x8/0x40 [ 2160.135629][ T9012] io_uring_setup+0x15f1/0x3770 [ 2160.135655][ T9012] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2160.135678][ T9012] ? wait_for_completion+0x260/0x260 [ 2160.221231][ T9012] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2160.227130][ T9012] do_syscall_64+0x2d/0x70 [ 2160.231549][ T9012] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2160.237442][ T9012] RIP: 0033:0x45e159 [ 2160.241345][ T9012] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2160.260956][ T9012] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2160.269379][ T9012] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2160.277348][ T9012] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2160.285319][ T9012] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2160.294281][ T9012] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2160.302259][ T9012] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2160.310253][ T9018] CPU: 0 PID: 9018 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2160.318583][ T9018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2160.328635][ T9018] Call Trace: [ 2160.331936][ T9018] dump_stack+0x107/0x163 [ 2160.336275][ T9018] should_fail.cold+0x5/0xa [ 2160.340791][ T9018] __alloc_pages_nodemask+0x189/0x730 [ 2160.346172][ T9018] ? __alloc_pages_slowpath.constprop.0+0x2510/0x2510 [ 2160.353347][ T9018] ? io_uring_setup+0x11f2/0x3770 [ 2160.359706][ T9018] ? lock_downgrade+0x6d0/0x6d0 [ 2160.365840][ T9018] alloc_pages_current+0x191/0x2a0 [ 2160.372206][ T9018] __get_free_pages+0x8/0x40 [ 2160.378234][ T9018] io_uring_setup+0x142b/0x3770 [ 2160.383098][ T9018] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2160.388511][ T9018] ? wait_for_completion+0x260/0x260 [ 2160.393825][ T9018] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2160.400069][ T9018] do_syscall_64+0x2d/0x70 [ 2160.404537][ T9018] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2160.410889][ T9018] RIP: 0033:0x45e159 [ 2160.414790][ T9018] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2160.434398][ T9018] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2160.442823][ T9018] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2160.451543][ T9018] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2160.459520][ T9018] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2160.467803][ T9018] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2160.475777][ T9018] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:14 executing program 5 (fault-call:2 fault-nth:6): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:14 executing program 3 (fault-call:2 fault-nth:7): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:14 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:14 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2160.668272][ T9046] FAULT_INJECTION: forcing a failure. [ 2160.668272][ T9046] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2160.683114][ T9046] CPU: 0 PID: 9046 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2160.691445][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2160.701625][ T9046] Call Trace: [ 2160.705719][ T9046] dump_stack+0x107/0x163 [ 2160.710179][ T9046] should_fail.cold+0x5/0xa [ 2160.716176][ T9046] __alloc_pages_nodemask+0x189/0x730 [ 2160.722245][ T9046] ? __alloc_pages_slowpath.constprop.0+0x2510/0x2510 [ 2160.730370][ T9046] ? io_uring_setup+0x11f2/0x3770 [ 2160.736571][ T9046] ? lock_downgrade+0x6d0/0x6d0 [ 2160.742530][ T9046] alloc_pages_current+0x191/0x2a0 [ 2160.747654][ T9046] __get_free_pages+0x8/0x40 [ 2160.752251][ T9046] io_uring_setup+0x15f1/0x3770 [ 2160.757532][ T9046] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2160.762743][ T9046] ? wait_for_completion+0x260/0x260 [ 2160.768056][ T9046] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2160.773963][ T9046] do_syscall_64+0x2d/0x70 [ 2160.778944][ T9046] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2160.784837][ T9046] RIP: 0033:0x45e159 [ 2160.788739][ T9046] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2160.809206][ T9046] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 02:31:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000009840)={0x527c, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0xb}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x23e8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x23c4, 0x4, 0x0, 0x1, [{0x1018, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x244, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x67, 0x2, "c373107f296ca3b76f3e1af4799f825fe7316049252e15e1e9e9d87493c02d4c4b96a7a5fba15f54c7ca06b50f27df1cc3a1655fcb89d5bc987563b81b7a55b47f46d10d3922cce13d2e56ed666ed2de8ba1d6215be25d97927d5ba70f3d5892b16219"}, @NL80211_PKTPAT_PATTERN={0xfa, 0x2, "038c4e625c6ffcaf6c5b723512674e5242754d5dd05ad6266eb79b2c050271bf85847678d84acb13f646f4825686558d7f3b212f4beb8f75c845bf6a2d41f4bf5f0636a96eeb1f6e9994f0d2a48523270cbeec03a5b3f39f5965d4d87cc447631bf919318c0f05206e9a2fb7bbdba9490ba76d8acedf776a6a7fe8c60adbcf1e5efd5ce06e6005d493e98cc7fb109caa8b366fda466614a1027efd8b440c4de4a94652bfdf50badc681ae31f768e5440ecb0a9f251372dbe07822879591a45c310982c8bf74ad382279ae90bddd718669a7a96e5393dd1b41e46d105d21d5931cb49f1ae575190e21f6292cbaccf13448131df0d3383"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5aa}, @NL80211_PKTPAT_MASK={0xd2, 0x1, "3d7b0754df787fbb315fd8c30e7899d3ee0c2bc4b962a6c6ca9ebd11eac4b39d9ce89062c76682835cda94d2ab086b666dc36871b079e0a751acc344f7610d3f5b82a536ef7a781c53fb32af102863fcab1d776e562633a1f3d4a3bc826798bfacb182e22dce8cec5e6dfd014c9bd92d057ed19d26ec279f533ef2156c8a489eb7b2cd66b3851349ce217b10d765f2df6721dc784888ea1fdd856060b859366f6303dc79db34be0d8b2a34d40af2110f3b75a18c5d5d48b2be619458f089d61814abfc1d71c9e8a57c46bd52e362"}]}, {0x1164, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xc7}, @NL80211_PKTPAT_MASK={0xe3, 0x1, "02e35c1b12385f124f8c328a668aad45b9895e8a190c1d076a935410af37addc25a11d9105fdbfb29416090ce6f550cfaad35697e4c5a1dd1024fec758a42d4b057a80fd46471b3797f0fc52f15c05a72ab62a124e8e20d2f14e41a7447115de4ea568772710c930c2e90520919838a95b1de148dcab54a5015c9c58d42e6ba7279b2dd9ab9052bd28c6faba6fcb1b4495f2e8a5d6a5c8f71d48d6973479aeadc9e1805bd77282544da93070f80364983a65d4fe22662932036a7faf467a322d4fd062cbe4c8b5bea9bb3ff23ad4eceee79ce163e1ec34c93c1a29f9e135d7"}, @NL80211_PKTPAT_PATTERN={0x70, 0x2, "ca6caf9e7c3b7238dfb16c435a13c25ea7251629eaf114d768f73e5058d974c630d94d86bc098b36df5dbe09a6e526f99001dc7a8eeb5b0cc555c07222566493a75b3a2ab9eca2f5c3a90a525a7194796dc501e469c8bd163e1c1561c8e970dc38721d48e9050fb21adc745e"}]}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x18, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x30}, {0x8}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1a28, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x2c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x40, 0x5, 0x5e000}}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x101}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @rand_addr=0x64010102}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xc8, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x68, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xfa05}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="1d795d20ce2b"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x28e9}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5b49}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x3c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x12, 0x0, @random="c3115ce20f062d2bc1fdf87cbea1"}, {0xa, 0x0, @default_ibss_ssid}]}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x191c, 0x4, 0x0, 0x1, [{0x4ec, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xc7, 0x1, "a42ecdc1cc7f601533c8345a5cca00cdb1ab8bd3e3c167d31e36bce4c2a462912fb80cf22a0d39b2f3a77cb7202dedf43b4a901a20a6c95ea669c254d851fc59fc4d1329c00b9fefd1d8e774a7bef7a58689f7d80c8a945695b47ee3f9d364a326f8893dd747e57a93ecf28c6a8c8bcb0b6238aad6b7f3aab73ced8b3d177d2cea84b514307057154d5fe7e60dbe4a6744a2c68989cf4955ba9b26402e9fd4f6b7a0fd8b69da6145d3ed89ffc1a293b97785dba8b703843de1eed24db9528d821ac704"}, @NL80211_PKTPAT_MASK={0x102, 0x1, "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"}, @NL80211_PKTPAT_PATTERN={0xb5, 0x2, "bc43300356ccf6029501282378dc12348afdfd87b0af40d8fa9d1b545107a6c1626942637e6c89227a3dade4c51c3cff6dc1752d1e0437d7289be93f974d546aafa3907d60130066bcde193ed9307401c2d7d6f90b52f8aee9f3dae13b2cdac051ae159cd250d45d42ebc1537cbd7324164b8d5028b9703d1419f65fe1f022308f725d908a03b502e898a16e405f172b951df215826908c34584fa0848bd61bb8b3c00bd24f4a61d8ad08024240993c54a"}, @NL80211_PKTPAT_PATTERN={0xa8, 0x2, "7c140f5488e2b16f24a15848b21f245eef4cab60ef8a99f6723b1a78e3da8f5802718eb83272b45a172b275b65519121a14c62fc90ec565cca9ff53d7f8efe223c85fb3754613803f85a18c71c55e04463f22b0f1c2cc49fc42fe92eb4b86afd6759ab4f880a5ee9d17ff1419f4e39380f215057b67b923546955820e26109d56483c0119a6dc4dddf932739fa09c7bb3a5c657cd812e406a7f832bd5882d894b09cc3dd"}, @NL80211_PKTPAT_MASK={0x98, 0x1, "64af69adf40b9e8dc029ca12128aa1392099579cec5eb2e3cd8c6a74a57b494a471e998d22895032126466dc4c070806ccb1b052de0ffa31db67aee2676cb9649de897baadef5a2863adcb00f807e2a567125915c3956213f5959e0a0cf51bfa778a38f0b0e5867ebd3538516ddd3a4067e9645e534a25894034d346086750c122cf201f1e73c7cab1a11a36623fc9663dc07c28"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_MASK={0x7b, 0x1, "eaf9fdda7f9d666131a358eb6805c1a8d15a9e62911d78f3533a4d035f41c6af934caf3d9c4eb3368f3b63926ba55a4cfab465f14475fdbecb1971cd875d1b5de22c56a95607ec2fbc33da932a9b4d436f68b5c73c923ba4b53abf96c3eb2835142578da2ab2c5e656734373199d91eb5f19eecc063ba8"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x101}, @NL80211_PKTPAT_MASK={0x95, 0x1, "b15186b0a5e90bc0753d9dc4f9b2eb1c51fbb431b6b7ab964912c45345ccd84a1a40df56682f913b97f3eab35cd84d0345e8f7dbb85890ba03e4aae920d74ed549115b7d310b6688c7b2f161eefa9f751d1728739e6cad9ef77467145632be2baf74325e33fc6eb437528a28e2b94bc5baead7981dca0667fae570cfcc3fef835fee2bf5d38aca4fea058a9e7aee8ef2ee"}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xf9, 0x2, "b88dae3c7e677dec31c03f7ab9aa8922a5b2ae2a06e5a843957abe9300c09e8cd6073da6718eab22763b6d7d9a9aebe14e932e523f4091f437d2ee43626a994fac19ba68a158d079d984c6ac19dded7f22e034d5024ef1b45c14f20bde313a9952fdee56935f900d07ff69442b5ee521998b939a002c1f166390381044ba7e0559fe561768f464e0bad9aee969efcbeb5903e28fb6e14a806ef6fd9341a445e8f552ea9976cd57fb817df2792911a0d1089b04a4da3fbdb7d7c77c53842255d47bb1210c03dbfa632f7ba5385f4f4953770e880e25d992dc9f18989a564bf20079830a1cf990bbe2df7bc23118c00fa80532e03585"}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1000}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5fe}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xe, 0x1, "825ee1fb547de84d41f5"}, @NL80211_PKTPAT_MASK={0xbd, 0x1, "62c1b056f48594e9bbcd3194b470e4e9e09fd8afec33c537b13d36325bf5931d7d39c58d5bad2a9dbcbf2ee70b91895547c8ba4d57d9e69f8a9672ec155f7802da8e5c85a10e8b3ccbf0937fcabd60f9aa8e2c8654b32234cc969192bc1e2e23767ec4d71e7e1444c583b6a8760c558ef488948f7fa1bd33b4fb8d92aef19f10ce6d886dfd41d5c7e0e28b95562cc56e5dc1d23cc8c2c019ce2d9d3d5eff8f2c1ae7273b8272139c9943e6d22866b9e845cea9d3314a36a55d"}]}, {0xdc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffff3a5}, @NL80211_PKTPAT_MASK={0x81, 0x1, "e72c2c7657ca07783ca46ac56ecadb52b3512cfc5cea1e19e672729c429fe5830cba50f035999c65f38a4fb8421bb6f9b4274d6548f539edb81980e58ed75fbee68dec8bff41f90f3363aa5c2383f853f7676d602623b3297ec46079b59ad9e1c4debdb37e37e5cfd0506bea35ccb3d41ed0065cbb0df566bca6c83de4"}, @NL80211_PKTPAT_MASK={0x4c, 0x1, "0cf6208defd9cff942d2c05bb297cc98d28ff1ed03cf4d86ff33ea8c9808a73d2adeb50cfd3725fa59b9f667c1b2a2e79372c0ba3a0f30a25221f13effa60f37b2b4cce3626f5373"}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7ff0}, @NL80211_PKTPAT_MASK={0x4e, 0x1, "05c9d0912b4d5d6da07bd39db473e728df4262ea7877322bf847eb47dbb9dd09148db1358ed6cf7394cc825bf53b4e55afa87ffb791fdcf4eec577c949c53f822ef6645bab347290f4fa"}]}, {0x10b0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x4b, 0x1, "818c9dde76956cb1d3d699d92fea7f7e0805e1f3eaf9b56ab0415adff75ceee0861caf7f595c56214dc2aa124625600ad8f5cf685cdb4fea06496035465f1ffd59028d653dcdcb"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8000}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_PATTERN={0x49, 0x2, "9237a448bec2b725b40c84b95b287daa15416dca868bdfaabaf653e1654a80bd097a5d34ea4ca759c4a6a38f67806940d9356bbc54c2571f2d5fe6f34649226fedb82b1c26"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf2}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3ff}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x53}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10001}, @NL80211_PKTPAT_MASK={0x24, 0x1, "62d888bba9ab1682e448be3938aa228b02d5c8d9f159695632e6cdbfd10bd4db"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x142c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1428, 0x4, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x5e, 0x1, "6d35113b67b57b73feaad06aaf33002d29860b6eb3b9e8ff5853e91eca21fda075fc3e42814b29f2db42daf91eeed08a561a853695b89abef518b4f610e76d519de5a4e3fef7e926ae5c27973f180e365208d03beedff98be8da"}]}, {0x1164, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "395434094288d2f5eb026c5baffb25e089ae191f9f8d0fd61842e0b263008ce4870a2801587e224162dce1b231ef27a2b8b3a2fbba3b858aba0e13cee9c81aafdca28ebd688e93f3a955fb0e76b71d49101ab16abca3c243e6929bc645db8979a7cbd83820d8e42951c792d8d3f123d2ab244ecbe4a841e899db90855351cf68923598a724f72239e85d342a2c7287a778811c10fdf94953b99e93c4e32a411d8e7f87716481c3c270f58b4be6937752c6a46f4f83d92e8b692dd8c4f4461961e814e63c23a4f2a39d2c809b82cf3c5bbb3a2091ac7a6c707d1644379d6bae21a7e3be072acdcf236103fccb199856dd01ef5a68154965bf1c75fca90a4236ab2572d49aa8e2d160a1a360415492c564713f9d953f89e8f2f24504fac0edc9f197e196d7761c3f10875039235a15b1cd92ff76a3e5086dc141de91585cd8efb699fb58e78df1dfce497dc53883f54dd40a052039d3aafb5e7a3435a5c86c0bfeaf5b9a6e733700f62e3339f58bec7e18e1283419125644a07d131fb20633d71718f546bdb89dd35e0e64f50c1904fb866ab7957efeedc2c328f89cc74d1cc9abf0218b1debad6d1b3545d43eab0ab01ab7c7f9501edb1ebf71e65a2afa3bb3d92b4e6018fa9a5b13d42867116e17d21c37b0edd8968cfa248a6beb51a757aa0904e40f3a989e49928c0fce7731ceb252ef3c3e2b3d3b0837d8dd76fb76ea030510021d84ef20b81878057554fdf46101cc23124996e72553accb953c842f8be35341caf3afc4bf7daa8d03f91275e3d9d8053234bd1b0039087176e87f82acf0e6a135c8acb5445ba13b697a32b1dd14c88890f5948d88aa39bb69fb22987c86283f0f62c1a59fe761e690e5a0ed4d95acc87a39fc820d19390ee69df618d006230a2a8d983497a67d5fc550a12dd590cbbbf000f93e288d6c2132dfd534b3d728f974fe0c92e16b192306137f6a66dac6a28c47c1adf154aed10b1a1a358457e58f001a2902046f8704bf2e1b1e0e5ffe791a45c13b82f4ef64adbb623e7f6451cf5811cfb9c6e381bf9618c42efe228b20f40d34e2f1023120d4b1a173eb41d176aea2ad00fe792d64285d8fed3ccaaa8051a05d1eac224650c9699a16554915b35f35ed888bc2802c66180bc08a471d73d3776e1c353d94efc4a065c1968bbd960c5c018d3f623c043d9081d55faee0400a4b12117460d09de473bd695c02869c2339d866ed2a4e9afdbd8de7fdedc6c5d44eebaa97912c65e050d269dee476439ff1563b939569733140b3a7e5630599ae0f9505f6d9840fb7222891e46f8b24a37ef2d80c710b325ab6d52208bedd483247a908f05ba04ec9cf808a6915366110007ec2a41f87e8c69606994e657f1aa912706da38283a6b6c661f33527544437d2e2959a9059e570c7bf5dc5ea1be74e56ff917cefdb1e86e4348ddaef44163ee0bba1fe2747055f7fbb518ea209cbc6cc7dccbf6f60878e239942c767190b994b3ab832804aae6138806d328cf9038cf6c2e8ac152e6b7e0e6fb6ca8f2c2dae6b15b7aec14d6366f66f181385c7fbc249970ac4183fb300b37a85db70b0fdc4f96bca2aed6645f1e2681e6a292598e6b920fdb999f5e3d681ec19cb512e90b98413ab28421f2f5ff3c6b643b7e9a8775c0c57759b06e05bb1c25f98cb043b615ac5d9619715ee8aead306a5acf81b19370b7b83462c742d7d4e51a830feecabf4ed48ef514230336abccd2016ddb09a0d838cdbde2d6e85bcaed79f7170a9a84147081321e149f657f4378300e2454530110a2306b28bc445fc7335eee390e55be8e0fd9613e232054f9b68a192d15d008dacf6acf8531f79b540a8743209e5f0ce823c46741fb5aa41a7a2c5e133505a87bdac21e5f869c37600d1845c51155bb089cb2ed4c583423d6ed955b0213be24e07badfe2211408695a59e4fc769e704a9583f17c68108fa1b64f86f0019d221818ec713d2faf8cf8bd6780dd85ced442abc039c65cfbe1427760e9c5010827a048e9bd32e3d0c5b55d41004ef60479e94bb9b2a04370dc87220d780c0e86746c3a3a3134fa62475430082b481b55f29df9a5d1e02a31ba644b3e6ff6d33a969e85da1bb7238105d49bb196597da2f148162145515faf3864943aa50a1eb93d463de19830996b1fe9d8a70e2585c337091e7b2e390d4199680432123716d88e63d93b9de4ddb1b290b8b19e02a3d1dcc232cb7e94bfea261203a6288edc1c565d7204bfed2ae6179d77cef709190632ef214d060655bf28213ceaed6baaa814ed2d78a74c5aa9b8d0175e1d6cee01f6844c2e02e541a1d059f8fd62b0c3421b3d0a05e4780b8ca9d2681e6891894cd8da4a98361f9f672ff92b4a6083697c91bcefc1efa5446a6b970c068d17736d1dde4e0a372099da40ddc8e309fc10409c84ad63f965a0f7ea626292be75d108f23e9727a17726dcca65be592ec42ed575ef57939bb5b6ab1ed4309d6d00af574d42c6c8f94b161747bc17539b3fd1daae48beb22826ad107198fd603fe16c797e17a7d5f786bb843f258e849f2a3ebdcfb38d64a8a2668a90ea103530fee20ac5d7522a7ecd17476e80b0ce8f4f9cb054689e10f9ec1a7c99fdb27416d2371d645e7193e609e382da4e2078b03c4f4a183d13280092ca9bbc9c562acd7d510690f4eac38c8a7e60f85438b8f0eec9ee8fa37af8275504ba5610026c306c95b3119d795179042eb5ce50752d009ce2e4d495876b7d2e8863de2fcbafa6b298c52c1a881d95b42986a7d97162b6ae5255bc25992eec5834a1449b37addf7f9a818a32089fe061763098a1b1e982bf13f3200a2b0865d027b2d488cc3f36b493021821b09059f8b098ed963519626e08d6f7962b84fbdd1cdbcca4fd18a191444bc3fa0170526b968a9894a6756c4d67e0e6b852d909f1e902d86f2eb9cdbb7f305ac8585f45d2d421efdc29802c033879a84bb16ee2a24e1d1c093146280cf18ef96a8ae361599b53e02d37577f358c7564a24009c47f74036bb3f52e9d3600875436b941610dd36403c1ce6861e355e06a6a3088a7693c31f0b105d7ba93bfa6b1c16ff88de63f2acd59b62afb0c88eb1083a2393ea4ea4552451e6c371aa215d4f5e38d71d3eeb1841a1ab81a515badb25993306af05de256bf388ecea5af48da08549b132dfa05fb3c989a5da2c1b6be9438ec17ebed1f0200c01a7b0c0cecce6aa36227043857acffd22dc39f3024bf07e29f369d631b30fa9dc230d5dc26b546a062a495b75cb995870715b1d1e0cf715efad5f36381ecfb2664eb3e565a1f7de0f3512fcdb36897c95d7efb91f520b15bf414fc7ef2f51f799680db5a86bb6f13aab9f8b996d9345ccd85f9e6a0d6b71db20a0f6a0debdd8d7638ebae0a8d0b7737907f04b428f9389559dcf3cf3ae19b62e3c798644f14f6ff6643ee1bb7bc95af56beb0aab1a08094265744140e4fd168e5a863d9277fceccfd3229ed4a821688422226c59473becfa98664ba52e71de41f3c6eaa4eda45e8356b58eba19d1c1fbbe95056368f78287d98933eeb54017bf018e75015fda8c906f356d35437e5b1f046a1bb70772dc0b75df0e08155d62091b067178777af79e05c645d3f482577545f240bf5a15d5470832b984b4e758cbbd936fcf7f0436786af325c13d7103f5c4c23fb239ee4a923fe3177654a8545c478e2a23b35d6ff1111fea916d142b4ecc5946c892a39dc0488b2521de7f40f88d5d4863bd74cfe5ec944aa9bd8276f1ea19902a19253fac4a0cc95c3e0e581287982dd2357b30550d80d4d979341e135b7e98740789423029fbd9766692a7751a4dccdb4e3e7a9a118e63d7f983333c281fb44065fd64e0289a78e8f8a8bda08b725917889a25c05a90eb8f10c287ff1f3a1726b1c42a6cc8b4cc256d226c389f71b40083c6733bc3d3e45005a4d8e623043b5aacb28a3d58fdf6656f6702456da8bf4018fe465da5972c4d565e348f37f61eb32a12fc9cb3b0917b6d3798f67b1427bca2d302bf920cc06a19fea88b9b5de3139908aa10a4866f1f04bc3282b4a6c26fce3b960b52feaffe208acad49fccf8ea20e629a9f4235bdb0f871785250e1c56726ed6ab2e1ae6898bd4a98a440318e1bc3de62af30aa141bf9d2fd63812285fdc8f63e381bfbeb12a4d337b0f62dea74ecb43101e1cd2efff28855ddb3aadfa7ba0e15ff5d2678077a14e4700b3bb60111b06da287b9bcf49c4b3d422c8ee72194d60f3ab094349907c21c5a0c6b4e8bb01ffb38f878489a8d6e0c478a58f087621ba9eabaa7037feb817c823aa1cce189d18e8b00514d94d2c33336c5096b34799825d6ff7c29e96d7fb3467c9f1f67c05e8dec3f14c5abf3490385622aafc6778965352327abb5d2f33479b808780b4356adc38d5eb75ba21adaa1a106f32fe1599194601cba28d6fdb36ecc06dc9e2aa470bda5106c55b8293d5db1145606518842f6049f7506d570c5d8765bd666c47a5dedde7af9b70d490671da3c297e5f2a6511e28cbeeb2c392f49877c4623e2711a3d6a92603698e998af9398691f4becc642ff8ae3ff42a7751b7120330ae196139db1af4360fb899cb94491768d4e0f0f37e73154941b0c69dedb2f3079758f9baf064558147f88eb96dce98fa53eb56fd3454610dcdc6ea3c4301299681c851e48a7510d6da962d3215e0755b0c93272a6713dd0e5c70586b4320910ca0ac79aaf7d8d0cb47448876a6c0e18a9091c6436faf805d2d4723bf726d596cc081d55f182e57d7ddb967c2b94f911b5727713eb02d25f12a8317d0be456b0bf57852f2073c772b199fa538efac0076c828f7fca306ae6d239001dbdbe9d46f8361b537eff1b56487f65d8771af2260497ef737dbae41b99a19603bc500c75b9090034ae77d37c09af556479b5ae782adc42274a286a7469e24533957f213a7782e58b0878bd3bdc70bbf9c5fc378759f74c48f44c1a4800aa932ddcebd3ad396cb0bf3fe2fc4d4e67186fea01612cf870b4c8b6abf258fce8b638e1c3c65e7b5970b651a074460364324b576e0fb9537631847c6e205888818ed2de5c1408676136d5fa5f2e326d310548b242192ba5a11a014b43b127137791a294d6ba99c8c804545daf43939240e1bac54f165cf8e8b2071098856568ff5718b6cc60da9a860002133d4f6731d6db6842154f8b29587d5b2e9d9db0e0304d41d02e1a28c8cb107bbfdef616d91b3c867fe76e63bd819b5177a5aad1293bb3de907f93fd695a45b301dc713fbeb47c38a5c2443c57129a9495ca32fc530763c3317f914ca2cf4c00cd5a95c02c9220a2e5a9d6278c00c4db90a8edc3114c35937020d29d4bd4543a266f46d1564ab105081914510c64d1c1a2cba0e77a879662f76747850e6a8af132490b28f0e58066cb7a2ce6aa6820b3b6dc847388aad94dbd77a2199bea89cf362cb28053121d471770d3a25676706ebd2bb4c24d799ae324e27392a1353cca08919bc6a69c62277f7e655fd87e38d89aa4bf1f6f01e4a5ead7e87f787e07faaf61a6f20fcbd27977bd2211a3cdf8a774510d352e365c8f9a4c261a96f1f32cd9bcaa522529b8b7adde46c331e42f4676b7e4c8eb4c5634ac557d3b6cdbd78dd35d2328acbfb7de7289914870e16e30b5d33b84e8ef31871cfc730393dc42bb085c3de3954e5bf1bef287fecf324e1730374067f92dafdd6182f0ce5da75343dbacff36427625acae6346d6343a47d2f40b8adf73ec4e6d55158ecd5b0d9880397548aa97cfec0f17a5e072615091d519"}, @NL80211_PKTPAT_PATTERN={0x1d, 0x2, "16e5edb4a4688ff4282b731861e443a49e49f4fefc11e7337e"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1f}, @NL80211_PKTPAT_PATTERN={0xb3, 0x2, "50b979022a66e985e5850e6c0355fdf375fbea97ae5dd544eb46dde1b948348a790eeac284a14c3b14fa913cf5a9038369cfba2f749d9eb1d58cc58a72daa2f306a2837b66337f0fd2b378ccbbb0f33e708ae4bdc9b6cc4d8e68780e8c36398df6b94a7709cc061c83c3b176231ee3e72659c28b2804d86dabd3642ccf70e4816d053a6c5bc357749d6c879d5c11387158a60c1d14e2902b1fd81a4fc9e0ad0df5274d1a8236b32fc5d0e6ad50f9f8"}, @NL80211_PKTPAT_PATTERN={0x76, 0x2, "f654b62c4260b03179ee49ae664a4893ef24f42f9a51e5e0f5a12d4a6c729bb1fa931d8fa9f28341ae505e30af5dea072bd8fec0bc1540a42d6b84d1193729ae19d715bf1b9249d065225aed6222cafddced4813473c2a70e0c8d87bf0a1f48ac1c8e1ed2c0a1dd68d46303c8023da7d2fc3"}]}, {0x25c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfff}, @NL80211_PKTPAT_MASK={0x53, 0x1, "0e4191e4b521a82e1c00e3485f1eba65d1f50117a3f146461901f77afbd00b518b5a2cde4bccf3c8508dc50ed431b5d8ba78ed72f1f36b422af52a199249cc4cd157fb7d502bcee408f9c81758d37b"}, @NL80211_PKTPAT_PATTERN={0xf5, 0x2, "c0c3861d8e4f3e112d02f93246cc9a3d0a669c4c33f82723c5daef3967d96a6085430b52892887cb280bae29e729d4c63fbd8ad1919faaa31de9ea3237c57741f0a39de5c222b0aa8a874f08ea0deb520f16a7c2b58fc5819571165718b7093a80b08a73e8f8704630d050799fd3c6867806f2c78418371665774295b74b4a435ea11597370960024dc39b38c476d0e086cd9e6c6e676360cdfaf62e109645a98e73bc94173e02275e7e5e66b712fc37feb1b3251559fd948b24ce7bf6818c18a03fb53d223793991998bd9038de86fc2900b2496effebeff6baa3ffe82f70ca91a9d58199c14f87e31b785c5bc42987ec"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xede0}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffffd}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9a1e}, @NL80211_PKTPAT_MASK={0x85, 0x1, "8eae9c11c0c3e8121a28a6837428826d851ddd1051f8056ef5ee2436ba2e716c10ad24ea97d72ec0978099a4ea5a41752117a9585645f68f3914ae7840faf7fb93095196a564eb7a390b2a2a6570a2639dbba8e38b988ecce7cf0a675ddb6de0c359ccadf8c26ff389f2c8d9b624407261e67cafc0d685dc3f79ddb087f68dd937"}, @NL80211_PKTPAT_MASK={0x36, 0x1, "589360897951e01bbfc6930f2ae5fd5ae9950565a4b461c183c3d44195a70c808f28bc5390fb838b37b4eaf7adefcb57e3ca"}, @NL80211_PKTPAT_MASK={0x21, 0x1, "eb0f0e8aba8d475101bf7329341e88d7b53028701a95212fabd02ee2be"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x527c}, 0x1, 0x0, 0x0, 0x4400}, 0x4000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r2, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:31:14 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2160.818173][ T9046] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2160.826153][ T9046] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2160.834129][ T9046] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2160.843180][ T9046] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2160.852220][ T9046] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2160.905988][ T9056] FAULT_INJECTION: forcing a failure. [ 2160.905988][ T9056] name failslab, interval 1, probability 0, space 0, times 0 [ 2160.940053][ T9056] CPU: 0 PID: 9056 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2160.948398][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2160.958451][ T9056] Call Trace: [ 2160.961753][ T9056] dump_stack+0x107/0x163 [ 2160.966920][ T9056] should_fail.cold+0x5/0xa [ 2160.972595][ T9056] ? io_wq_create+0xb4/0xa60 [ 2160.977192][ T9056] ? io_wq_create+0xb4/0xa60 [ 2160.982510][ T9056] should_failslab+0x5/0x10 [ 2160.987039][ T9056] kmem_cache_alloc_trace+0x55/0x360 [ 2160.992428][ T9056] io_wq_create+0xb4/0xa60 [ 2160.996856][ T9056] ? alloc_pages_current+0x199/0x2a0 02:31:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="67000000080001003e0000000800093dae4f73930279e0080300f581427b1dee1e28fc56d683f4f942cb08354ca7be6e2a35738e0a745355e68a57e5975e66fb2a0e8a0532de4587fdaf5f3ecf565c3c87a0abe697e9c4ff043e1b8d5f963d2f0def195c43bcaa17e7175eeed079aaa17803d59a3bf336e19c471086750cb3a564100d4985d300"/147, @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) [ 2161.003503][ T9056] io_uring_setup+0x2a12/0x3770 [ 2161.008512][ T9056] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2161.013725][ T9056] ? io_sq_thread+0x1570/0x1570 [ 2161.018586][ T9056] ? io_uring_poll+0x2a0/0x2a0 [ 2161.023358][ T9056] ? wait_for_completion+0x260/0x260 [ 2161.028673][ T9056] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2161.034582][ T9056] do_syscall_64+0x2d/0x70 [ 2161.039010][ T9056] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2161.044906][ T9056] RIP: 0033:0x45e159 [ 2161.048811][ T9056] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2161.068418][ T9056] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2161.077440][ T9056] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2161.085419][ T9056] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2161.093960][ T9056] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2161.102976][ T9056] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2161.110954][ T9056] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:14 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:14 executing program 3 (fault-call:2 fault-nth:8): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:14 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:14 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r2, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2161.290886][ T9088] FAULT_INJECTION: forcing a failure. [ 2161.290886][ T9088] name failslab, interval 1, probability 0, space 0, times 0 [ 2161.322379][ T9088] CPU: 0 PID: 9088 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2161.330742][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2161.342045][ T9088] Call Trace: [ 2161.346371][ T9088] dump_stack+0x107/0x163 [ 2161.352168][ T9088] should_fail.cold+0x5/0xa [ 2161.356687][ T9088] ? io_wq_create+0x107/0xa60 [ 2161.362008][ T9088] ? io_wq_create+0x107/0xa60 [ 2161.366696][ T9088] should_failslab+0x5/0x10 [ 2161.372136][ T9088] __kmalloc+0x72/0x3e0 [ 2161.376588][ T9088] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 2161.382413][ T9088] io_wq_create+0x107/0xa60 [ 2161.386931][ T9088] ? alloc_pages_current+0x199/0x2a0 [ 2161.392516][ T9088] io_uring_setup+0x2a12/0x3770 [ 2161.397392][ T9088] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2161.402595][ T9088] ? io_sq_thread+0x1570/0x1570 [ 2161.407454][ T9088] ? io_uring_poll+0x2a0/0x2a0 [ 2161.413245][ T9088] ? wait_for_completion+0x260/0x260 [ 2161.419909][ T9088] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2161.426675][ T9088] do_syscall_64+0x2d/0x70 [ 2161.431329][ T9088] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2161.437224][ T9088] RIP: 0033:0x45e159 [ 2161.442424][ T9088] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2161.462979][ T9088] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2161.472429][ T9088] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2161.481358][ T9088] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2161.490297][ T9088] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2161.498274][ T9088] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2161.506808][ T9088] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:15 executing program 5 (fault-call:2 fault-nth:7): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x34}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004840}, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r3, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x1f4, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "72dbe111e1c46c9e7c907f81dff0cf39003b9bd397bcc8ee"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1773e381973617ef4ab126ddbd8868be4db95cd73a1c359e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ca9a9703aa68365aac9ad896250e329c105b725316790e55"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2a1764317a2ff774726fd87d6e0827ff8384bf0e6c15adaf"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f22a3a22e3f3900fd06d84cbb68836f66a30bcfc1b1bf046"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e917eee70c72d2a4509a9c0288d2856e043f8900db350a61"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cf3b333792483ba596670ff8e11c4e211f250d1d39075174"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2ea975c4225d0024f0820f954e245dd4278e7c9ffb1662d5"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "432907214b221786fc798c9d26a6d0f57c188bdebaf2cc56"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "63a65fb70c01d65666ba209ef42248b32578094218dc9b6c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "54477afa048465b7e8ee01d7a0e234d26de80a09c159e901"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4010}, 0x840) 02:31:15 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:15 executing program 3 (fault-call:2 fault-nth:9): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:15 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:15 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:15 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2161.727796][ T9127] FAULT_INJECTION: forcing a failure. [ 2161.727796][ T9127] name failslab, interval 1, probability 0, space 0, times 0 [ 2161.751524][ T9128] FAULT_INJECTION: forcing a failure. [ 2161.751524][ T9128] name failslab, interval 1, probability 0, space 0, times 0 [ 2161.795711][ T9127] CPU: 0 PID: 9127 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2161.804063][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2161.814120][ T9127] Call Trace: [ 2161.817421][ T9127] dump_stack+0x107/0x163 [ 2161.821761][ T9127] should_fail.cold+0x5/0xa [ 2161.826281][ T9127] should_failslab+0x5/0x10 [ 2161.830796][ T9127] kmem_cache_alloc_node_trace+0x5a/0x3a0 [ 2161.836522][ T9127] ? io_wq_create+0x5b3/0xa60 [ 2161.841201][ T9127] io_wq_create+0x5b3/0xa60 [ 2161.845717][ T9127] io_uring_setup+0x2a12/0x3770 [ 2161.850588][ T9127] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2161.855796][ T9127] ? io_sq_thread+0x1570/0x1570 [ 2161.860655][ T9127] ? io_uring_poll+0x2a0/0x2a0 [ 2161.865426][ T9127] ? wait_for_completion+0x260/0x260 [ 2161.870742][ T9127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2161.876649][ T9127] do_syscall_64+0x2d/0x70 [ 2161.881728][ T9127] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2161.887625][ T9127] RIP: 0033:0x45e159 02:31:15 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2161.891532][ T9127] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2161.911135][ T9127] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2161.919557][ T9127] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2161.928469][ T9127] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2161.937046][ T9127] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2161.945020][ T9127] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2161.952998][ T9127] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2161.962641][ T9128] CPU: 1 PID: 9128 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2161.970982][ T9128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2161.981038][ T9128] Call Trace: [ 2161.984335][ T9128] dump_stack+0x107/0x163 [ 2161.988672][ T9128] should_fail.cold+0x5/0xa [ 2161.993181][ T9128] ? io_wq_create+0xb4/0xa60 [ 2161.997778][ T9128] ? io_wq_create+0xb4/0xa60 [ 2162.002384][ T9128] should_failslab+0x5/0x10 [ 2162.006893][ T9128] kmem_cache_alloc_trace+0x55/0x360 [ 2162.012190][ T9128] io_wq_create+0xb4/0xa60 [ 2162.016619][ T9128] ? alloc_pages_current+0x199/0x2a0 [ 2162.021916][ T9128] io_uring_setup+0x2a12/0x3770 [ 2162.027784][ T9128] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2162.033000][ T9128] ? io_sq_thread+0x1570/0x1570 [ 2162.037855][ T9128] ? io_uring_poll+0x2a0/0x2a0 [ 2162.042626][ T9128] ? wait_for_completion+0x260/0x260 [ 2162.049115][ T9128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2162.055523][ T9128] do_syscall_64+0x2d/0x70 [ 2162.061338][ T9128] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2162.068018][ T9128] RIP: 0033:0x45e159 [ 2162.072230][ T9128] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:31:15 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x148, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa6, 0x58}}}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x54c}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x420}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfff}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x95}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x7, 0xffffffff, 0x36, 0x9, 0xfffffff8, 0x3f, 0x80000001]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ee}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xc4, 0x1f, 0x0, 0x0]}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x80000000, 0x6]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xac}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7ff}]}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe0}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x68ee}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x2, 0x3, 0x1, 0x6, 0x3, 0x100]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x7, 0x4, 0x0, 0x10000]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x16fb, 0x2, 0xfffff56e, 0x7]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x662}]}]}, 0x148}, 0x1, 0x0, 0x0, 0xc044014}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r3, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:31:15 executing program 3 (fault-call:2 fault-nth:10): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2162.091905][ T9128] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2162.100415][ T9128] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2162.108820][ T9128] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2162.117185][ T9128] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2162.125624][ T9128] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2162.134049][ T9128] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:15 executing program 0: getitimer(0x1, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:31:16 executing program 5 (fault-call:2 fault-nth:8): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:16 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:16 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:16 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2162.319929][ T9177] FAULT_INJECTION: forcing a failure. [ 2162.319929][ T9177] name failslab, interval 1, probability 0, space 0, times 0 [ 2162.398107][ T9177] CPU: 0 PID: 9177 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2162.406476][ T9177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2162.416626][ T9177] Call Trace: [ 2162.419929][ T9177] dump_stack+0x107/0x163 [ 2162.424274][ T9177] should_fail.cold+0x5/0xa [ 2162.427311][ T9191] FAULT_INJECTION: forcing a failure. [ 2162.427311][ T9191] name failslab, interval 1, probability 0, space 0, times 0 [ 2162.428786][ T9177] should_failslab+0x5/0x10 [ 2162.428803][ T9177] kmem_cache_alloc_node_trace+0x5a/0x3a0 [ 2162.428825][ T9177] ? io_wq_create+0x5b3/0xa60 [ 2162.457351][ T9177] io_wq_create+0x5b3/0xa60 [ 2162.462695][ T9177] io_uring_setup+0x2a12/0x3770 [ 2162.468650][ T9177] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2162.473868][ T9177] ? io_sq_thread+0x1570/0x1570 [ 2162.478825][ T9177] ? io_uring_poll+0x2a0/0x2a0 [ 2162.483599][ T9177] ? wait_for_completion+0x260/0x260 [ 2162.488917][ T9177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2162.494815][ T9177] do_syscall_64+0x2d/0x70 [ 2162.499230][ T9177] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2162.505120][ T9177] RIP: 0033:0x45e159 [ 2162.509023][ T9177] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2162.528653][ T9177] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2162.537071][ T9177] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 02:31:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x158, r2, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ba}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xd3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4a}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x400000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8954}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x2, 0x400, 0x8, 0x7ff, 0x0, 0x80000000, 0xfffffffc]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffd}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3f0}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x61c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xfffffe00]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x3, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fffffff}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x58}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2162.546399][ T9177] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2162.554377][ T9177] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2162.562353][ T9177] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2162.570333][ T9177] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2162.578324][ T9191] CPU: 1 PID: 9191 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2162.586664][ T9191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 02:31:16 executing program 3 (fault-call:2 fault-nth:11): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2162.596718][ T9191] Call Trace: [ 2162.601505][ T9191] dump_stack+0x107/0x163 [ 2162.605860][ T9191] should_fail.cold+0x5/0xa [ 2162.610373][ T9191] ? io_wq_create+0x107/0xa60 [ 2162.615055][ T9191] ? io_wq_create+0x107/0xa60 [ 2162.619736][ T9191] should_failslab+0x5/0x10 [ 2162.624245][ T9191] __kmalloc+0x72/0x3e0 [ 2162.628409][ T9191] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 2162.634223][ T9191] io_wq_create+0x107/0xa60 [ 2162.638746][ T9191] ? alloc_pages_current+0x199/0x2a0 [ 2162.644045][ T9191] io_uring_setup+0x2a12/0x3770 [ 2162.648916][ T9191] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2162.654350][ T9191] ? io_sq_thread+0x1570/0x1570 [ 2162.660450][ T9191] ? io_uring_poll+0x2a0/0x2a0 [ 2162.666653][ T9191] ? wait_for_completion+0x260/0x260 [ 2162.672816][ T9191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2162.679377][ T9191] do_syscall_64+0x2d/0x70 [ 2162.685293][ T9191] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2162.691770][ T9191] RIP: 0033:0x45e159 [ 2162.696069][ T9191] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2162.715993][ T9191] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2162.724618][ T9191] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2162.733088][ T9191] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2162.741638][ T9191] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2162.750154][ T9191] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2162.758650][ T9191] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:16 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2162.851869][ T9206] FAULT_INJECTION: forcing a failure. [ 2162.851869][ T9206] name failslab, interval 1, probability 0, space 0, times 0 [ 2162.897881][ T9206] CPU: 1 PID: 9206 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2162.906241][ T9206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2162.916635][ T9206] Call Trace: [ 2162.920922][ T9206] dump_stack+0x107/0x163 [ 2162.925353][ T9206] should_fail.cold+0x5/0xa [ 2162.929870][ T9206] ? __kthread_create_on_node+0xd2/0x410 [ 2162.936212][ T9206] ? __kthread_create_on_node+0xd2/0x410 [ 2162.942821][ T9206] should_failslab+0x5/0x10 [ 2162.947732][ T9206] kmem_cache_alloc_trace+0x55/0x360 [ 2162.953035][ T9206] ? io_wq_for_each_worker.isra.0+0x370/0x370 [ 2162.959114][ T9206] __kthread_create_on_node+0xd2/0x410 [ 2162.965900][ T9206] ? __kthread_parkme+0x1e0/0x1e0 [ 2162.970944][ T9206] ? io_wq_create+0x5b3/0xa60 [ 2162.977024][ T9206] ? ___slab_alloc+0x280/0x790 [ 2162.981805][ T9206] ? find_held_lock+0x2d/0x110 [ 2162.987908][ T9206] ? io_wq_create+0x5b3/0xa60 [ 2162.992603][ T9206] ? io_wq_for_each_worker.isra.0+0x370/0x370 [ 2162.999228][ T9206] kthread_create_on_node+0xbb/0xf0 [ 2163.005584][ T9206] ? __kthread_create_on_node+0x410/0x410 [ 2163.011607][ T9206] ? lockdep_init_map_waits+0x26a/0x720 [ 2163.018321][ T9206] ? lockdep_init_map_waits+0x26a/0x720 [ 2163.024842][ T9206] ? __raw_spin_lock_init+0x34/0x100 [ 2163.031449][ T9206] io_wq_create+0x76a/0xa60 [ 2163.035998][ T9206] io_uring_setup+0x2a12/0x3770 [ 2163.042269][ T9206] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2163.048874][ T9206] ? io_sq_thread+0x1570/0x1570 [ 2163.055124][ T9206] ? io_uring_poll+0x2a0/0x2a0 [ 2163.059896][ T9206] ? wait_for_completion+0x260/0x260 [ 2163.066371][ T9206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2163.072900][ T9206] do_syscall_64+0x2d/0x70 [ 2163.077635][ T9206] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2163.083532][ T9206] RIP: 0033:0x45e159 02:31:16 executing program 5 (fault-call:2 fault-nth:9): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2163.088038][ T9206] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2163.107673][ T9206] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2163.116097][ T9206] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2163.124581][ T9206] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2163.133213][ T9206] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2163.141862][ T9206] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2163.150493][ T9206] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:16 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0xc}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:16 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2163.214167][ T9225] FAULT_INJECTION: forcing a failure. [ 2163.214167][ T9225] name failslab, interval 1, probability 0, space 0, times 0 [ 2163.229655][ T9225] CPU: 1 PID: 9225 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2163.238005][ T9225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2163.248065][ T9225] Call Trace: [ 2163.251380][ T9225] dump_stack+0x107/0x163 [ 2163.255721][ T9225] should_fail.cold+0x5/0xa [ 2163.261152][ T9225] should_failslab+0x5/0x10 [ 2163.266062][ T9225] kmem_cache_alloc_node_trace+0x5a/0x3a0 [ 2163.273043][ T9225] ? io_wq_create+0x5b3/0xa60 [ 2163.277874][ T9225] io_wq_create+0x5b3/0xa60 [ 2163.282575][ T9225] io_uring_setup+0x2a12/0x3770 [ 2163.287494][ T9225] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2163.294053][ T9225] ? io_sq_thread+0x1570/0x1570 [ 2163.298915][ T9225] ? io_uring_poll+0x2a0/0x2a0 [ 2163.303685][ T9225] ? wait_for_completion+0x260/0x260 [ 2163.309000][ T9225] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2163.316202][ T9225] do_syscall_64+0x2d/0x70 [ 2163.320998][ T9225] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2163.327667][ T9225] RIP: 0033:0x45e159 [ 2163.332347][ T9225] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2163.353841][ T9225] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2163.363415][ T9225] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2163.371400][ T9225] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2163.379384][ T9225] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2163.388572][ T9225] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2163.397834][ T9225] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r6, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r7}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080000251c00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000000078000000"], 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r8, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:31:17 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:17 executing program 3 (fault-call:2 fault-nth:12): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:17 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r1 = socket(0x1a, 0x4, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, [], 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000a00)) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0304000000000000000067000000080001003e00000008000300392c153ecc06304c7531da8184c1b7f1b4099c9c0f13d515beac54839dc348808b309d9e0636a0e6aad4cdb2b67148cddf0920114625245ca129a22fbe656dabbb8f62d6ce2a389aa6ec381bb9cf9269a34f1ac769a40c5f15b1baecac0fb3acf89a1acaaad29a1e830aaa61739520e876407a70a26011395557409aadcdab2761c344b47faf0be2e6b9bbd684b2fe4793065d655a60b932daf4bfb6717ae6ee4e187c4f021f5c5ab3ef2588fd134ba519643e211c5fc85289779f97ba22ea2002dbbe20d364be73cb26805d0343", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) 02:31:17 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:17 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:17 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:17 executing program 5 (fault-call:2 fault-nth:10): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2163.742660][ T9263] FAULT_INJECTION: forcing a failure. [ 2163.742660][ T9263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2163.774619][ T9263] CPU: 1 PID: 9263 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2163.782972][ T9263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2163.793031][ T9263] Call Trace: [ 2163.797726][ T9263] dump_stack+0x107/0x163 [ 2163.802076][ T9263] should_fail.cold+0x5/0xa [ 2163.806623][ T9263] _copy_to_user+0x2c/0x150 [ 2163.811137][ T9263] io_uring_setup+0x1c96/0x3770 [ 2163.817325][ T9263] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2163.823961][ T9263] ? io_sq_thread+0x1570/0x1570 [ 2163.829047][ T9263] ? io_uring_poll+0x2a0/0x2a0 [ 2163.835297][ T9263] ? wait_for_completion+0x260/0x260 [ 2163.841967][ T9263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2163.848499][ T9263] do_syscall_64+0x2d/0x70 [ 2163.853004][ T9263] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2163.859775][ T9263] RIP: 0033:0x45e159 [ 2163.864170][ T9263] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2163.884443][ T9263] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 02:31:17 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x12}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2163.893355][ T9263] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2163.902250][ T9263] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2163.911180][ T9263] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2163.920314][ T9263] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2163.929588][ T9263] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x5, 0x8, 0x71ef, 0x8}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000810000000c00990000000000000000000a000600ffcf0100000001000e003300d46768bdd702110000000000bb7d264073638a82f65a5cad7ffa408a963c7c353e327a4a3511fbdaacdb25bc5279cb3de03893e67125bfb8f93c53664e2769c55aabb963a7d2fe1e"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0e6a18a4860f66d}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x770, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x81, 0x5, @device_a, 0x6, @broadcast, 0x80000001, 0x8, @device_a, 0x6}}]}, @NL80211_ATTR_IE={0x284, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @random={0x5b, 0xfb, "001448c33201b9448bd2ef620b92c5db995997aef7273e0607a2629d4950da0c4a94ae3d3e9541fbc83994738187cbcfe9ae57cff3054647ab3cca42ac2e11071b4f30376d621efde49be46d0ba8495c6d9dea2fcd62123a1bb1a1b5b85ebb65dbb036d7daa29fab776112e55daa82644188188ff2704823237136a38ad75f9aa94de83413733d634a6f89d85ff4378ee3a29f42d457f03245852ddd59f8a880ddf1b0b0d53d504ecfd2b173416ba839096542c4f8ea2edf1e6a18ef31a7a20102b4771ada9bf52fe33663ccba37f58520e549ddc5a9ba10e9d045d95acc715bc875b434b1fe33986af6916b04f37927d3baa84ed0463aec9d1546"}, @chsw_timing={0x68, 0x4, {0x3, 0x4d}}, @fast_bss_trans={0x37, 0x93, {0xff, 0x3, "68065e5c8579cd6ab724cdcf17c2970a", "fb885e1774bb725c9894cf96420b29e2ff9c44ed1d3c1d19fec9b33620d70c70", "da64b757d4e7d14945797d90ce9574a2f2d00ce5b8c7ecf79fcbc7ea5cde8acf", [{0x4, 0x18, "4e35a28f5e4388ac4fcaeeaba2065bf739a748ed9b9211fc"}, {0x1, 0x19, "59924bcf0b383189d09d04bfd25ab8a2c454cbe62a3f3fa85a"}, {0x2, 0xa, "57bdb28a4b01e82638f5"}]}}, @chsw_timing={0x68, 0x4, {0x7, 0x7fff}}, @random_vendor={0xdd, 0xd3, "1544aac361f5c4a16bb7db10473bac89e21b53443b87bb54362f11ab6e9dfcbf19e29fa623c104505bfb5eba4dae4944ca9c293254d471367b876d45834156ac78c6915112769252792e146dbaa52c403a54861785948aa8bed34cf2c17ad3f8033dee0ddca7983c0ac8cfd3ca00cf3d6d2e5e0eec5e1326fff7ba5c53ffa11edddd1ca5952f4055b6b14dfaabd15e8e3cb09188daff75e13318787ea38650367abf119ae49271d4e671b6560f25c1cadca8cd8f306ac8f3b609331b99d859fad64ffd7feff42a65d4bd2bade5f1332d5813ea"}, @supported_rates, @cf={0x4, 0x6, {0x18, 0x3, 0xf61, 0x5}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xf6, 0xfa, "5a99e3073d1a5c0daf42713fc7e88823e8e331086eb0c5d11d2f5c7a1f28b7e727ab644d79cbab139e2bde4ccbb6724477800ce9329027ba2b4c8fac6fef20f0f4f393b5c49c6606f456138b08c3865811733f8926ad2e0f4785f6cec652628681f5acf61e34650af2db8b761e00fd40286e64d08118a0be4e89f0872cb43c22a6469e29a70ebb49fa9ebb788c3d7599fa89745afad84d94b3efe262ce72f3cb10b57125d46d76a86c8932c6949b0c1701a76a2c0500e78f413b90251d7fbb9af9fb072d4743094a25a668cdf3bea86ad41d880410d008fdcecff830074663cc34c958e1bca9a5fcf62a6ab0bd26a95ef42b"}], @NL80211_ATTR_IE={0x6f, 0x2a, [@tim={0x5, 0x12, {0x5e, 0xbc, 0x77, "8de44bb85249cd370090d110837642"}}, @mic={0x8c, 0x18, {0x31f, "f73459b1fc34", @long="1f266f1408cb4bf31372cfcf1449d48e"}}, @preq={0x82, 0x36, @ext={{0x0, 0x1}, 0x20, 0x7, 0x5c31, @broadcast, 0x9, @device_a, 0xe9, 0x81, 0x2, [{{}, @broadcast, 0xb0}, {{}, @broadcast, 0x7}]}}, @supported_rates={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x24}]}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "8d9741923811"}, @NL80211_ATTR_FILS_ERP_RRK={0xf8, 0xfc, "e3d5fc52cd94c9e84487fcca2d5bfc6feed60e23ebf9fb751e0f930aa351ce55b9a7614fae845e690d2f19d4f04626c9633cf6842b4f51ad38ee0e1153b189e98afe1e5a3e3fc949ac9375e6a87e24114c1f1c34807fc53be94a0031b6738ce847a717eda49d293530b10f0d338a2b52c4632b549361d27ec1cd929c6d7453209e356782b4f9db55f0886bc55b98aa605956f12b06702a49ecac153d694ee37c549034c9583d6fe09211e3580de3d823eb302403b5bbb8d5ccf62b274def5beaf7b8f98abc4f5377615b968b0cbd5f0acfea499c0e813dadf5e69e10776556cbd862ad8be644fcee992620b9f2cd0cd90ee86e18"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "a1114132fa9c60489f2e34dee0bbdf20"}, @NL80211_ATTR_FILS_ERP_REALM={0x71, 0xfa, "701371ebc71e3d423e5f495fe04bdfd1bc4802effcaf6d9bf37d09b20fdb011b4e426d66af2cc896133001643182b7ef81bbb11e254b59db7f31175c7857f2b67ebdc6c4125c514ebd647ee3764e1c4254667f00b5491e1ca6f4a62ead9ef79905cec04c98c825378c22b2adac"}, @NL80211_ATTR_FILS_ERP_RRK={0x9a, 0xfc, "13cfc6da1b1cca3400953576952ae476e036b3b8c1a316501014eaf42d905782fd17f4a08bf2b5a4d91e68338057e299c799f76715ebc2e08cf02008c10a569318be8704c8e068fbf762393079bd7b97cc2e399fc8c9aa7ef3fbd7ee1473cdd1e326657b126d7ecec5973fc6d7ead3c44f6289940746206567386d7147a05ab25124bfc4ac5b6405b16d8c7b04062da30011df75d9e0"}, @NL80211_ATTR_FILS_ERP_RRK={0x58, 0xfc, "8c8227833b5933de2e24a67d1934eae739fb1c0c08319fb759efdb583b01a8a56e3769f5fe123b7cf1976523a96f45b64a528d494860b7836ad09648eba76d3bc8b3d08a5b8dfaa1d84a8791d9e0e63cf3517752"}, @NL80211_ATTR_FILS_ERP_RRK={0xb3, 0xfc, "b098f7fd02579efa547d45aa02d555516113f9d4761a2a7ebb20e6657dffc8292e1ee58a7ec075b38522b5a97f604b378abece342637134ac5d701c252ddeb8c236c176507b0db97448636f0cf271824f9f66ab843e56cec5feaf5ea3c48d25a7dd5704a82d766e0403090a7832928338e06169e5c3144059fd3410e6f512728abe71da91393560cb32c01be421ca5ea9f2d493f5b58a16ba3106e0afa8bbad782b1f50c588334fd91e9f3538841d0"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}]]}, 0x770}, 0x1, 0x0, 0x0, 0x4044000}, 0x8845) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x30, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0x5, 0x3}}}}}, 0x30}}, 0x0) [ 2164.028418][ T9303] FAULT_INJECTION: forcing a failure. [ 2164.028418][ T9303] name failslab, interval 1, probability 0, space 0, times 0 02:31:17 executing program 3 (fault-call:2 fault-nth:13): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:17 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:17 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0xc}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2164.094264][ T9303] CPU: 1 PID: 9303 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2164.102625][ T9303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2164.113411][ T9303] Call Trace: [ 2164.116718][ T9303] dump_stack+0x107/0x163 [ 2164.121062][ T9303] should_fail.cold+0x5/0xa [ 2164.125586][ T9303] should_failslab+0x5/0x10 [ 2164.130101][ T9303] kmem_cache_alloc_node_trace+0x5a/0x3a0 [ 2164.135828][ T9303] ? io_wq_create+0x5b3/0xa60 [ 2164.140537][ T9303] io_wq_create+0x5b3/0xa60 [ 2164.145061][ T9303] io_uring_setup+0x2a12/0x3770 [ 2164.149934][ T9303] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2164.156221][ T9303] ? io_sq_thread+0x1570/0x1570 [ 2164.162291][ T9303] ? io_uring_poll+0x2a0/0x2a0 [ 2164.167065][ T9303] ? wait_for_completion+0x260/0x260 [ 2164.172388][ T9303] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2164.178628][ T9303] do_syscall_64+0x2d/0x70 [ 2164.183063][ T9303] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2164.187072][ T9313] FAULT_INJECTION: forcing a failure. [ 2164.187072][ T9313] name failslab, interval 1, probability 0, space 0, times 0 [ 2164.188953][ T9303] RIP: 0033:0x45e159 [ 2164.188972][ T9303] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2164.188983][ T9303] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2164.189004][ T9303] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2164.189016][ T9303] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2164.189025][ T9303] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2164.189043][ T9303] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2164.268277][ T9303] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2164.276277][ T9313] CPU: 0 PID: 9313 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2164.284612][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2164.294668][ T9313] Call Trace: [ 2164.297975][ T9313] dump_stack+0x107/0x163 [ 2164.302316][ T9313] should_fail.cold+0x5/0xa [ 2164.306835][ T9313] ? sock_alloc_inode+0x18/0x1c0 [ 2164.311790][ T9313] should_failslab+0x5/0x10 [ 2164.316314][ T9313] kmem_cache_alloc+0x5b/0x440 [ 2164.321915][ T9313] ? sock_free_inode+0x20/0x20 [ 2164.326690][ T9313] sock_alloc_inode+0x18/0x1c0 [ 2164.331876][ T9313] ? sock_free_inode+0x20/0x20 [ 2164.336646][ T9313] alloc_inode+0x61/0x230 [ 2164.340987][ T9313] new_inode_pseudo+0x14/0xe0 [ 2164.346001][ T9313] sock_alloc+0x3c/0x260 [ 2164.350253][ T9313] __sock_create+0xb9/0x780 [ 2164.354775][ T9313] io_uring_setup+0x1cd3/0x3770 [ 2164.359973][ T9313] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2164.368015][ T9313] ? io_sq_thread+0x1570/0x1570 [ 2164.375527][ T9313] ? io_uring_poll+0x2a0/0x2a0 [ 2164.382989][ T9313] ? wait_for_completion+0x260/0x260 [ 2164.388305][ T9313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2164.394212][ T9313] do_syscall_64+0x2d/0x70 [ 2164.399260][ T9313] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2164.405154][ T9313] RIP: 0033:0x45e159 [ 2164.409056][ T9313] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2164.429491][ T9313] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2164.438032][ T9313] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 02:31:18 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x18}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:18 executing program 5 (fault-call:2 fault-nth:11): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x134, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x21}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7bf}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x5, 0x800]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x401}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x387}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xce}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}]}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x8e]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x24}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x53}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x31}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x438}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r2, 0x102, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x34}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x40}}, 0x20000800) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r2, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2164.446618][ T9313] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2164.454598][ T9313] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2164.462574][ T9313] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2164.471266][ T9313] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:18 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0xc}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:18 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2164.603658][ T9343] FAULT_INJECTION: forcing a failure. [ 2164.603658][ T9343] name failslab, interval 1, probability 0, space 0, times 0 [ 2164.666637][ T9343] CPU: 1 PID: 9343 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2164.675005][ T9343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2164.685843][ T9343] Call Trace: [ 2164.690336][ T9343] dump_stack+0x107/0x163 [ 2164.694759][ T9343] should_fail.cold+0x5/0xa [ 2164.699277][ T9343] ? __kthread_create_on_node+0xd2/0x410 [ 2164.705521][ T9343] ? __kthread_create_on_node+0xd2/0x410 [ 2164.712032][ T9343] should_failslab+0x5/0x10 [ 2164.716544][ T9343] kmem_cache_alloc_trace+0x55/0x360 [ 2164.722746][ T9343] ? io_wq_for_each_worker.isra.0+0x370/0x370 [ 2164.729361][ T9343] __kthread_create_on_node+0xd2/0x410 [ 2164.735625][ T9343] ? __kthread_parkme+0x1e0/0x1e0 [ 2164.742030][ T9343] ? io_wq_create+0x5b3/0xa60 [ 2164.746744][ T9343] ? ___slab_alloc+0x280/0x790 [ 2164.751586][ T9343] ? find_held_lock+0x2d/0x110 [ 2164.757741][ T9343] ? io_wq_create+0x5b3/0xa60 [ 2164.762437][ T9343] ? io_wq_for_each_worker.isra.0+0x370/0x370 [ 2164.768879][ T9343] kthread_create_on_node+0xbb/0xf0 [ 2164.775105][ T9343] ? __kthread_create_on_node+0x410/0x410 [ 2164.781682][ T9343] ? lockdep_init_map_waits+0x26a/0x720 [ 2164.787925][ T9343] ? lockdep_init_map_waits+0x26a/0x720 [ 2164.794449][ T9343] ? __raw_spin_lock_init+0x34/0x100 [ 2164.800715][ T9343] io_wq_create+0x76a/0xa60 [ 2164.805326][ T9343] io_uring_setup+0x2a12/0x3770 [ 2164.811535][ T9343] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2164.817696][ T9343] ? io_sq_thread+0x1570/0x1570 [ 2164.822231][ T9313] socket: no more sockets [ 2164.822580][ T9343] ? io_uring_poll+0x2a0/0x2a0 [ 2164.839474][ T9343] ? wait_for_completion+0x260/0x260 [ 2164.845201][ T9343] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2164.851108][ T9343] do_syscall_64+0x2d/0x70 [ 2164.855537][ T9343] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2164.861430][ T9343] RIP: 0033:0x45e159 [ 2164.865333][ T9343] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2164.885184][ T9343] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2164.893715][ T9343] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2164.902163][ T9343] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 02:31:18 executing program 3 (fault-call:2 fault-nth:14): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:18 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x1e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:18 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="030400000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="43d8b6a27a0fdcfc7085004c1200"/29], 0x1c}}, 0x0) [ 2164.910684][ T9343] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2164.919178][ T9343] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2164.927582][ T9343] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:18 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x12}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:18 executing program 5 (fault-call:2 fault-nth:12): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2165.102459][ T9361] FAULT_INJECTION: forcing a failure. [ 2165.102459][ T9361] name failslab, interval 1, probability 0, space 0, times 0 02:31:18 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2165.160527][ T9361] CPU: 1 PID: 9361 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2165.168915][ T9361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2165.178972][ T9361] Call Trace: [ 2165.182276][ T9361] dump_stack+0x107/0x163 [ 2165.186622][ T9361] should_fail.cold+0x5/0xa [ 2165.191143][ T9361] ? security_inode_alloc+0x34/0x160 [ 2165.196546][ T9361] should_failslab+0x5/0x10 [ 2165.201059][ T9361] kmem_cache_alloc+0x5b/0x440 [ 2165.205948][ T9361] security_inode_alloc+0x34/0x160 02:31:18 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2165.211074][ T9361] inode_init_always+0x5a9/0xdb0 [ 2165.216023][ T9361] ? __init_waitqueue_head+0x97/0x110 [ 2165.221408][ T9361] alloc_inode+0x82/0x230 [ 2165.225752][ T9361] new_inode_pseudo+0x14/0xe0 [ 2165.230443][ T9361] sock_alloc+0x3c/0x260 [ 2165.234702][ T9361] __sock_create+0xb9/0x780 [ 2165.239233][ T9361] io_uring_setup+0x1cd3/0x3770 [ 2165.244106][ T9361] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2165.249318][ T9361] ? io_sq_thread+0x1570/0x1570 [ 2165.254183][ T9361] ? io_uring_poll+0x2a0/0x2a0 02:31:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="af91274ab17425450286a20000", @ANYRES16=r1, @ANYBLOB="03840000000000002000670000fe070001003e000000bc00038a", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) [ 2165.258957][ T9361] ? wait_for_completion+0x260/0x260 [ 2165.264280][ T9361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2165.270190][ T9361] do_syscall_64+0x2d/0x70 [ 2165.274625][ T9361] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2165.280524][ T9361] RIP: 0033:0x45e159 [ 2165.284889][ T9361] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:31:19 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) pselect6(0x40, &(0x7f0000000040)={0x1, 0x0, 0xe, 0x0, 0x0, 0x7ff, 0x3, 0x3}, &(0x7f0000000080)={0x7, 0x2, 0x7, 0xffffffffffff7fff, 0x80, 0xb7, 0x2, 0x40}, &(0x7f0000000100)={0x1, 0x6, 0x3, 0x2, 0x10001, 0x9, 0x6, 0x8}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x315]}, 0x8}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8}, @void}}}, 0x24}}, 0x0) epoll_create(0x400) [ 2165.304499][ T9361] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2165.314401][ T9361] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2165.322404][ T9361] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2165.330382][ T9361] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2165.338367][ T9361] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2165.346671][ T9361] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2165.396842][ T9386] FAULT_INJECTION: forcing a failure. [ 2165.396842][ T9386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2165.400482][ T9361] socket: no more sockets [ 2165.427197][ T9386] CPU: 0 PID: 9386 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2165.435548][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2165.445621][ T9386] Call Trace: [ 2165.448920][ T9386] dump_stack+0x107/0x163 [ 2165.453264][ T9386] should_fail.cold+0x5/0xa [ 2165.457782][ T9386] _copy_to_user+0x2c/0x150 [ 2165.462301][ T9386] io_uring_setup+0x1c96/0x3770 [ 2165.467175][ T9386] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2165.472702][ T9386] ? io_sq_thread+0x1570/0x1570 [ 2165.478357][ T9386] ? io_uring_poll+0x2a0/0x2a0 [ 2165.484681][ T9386] ? wait_for_completion+0x260/0x260 [ 2165.492168][ T9386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2165.498090][ T9386] do_syscall_64+0x2d/0x70 [ 2165.504039][ T9386] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2165.511219][ T9386] RIP: 0033:0x45e159 [ 2165.515125][ T9386] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2165.534734][ T9386] RSP: 002b:00007f056e1cdbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 02:31:19 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x18}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:19 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x12}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2165.543164][ T9386] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2165.551365][ T9386] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2165.560082][ T9386] RBP: 00007f056e1cdca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2165.568061][ T9386] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2165.576040][ T9386] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:19 executing program 3 (fault-call:2 fault-nth:15): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x3f, 0x0, 0x0, 0x3, 0x7, 0x5, 0x4], 0x8}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x1104, r1, 0x403, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0xeb, 0xc5, "cb05f6239ba78159c3e6b55039466005cefc9701416c02b002548d942102e23eec1d6e67063deeb7a70aaec3d7ac1e2141b735e5a01e11f49f6a5abec5098f957499e6e5ee877f49eb7ba0ecc59c200a71778fb076d56f7e72917a248d72b9609141aa75bb015860f33062eb4e8c52b62aabeeff7ac8e42637e5ba71fc93f42b630f602ea0af158a1a03c07727edc32a9e2aabb2bc8fb877d07df7bab769ba48ee18eb3a75ba2221faf47ef8530641f2e412c6ced6d05daac054ded40171c7434b3c25e8a2795d1b47e53fe0380db4fb9d636a81ef427e5e9211c761efbc9710705bf906ad581b"}]}, 0x1104}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040043}, 0x0) 02:31:19 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x24}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:19 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x1e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:19 executing program 5 (fault-call:2 fault-nth:13): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2165.754088][ T9427] FAULT_INJECTION: forcing a failure. [ 2165.754088][ T9427] name failslab, interval 1, probability 0, space 0, times 0 [ 2165.775669][ T9427] CPU: 0 PID: 9427 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2165.784015][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2165.794071][ T9427] Call Trace: [ 2165.797367][ T9427] dump_stack+0x107/0x163 [ 2165.801706][ T9427] should_fail.cold+0x5/0xa [ 2165.806223][ T9427] ? sk_prot_alloc+0x5f/0x300 [ 2165.811240][ T9427] should_failslab+0x5/0x10 [ 2165.815750][ T9427] kmem_cache_alloc+0x5b/0x440 [ 2165.820753][ T9427] sk_prot_alloc+0x5f/0x300 [ 2165.825269][ T9427] sk_alloc+0x32/0xbd0 [ 2165.830668][ T9427] unix_create1+0xbb/0x570 [ 2165.835102][ T9427] unix_create+0xf9/0x1e0 [ 2165.840416][ T9427] __sock_create+0x3de/0x780 [ 2165.845027][ T9427] io_uring_setup+0x1cd3/0x3770 [ 2165.849922][ T9427] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2165.855133][ T9427] ? io_sq_thread+0x1570/0x1570 [ 2165.861052][ T9427] ? io_uring_poll+0x2a0/0x2a0 [ 2165.865826][ T9427] ? wait_for_completion+0x260/0x260 [ 2165.872332][ T9427] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2165.878242][ T9427] do_syscall_64+0x2d/0x70 [ 2165.882900][ T9427] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2165.889813][ T9427] RIP: 0033:0x45e159 [ 2165.893722][ T9427] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2165.913343][ T9427] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2165.921769][ T9427] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2165.930660][ T9427] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2165.938640][ T9427] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2165.947606][ T9427] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2165.955585][ T9427] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:19 executing program 3 (fault-call:2 fault-nth:16): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:19 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) syz_io_uring_setup(0x4e56, &(0x7f0000000000)={0x0, 0x29e0, 0x8, 0x3, 0x3c9, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, 0x0, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8}, @void}}}, 0x24}}, 0x0) 02:31:19 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x18}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2166.070050][ T9447] FAULT_INJECTION: forcing a failure. [ 2166.070050][ T9447] name failslab, interval 1, probability 0, space 0, times 0 [ 2166.112648][ T9447] CPU: 0 PID: 9447 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2166.121008][ T9447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2166.131172][ T9447] Call Trace: [ 2166.134475][ T9447] dump_stack+0x107/0x163 [ 2166.138820][ T9447] should_fail.cold+0x5/0xa [ 2166.143341][ T9447] ? sock_alloc_inode+0x18/0x1c0 [ 2166.148288][ T9447] should_failslab+0x5/0x10 [ 2166.153442][ T9447] kmem_cache_alloc+0x5b/0x440 [ 2166.159727][ T9447] ? sock_free_inode+0x20/0x20 [ 2166.164612][ T9447] sock_alloc_inode+0x18/0x1c0 [ 2166.169384][ T9447] ? sock_free_inode+0x20/0x20 [ 2166.174153][ T9447] alloc_inode+0x61/0x230 [ 2166.179608][ T9447] new_inode_pseudo+0x14/0xe0 [ 2166.184299][ T9447] sock_alloc+0x3c/0x260 [ 2166.188552][ T9447] __sock_create+0xb9/0x780 [ 2166.193076][ T9447] io_uring_setup+0x1cd3/0x3770 [ 2166.197948][ T9447] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2166.203173][ T9447] ? io_sq_thread+0x1570/0x1570 [ 2166.208920][ T9447] ? io_uring_poll+0x2a0/0x2a0 [ 2166.215040][ T9447] ? wait_for_completion+0x260/0x260 [ 2166.220962][ T9447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2166.226874][ T9447] do_syscall_64+0x2d/0x70 [ 2166.233483][ T9447] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2166.240193][ T9447] RIP: 0033:0x45e159 [ 2166.244101][ T9447] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2166.263711][ T9447] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2166.273399][ T9447] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2166.281840][ T9447] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2166.290975][ T9447] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2166.299440][ T9447] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 02:31:20 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2166.307859][ T9447] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r1, 0x403, 0x0, 0x8000000, {{}, {@void, @val={0x5}, @void}}}, 0x1c}}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x80020000}, 0x1) [ 2166.359379][ T9447] socket: no more sockets [ 2166.363538][ T9460] FAULT_INJECTION: forcing a failure. [ 2166.363538][ T9460] name failslab, interval 1, probability 0, space 0, times 0 [ 2166.410943][ T9460] CPU: 0 PID: 9460 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2166.419299][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2166.429383][ T9460] Call Trace: [ 2166.434081][ T9460] dump_stack+0x107/0x163 [ 2166.438552][ T9460] should_fail.cold+0x5/0xa [ 2166.443073][ T9460] ? apparmor_sk_alloc_security+0x79/0x100 [ 2166.448893][ T9460] ? apparmor_sk_alloc_security+0x79/0x100 [ 2166.454709][ T9460] should_failslab+0x5/0x10 [ 2166.459221][ T9460] kmem_cache_alloc_trace+0x55/0x360 [ 2166.464520][ T9460] apparmor_sk_alloc_security+0x79/0x100 [ 2166.470163][ T9460] security_sk_alloc+0x50/0xb0 [ 2166.474938][ T9460] sk_prot_alloc+0xae/0x300 [ 2166.480821][ T9460] sk_alloc+0x32/0xbd0 [ 2166.484903][ T9460] unix_create1+0xbb/0x570 [ 2166.490542][ T9460] unix_create+0xf9/0x1e0 [ 2166.494981][ T9460] __sock_create+0x3de/0x780 [ 2166.499592][ T9460] io_uring_setup+0x1cd3/0x3770 [ 2166.504465][ T9460] ? io_link_timeout_fn+0x5c0/0x5c0 02:31:20 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x1c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2166.509673][ T9460] ? io_sq_thread+0x1570/0x1570 [ 2166.514531][ T9460] ? io_uring_poll+0x2a0/0x2a0 [ 2166.519752][ T9460] ? wait_for_completion+0x260/0x260 [ 2166.525645][ T9460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2166.531555][ T9460] do_syscall_64+0x2d/0x70 [ 2166.535986][ T9460] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2166.541887][ T9460] RIP: 0033:0x45e159 [ 2166.545797][ T9460] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2166.565406][ T9460] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2166.573830][ T9460] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2166.581806][ T9460] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2166.589784][ T9460] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2166.597768][ T9460] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 02:31:20 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x24}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:20 executing program 5 (fault-call:2 fault-nth:14): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2166.605746][ T9460] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:20 executing program 3 (fault-call:2 fault-nth:17): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2166.687312][ T9497] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 02:31:20 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:20 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x30}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2166.737659][ T9513] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 2166.749315][ T9499] FAULT_INJECTION: forcing a failure. [ 2166.749315][ T9499] name failslab, interval 1, probability 0, space 0, times 0 [ 2166.773747][ T9499] CPU: 1 PID: 9499 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2166.782188][ T9499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2166.792254][ T9499] Call Trace: [ 2166.795556][ T9499] dump_stack+0x107/0x163 [ 2166.799896][ T9499] should_fail.cold+0x5/0xa [ 2166.804418][ T9499] ? security_inode_alloc+0x34/0x160 [ 2166.809719][ T9499] should_failslab+0x5/0x10 [ 2166.815419][ T9499] kmem_cache_alloc+0x5b/0x440 [ 2166.821503][ T9499] security_inode_alloc+0x34/0x160 [ 2166.827792][ T9499] inode_init_always+0x5a9/0xdb0 [ 2166.833760][ T9499] ? __init_waitqueue_head+0x97/0x110 [ 2166.840089][ T9499] alloc_inode+0x82/0x230 [ 2166.844463][ T9499] new_inode_pseudo+0x14/0xe0 [ 2166.850463][ T9499] sock_alloc+0x3c/0x260 [ 2166.854752][ T9499] __sock_create+0xb9/0x780 [ 2166.859278][ T9499] io_uring_setup+0x1cd3/0x3770 [ 2166.865244][ T9499] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2166.871267][ T9499] ? io_sq_thread+0x1570/0x1570 [ 2166.877582][ T9499] ? io_uring_poll+0x2a0/0x2a0 [ 2166.883509][ T9499] ? wait_for_completion+0x260/0x260 [ 2166.889819][ T9499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2166.895969][ T9499] do_syscall_64+0x2d/0x70 [ 2166.901446][ T9499] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2166.907849][ T9499] RIP: 0033:0x45e159 [ 2166.912028][ T9499] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:31:20 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x1d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2166.933011][ T9499] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2166.941525][ T9499] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2166.949943][ T9499] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2166.958400][ T9499] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2166.966806][ T9499] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2166.975194][ T9499] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r1, 0x403, 0xffffffff, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0xc5) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0xa8, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x100b, 0x3}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x1000}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x100a, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x2}, @fda={0x66646185, 0x2, 0x0, 0x30}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x9a, 0x0, &(0x7f0000000340)="8af78264a2a7bd036fffb23c0c369cb09c57e0e9b2b8a2b3d28837cdc6e2a8dd855fadcf3c99d57e24bd2f6f649ff6784944215edcbfcf5831ff7465658944b8016bf8339d73500c740608725ab1c94427ede4f8b80678e4e1834d7cf58eb37b1528d8358285159106a35e2fc6867e9732f355fb12a4cdc4086ece255e14b8df4a2438e9fac01a271eda44eb23755eb337cd368177374db7c4c9"}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000440)={0x6, 0x1, {0xffffffffffffffff}, {0x0}, 0x8, 0x9}) setfsuid(r2) [ 2167.034995][ T9517] FAULT_INJECTION: forcing a failure. [ 2167.034995][ T9517] name failslab, interval 1, probability 0, space 0, times 0 [ 2167.056669][ T9517] CPU: 1 PID: 9517 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2167.065068][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2167.075178][ T9517] Call Trace: [ 2167.078530][ T9517] dump_stack+0x107/0x163 [ 2167.083400][ T9517] should_fail.cold+0x5/0xa [ 2167.088919][ T9517] ? __d_alloc+0x2a/0x950 [ 2167.094558][ T9517] should_failslab+0x5/0x10 [ 2167.099562][ T9517] kmem_cache_alloc+0x5b/0x440 [ 2167.105645][ T9517] __d_alloc+0x2a/0x950 [ 2167.110254][ T9517] d_alloc_pseudo+0x19/0x70 [ 2167.114928][ T9517] alloc_file_pseudo+0xc6/0x250 [ 2167.119789][ T9517] ? rwlock_bug.part.0+0x90/0x90 [ 2167.124827][ T9517] ? alloc_file+0x5a0/0x5a0 [ 2167.129345][ T9517] ? do_raw_spin_unlock+0x171/0x230 [ 2167.135853][ T9517] ? _raw_spin_unlock+0x24/0x40 [ 2167.140714][ T9517] ? __alloc_fd+0x28d/0x600 [ 2167.145851][ T9517] anon_inode_getfile+0xc8/0x1f0 [ 2167.151647][ T9517] io_uring_setup+0x27a1/0x3770 [ 2167.156521][ T9517] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2167.161731][ T9517] ? io_sq_thread+0x1570/0x1570 [ 2167.166591][ T9517] ? io_uring_poll+0x2a0/0x2a0 [ 2167.173112][ T9517] ? wait_for_completion+0x260/0x260 [ 2167.178431][ T9517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2167.184975][ T9517] do_syscall_64+0x2d/0x70 [ 2167.189647][ T9517] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2167.196382][ T9517] RIP: 0033:0x45e159 [ 2167.200965][ T9517] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2167.221461][ T9517] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2167.230777][ T9517] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2167.239970][ T9517] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2167.249139][ T9517] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2167.258329][ T9517] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2167.267466][ T9517] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) r2 = getpid() ptrace$cont(0x7, r2, 0x7fffffff, 0x7ff) [ 2167.323130][ T9499] socket: no more sockets 02:31:21 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x1e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:21 executing program 3 (fault-call:2 fault-nth:18): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:21 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x30}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:21 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x36}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:21 executing program 5 (fault-call:2 fault-nth:15): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2167.553366][ T9558] FAULT_INJECTION: forcing a failure. [ 2167.553366][ T9558] name failslab, interval 1, probability 0, space 0, times 0 [ 2167.588416][ T9558] CPU: 1 PID: 9558 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2167.596767][ T9558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2167.606823][ T9558] Call Trace: [ 2167.610140][ T9558] dump_stack+0x107/0x163 [ 2167.614483][ T9558] should_fail.cold+0x5/0xa [ 2167.619466][ T9558] ? __alloc_file+0x21/0x350 [ 2167.624331][ T9558] should_failslab+0x5/0x10 [ 2167.628845][ T9558] kmem_cache_alloc+0x5b/0x440 [ 2167.633627][ T9558] __alloc_file+0x21/0x350 [ 2167.638055][ T9558] alloc_empty_file+0x6d/0x170 [ 2167.642831][ T9558] alloc_file+0x5e/0x5a0 [ 2167.647470][ T9558] alloc_file_pseudo+0x165/0x250 [ 2167.652421][ T9558] ? alloc_file+0x5a0/0x5a0 [ 2167.657370][ T9558] ? _raw_spin_unlock+0x24/0x40 [ 2167.663531][ T9558] ? __alloc_fd+0x28d/0x600 [ 2167.668327][ T9558] anon_inode_getfile+0xc8/0x1f0 [ 2167.674373][ T9558] io_uring_setup+0x27a1/0x3770 [ 2167.680676][ T9558] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2167.686755][ T9558] ? io_sq_thread+0x1570/0x1570 [ 2167.693095][ T9558] ? io_uring_poll+0x2a0/0x2a0 [ 2167.699106][ T9558] ? wait_for_completion+0x260/0x260 [ 2167.705469][ T9558] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2167.711686][ T9558] do_syscall_64+0x2d/0x70 [ 2167.716116][ T9558] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2167.723011][ T9558] RIP: 0033:0x45e159 [ 2167.727269][ T9558] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:31:21 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x36}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:21 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x24}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000037c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003780)={&(0x7f0000003700)={0x80, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xeb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x92b}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x4011}, 0x8d1) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48000) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r5, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r6}, @void}}}, 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r8, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r9}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0xe}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x40}}, 0x80) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000200)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000006bc0)={0x333c, r1, 0xc64e6a16c67c400f, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x58}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x24, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x18, 0x4, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_OFFSET={0x8}]}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1e84, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x208, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xffc5}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @broadcast}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xec, 0xa, "c24402343fbc21f95b0e8177125c15e269409574dc6901acc511adbb0fc759e66851932fe783aa4b4210bb9a5edc702617af0d7b344737a77161b3f6328b799432246f89451806d4d98b508b283159a707eaf0ebe330065b5a1546acbb87e982fdcf7db2eb7d17c31c7a776503336fd694d5996e2696d47f6c49cf19965ba02076ade1d8136cedfbb3156e9c41f93ad08958199105116b10e7e5883b241fe5ba576bc00344673385c8c153931bf1534c74118a55f7f09652795f48173ee69ed7be1f43d993c58228a506e6e9dbb775eebf54d314351b4b2d27ad982fd593055250c98f2bda296f34"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x61, 0x8, {0x8, 0x2, "f3ceb4d9cf614b7a557f73d5a664f1a9d28f9aa4a6c8d626d6e9b06d14ca514cb2455fb6820aee92d674014931bcd48741ccd6553588ac3c7577a0338f2371424840b632994adc51dcd2bb62953eb80372291d0899"}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x83, 0x8, {0x80, 0x1, "f655a49b25b62caee230b6301d02beb4b78d6d9a84ffa0925190e731a197c82557bac463f1fb813eff4d634a9e7088b72c1bef0d0ad5c8761038611be40ffc845b9d32999124fa3aeeb019e351cf847a66dc6fd1b04337887eb71eef6d21a0545b9667f28678bd58d483f83c533e56249d9e173637b8cd"}}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @empty}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x4, 0x9, 0x5}}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xdc, 0x4, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1ff}, @NL80211_PKTPAT_PATTERN={0x8e, 0x2, "1438e3bd8afd511d5c8e92d71a93384a3ab2e960d73b146f113d8b33288ebf67d324c7923ef4613dbc1e63ab121f8f634d31cb20703e1f58fa3eceb40ad1dae3bbba14cf28046264336a9fd34098995108b9e53e035b0a7884ed89526a8705664ba18a4b3162f52faf7ac47ee75302d692cf79d53a3374b2526383342bea7aa008fd7246840bbcff237e"}, @NL80211_PKTPAT_MASK={0x33, 0x1, "4551bc293e35f4705f87ac8cf6daa17c15e61d1eb6743d66153035eec5f2ce80c1ea73fbcfe10ce79806588e053d87"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfff}]}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1b94, 0x4, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x31, 0x2, "dbd8d137e49fd79c620228d1f609528eed04239482621b1299fc1760362d528f8278b258aaaf3f9e4c8c3859fc"}]}, {0x274, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x2c, 0x1, "21cdedcba840b3a3580445694a4c08528d1e4fe705ab0563c10741131f387bdf88f6fffff00272fc"}, @NL80211_PKTPAT_PATTERN={0x3e, 0x2, "c6ecdfcb82df20143ef3f9285c8a480a8944af8a1facbda1b79e070afb40c5a92a480766d20b31f049bbc1fa8edb1c28de894f970775128cfe39"}, @NL80211_PKTPAT_MASK={0xf7, 0x1, "5ff33665b641bc1e7beaa64c9d3fd511fda5dd3646b576b9ad28c5996589998fa189c5d4c6341fd8a83869e756dd51281c90ce2bf716d44fd477fc1bccbda2884af26e12137a5b2c7179d40df0c11cf1f73909991179e2b5f5e731543b8aab06490e755babde9593910c94b2367504d176c4d2d651b242b448d8d60854e0936533a6539a18b43550a34ff3e4dd0e194b3028fcf6200f30964fdba626cfb6579c3701f641d8accd8d5820dee841f039979052c3b0dedbe06f546a2cc07cdebbe3e054d85bf001a77bd0a1e2a2067bdc8ac788232134e82af7b628f4faa7bdfcb20c1358e76edc37bbf3d5fb959cd25a58e27483"}, @NL80211_PKTPAT_MASK={0x8, 0x1, "b9cdfe86"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_MASK={0xf9, 0x1, "69c7e4392082c2416730d6b2fa3ed3e4e41a514aa6ebe161974b16dd7a1c125b2f3938c93129f2917fb904377be320bd5770a847d92d82dc6fb543483644032776df4ba5f68b20843e8be9b58ea023cc389124ec076c9841060c58feed72f50bb03ef31f2f477853c718d41dcb87016c1c5ec36bde72f2d9b8f47069b7f2afee073e42a68634b3683d0e1383175c8be8f93c6c1457d28c3a28758b67a73fecea15e2c8f490491c9c9c755059cb2585fbb6ba78d4d96f2cb5c5d9b0d1e9c2e35831e411611efef3eed4725037d5ce5f235b545e258cc965d5af598de4c848b7590c3a0dbd45da2de145b3161dea5e4bd941ffe71f63"}]}, {0x1284, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xca, 0x2, "c10e11a6fb7f89703d5b734f9c2603fada1ae2871e000c628dc34651ebf0ed37fb416f635cd4ea9b6c804409b89519231c5770ffe1f47a3059648beaf48136a41b4b328cd126627c19e4e5c8d0466f8f685f9de03f04eac1863b8047073078477069786635eaad49cf88bc8211ac16378f713ad783c0b80d4c19fb37acc604f1e8c2f9b0eb886f401dd1cfc8c03d2eefcbbbc5e1cbf078a3c67bb86940f4903198d8ba595e0c90dc264ba258415d8f714025a08dcf3d9ebf78477b0ae4ead7b937322cbe494b"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80}, @NL80211_PKTPAT_MASK={0x98, 0x1, "c4528e0688a8a0da25c14400696eaa56b4c65cf5bf892433a3eedd29c392aaf447d16ebaf181a4750a3c341a31397eafb66e2072ad81c53352fc863deccd89dbd461cb2e5d1bca6cc8e59de196bf12e6882f83c1ab7149a119e231a3ff6b1568e74383da5d7bc4ab6a14b9b929cb58c469feeaa8976e57f93a03a2a10d3637b86dbff0787e98cfbe8265f92f43d700c2c62b28b6"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_PATTERN={0x10f, 0x2, "5531a08fe7f91e89ce743602a5a5dd34bfcbfaf94254bda7a7cc7c31f3546e4415397e1a958fc7580db3dbed0b5929a187eee9d16daaf2b2dad7ade9dafa613a266bf51b6f8a539b32ff5fc1a1063aa275690038140d4bfb629eb14e6fd24ad98b65426ee68e09cb8b3d63d47028476beeb173a56e78e96fe9c61c7219cc74270500000000000000aecc040963d74f478d3513a78e90cf620a9a9233897189fbf7ff0100000000000090e2edbc063b1542c8512d5867f5b320924b7af146316e31c9074a7de612873e491a06966a9de02b1de248c99cce381c27e82418700826edb185fb65dea17b6df434b0b95477b53bfa37a3b32562020ca54b76a08eb8a3dcfd815b6e45a4862e3034"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xd960}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xb2}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_PATTERN={0x5a, 0x2, "812831f60ada6b5de31e6ed8402a7b0a3c239be3aa08ef79ca44c7cef374e79ca38eaf54530f09e0f0b5666dcf35274fba1c2959d36499db03e80f8dc2071bfc366f72e3b20a4b82de27f8c24a6697e3a370a9aa0faa"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6ec2}, @NL80211_PKTPAT_MASK={0x7, 0x1, 'nO+'}, @NL80211_PKTPAT_PATTERN={0xa, 0x2, "ef9c980774e5"}, @NL80211_PKTPAT_MASK={0xcc, 0x1, "fc43dfc2c026f36af34f623f601aa830902d3d3e52501b6239b1bb529a198419c76dce3a732e8313ceb3758a847cf155960c6f475bafdd7bcb84a7767fcd76b053033a58991285717022fa54d308450af9ba51e21712acb196f6c01a299592cefab362e2b340228c41e1f3447cec1eb22aece0a2fc0f2ed05847bd2859bfec4bc3abf94e0079383d7b27db876abab82f4b2b441da10b4a2ddfe6663ac4f7b9047d2802c715184a2e4ddc5d31838d519d887cb515f4d0d8affbb94d0db9f5ece3a41cfd0c2766e40d"}]}, {0x208, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_MASK={0xbb, 0x1, "77e8e480d0f74ebdb8116c93817110a3d6de600c2aaf7add08dad75d468bba4fbc99d903fd090223afd4de30b04606264ec2000221e2d206973e76125d665e9c4f6da009eccff252d310a95abd8cdf59f0d85ff4a539c184bde2ecca27c7eab44ac4e8989aead8631f2465b8419c88ee32291480de955187f0658aa6a27b13a191534eb3071ccaf29c5781bddb2e219571d63239f359c86cb432d05577248379d909a24b051eb9f57401987d604bc5ba70f58e0124550f"}, @NL80211_PKTPAT_MASK={0xac, 0x1, "1965fb0d4f5fdc67c22b6bda88c27bf7d0e50157dd73a3c855cfddbe248ce768a30067d10ba4e287396195bea4d084a7b3892ceeb86a0b7c972b586ebae4be14736bd8de63a1f25c0dff71136eb578c96f6f4131412dab4ec36c36595ba01ce7d5811983c694c779f9e5a22cc2f701b619ef532bc081e890bf101e20e6445014625152a92de9f8c46b4869e93bae20bd6c11ca4fdde82a13954e85a4d003541252afe1ccf1a8e5cd"}, @NL80211_PKTPAT_PATTERN={0x82, 0x2, "84d19cacd6a472c79061962db825e04a592334ebea2d9344bcb16fc38fc542b5a508dc2dcff32b6cd3ccce8a982c0f8604d1aae19620f653238f896537b310e1add042a82bef58d718fc5922f44d0e131eefd16dbf0f43fed40b1e0f61595f39121c3e0f251637e4f2aa62758e4d8dc8e50738b1d946d4c99155f241b07f"}]}, {0x284, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xce, 0x2, "912d4ae45ae3bf1e09c223da64b45972223ac7c270760fc52febf459d112a25a5af7da3602392886ffa7174bcc72b4cf7e49d73f214b4e2c79cbe28ece273dbc80aa1d16e2ae5329dc0eb8fa130ec843a6bd04d748dbad04aee181e3d1d52db1b6cdba747afbc52173870e2488b3335db82261530697106385c522f686c02cfdd39448d95c8c620ac50f8cec68707d75c49964badd8d0410fba02a5b3aac2d95659f84755bcd3c55130c66787d3c943559a2bf215da9d6694391b003d16e7feaf85d500e2319a0da0974"}, @NL80211_PKTPAT_PATTERN={0xf5, 0x2, "7103d4bc4118b3c754ba77bf9fe923c4dd695da5ffc6e305dc8e30e0a07965eaeb0e745412e5cf4ba41328cd23af780dbdea1e5ff6e25011abdf3a3ac4c73177d0b0e740595b7b3c7f5487dd4b5a435a97784a3e0a97dc7b6d4851ef6720727fc11c2346108bfba37dcf8d19a2aae55798d419b4fe45d735941ccb4a60dacc1f43b90cb3d4877fd8d18f97e4e9cc79d4c03de95c4502bf6b18214c59c13476200dc3cd2c87e9b03eebe3f74f55cae0dfac7c8e97ac62382c4b5a463c7a4d54f477cd79ea061f8463c1deffe01728f1650584aa82dac3d254245ef17c0468952559d0e8ed5e967c5c12801d31c75a25be48"}, @NL80211_PKTPAT_PATTERN={0xb0, 0x2, "2a7b964192d0c31765b8f4b00299d19724aca620919a65b7695308308ce121630cea89a661ec322ddf764c2ded6b427b890eb8bc00d3cbe538b6ba990d81216bd41c4ef5beee19029c9d4650551206c4fde2ee8766291d9e4a7329d2db8e686f9a2b50c147ec8f581766b588ab976ad0ef97ac5877069e05642a2492b1949e53e1abb5816660777477ad8b16ca33b97992ed550789d98ca45e4d8e9e679694a6889af46afc99423e9c0f87ff"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x69, 0x2, "b06fb0e5032fc4c209995f2983bbb0e2fb8eb1f82ee91563b709d49f95e35c995a4860727ad913eee06c98230a5bf35d87c78036a541c35231194cf3144563e924b7f0e320a4a5e4fbb8dee1a941f7ddd69132f09d8cc753fcc0eaf901ce0c8ffcdc5d3438"}]}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x180, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x170, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0x15b, 0x2a, [@perr={0x84, 0x89, {0x20, 0x9, [@ext={{}, @broadcast, 0x8, @device_b, 0x3}, @ext={{}, @broadcast, 0x2, @broadcast, 0x1}, @not_ext={{}, @broadcast, 0x5, "", 0xa}, @not_ext={{}, @device_b, 0xfd8d, "", 0x25}, @not_ext={{}, @broadcast, 0xfffff801, "", 0x14}, @not_ext={{}, @device_a, 0x6, "", 0x24}, @not_ext={{}, @broadcast, 0x7f, "", 0x2a}, @ext={{}, @device_a, 0xe6, @broadcast, 0x3c}, @not_ext={{}, @broadcast, 0x10001}]}}, @random={0x7, 0x82, "0a5ec2df67b42cd50c67a0f51df3e0a182ff03f7c952270fc041cd4c9962a3d3da70f96fc4da645a6f41ee5a1503dd8c37d90714a7f038b873ecd52b13609e3b3418a9b1f37ee100ad3a9dd1eb3a56bc9e92e949a440216467e7201e3703a90fb2a6f8956227492dcbbba12563820645a760228a44d2bdf0aaf0ef4506d78c73932f"}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x9d, 0x81}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @link_id={0x65, 0x12, {@random="82ae13f88eb9", @device_b, @broadcast}}, @cf={0x4, 0x6, {0xc, 0x8, 0x6c13, 0x6}}, @random={0xde, 0x17, "d8c3afe8a25fa850059a30c0f34b2479e6bad4d2f01a51"}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0xc, 0x1}, {0x30, 0x1}, {0x25}, {0x1, 0x1}]}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x9}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xff}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x12e8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x240, 0x12, 0x0, 0x1, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x140, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8b, 0x2, "04625251b29ed498b1bfdfc3156f10cd268fb0f23ef44cf872e4bcf8ffa3c083f4049e90f6019f850099cf99e475c7e72677d9e66e1c30708a0f6f0a35b6acee25842691a638d327a6ef57cd1380d9a756b9ef3f95be4708a19f5dda099c5aab25d5f01daf7ff0e0105cd4a2f4181d7ae056eac6f445f2eaffdf4a4ad689a63e12eb09d2aac9bb"}, @NL80211_BAND_60GHZ={0x3e, 0x2, "58461fd016de1b0b95be83c03d6c966c0b3b1554b49e628d63dd76d7276e3d4961ad52fc96b518790df3fc0159ad6d8afff47777166aa779fbc2"}, @NL80211_BAND_5GHZ={0x3c, 0x1, "ba1dad6a51f3273bce2d3102fc2efffc2e29962a566ff1560668e01b3fa6e2755609e4d249576270ad95bdf0cb1caad8e5ba9d20c7c77f3a"}, @NL80211_BAND_2GHZ={0x32, 0x0, "d7d612ee81238d584b0a9301ba9a4cd24dcb95411df0fa71f7a2538a44862c3a846a0cd596d1fabb48384df3a03e"}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd0, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3f}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xfffffff7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x431ebdba}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x53d1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb2251e4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffc}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xcf}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}]}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x10a4, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x1004, 0xa, "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"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x16, 0xb, "5700a17337f097b16a0f221e76672a7335d6"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x6}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x53, 0xb, "da829ac3f9c0b0806d47c90078b56d19685113a745d1cd82dafe7fe4ddd17af01c6d3c043a055d5d88b7115cb35a9b720ca24fa8b4dd6b9bd1979344f124fe849af7a37fd0f87f92f3c83cca2eeadd"}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x9}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x0, 0x2e1b, 0x7}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x5}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}]}]}]}, 0x333c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004010) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x400, 0x70bd29, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x3406a000}, 0x4002045) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x20000, 0x0) [ 2167.746878][ T9558] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2167.755371][ T9558] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2167.764097][ T9558] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2167.772566][ T9558] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2167.781134][ T9558] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2167.789692][ T9558] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2167.852212][ T9577] FAULT_INJECTION: forcing a failure. [ 2167.852212][ T9577] name failslab, interval 1, probability 0, space 0, times 0 02:31:21 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x3c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2167.906271][ T9577] CPU: 0 PID: 9577 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2167.914636][ T9577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2167.924696][ T9577] Call Trace: [ 2167.928001][ T9577] dump_stack+0x107/0x163 [ 2167.932345][ T9577] should_fail.cold+0x5/0xa [ 2167.936860][ T9577] ? sk_prot_alloc+0x5f/0x300 [ 2167.941549][ T9577] should_failslab+0x5/0x10 [ 2167.946059][ T9577] kmem_cache_alloc+0x5b/0x440 [ 2167.950837][ T9577] sk_prot_alloc+0x5f/0x300 [ 2167.955355][ T9577] sk_alloc+0x32/0xbd0 [ 2167.960444][ T9577] unix_create1+0xbb/0x570 [ 2167.964879][ T9577] unix_create+0xf9/0x1e0 [ 2167.970165][ T9577] __sock_create+0x3de/0x780 [ 2167.974774][ T9577] io_uring_setup+0x1cd3/0x3770 [ 2167.979644][ T9577] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2167.984853][ T9577] ? io_sq_thread+0x1570/0x1570 [ 2167.991165][ T9577] ? io_uring_poll+0x2a0/0x2a0 [ 2167.995940][ T9577] ? __schedule+0x89b/0x2130 [ 2168.000559][ T9577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2168.006476][ T9577] do_syscall_64+0x2d/0x70 [ 2168.012210][ T9577] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2168.019093][ T9577] RIP: 0033:0x45e159 [ 2168.023003][ T9577] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2168.042611][ T9577] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 02:31:21 executing program 0: r0 = socket(0x23, 0x80000, 0x0) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x800}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x74, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x20008814) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r4, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2168.051708][ T9577] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2168.061098][ T9577] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2168.069087][ T9577] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2168.078427][ T9577] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2168.086408][ T9577] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:21 executing program 3 (fault-call:2 fault-nth:19): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:21 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x3c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:22 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:22 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x2a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x280003, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000040)) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x403, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 2168.297115][ T9620] FAULT_INJECTION: forcing a failure. [ 2168.297115][ T9620] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.339021][ T9620] CPU: 1 PID: 9620 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2168.347374][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2168.357436][ T9620] Call Trace: [ 2168.360740][ T9620] dump_stack+0x107/0x163 [ 2168.365086][ T9620] should_fail.cold+0x5/0xa [ 2168.369826][ T9620] ? security_file_alloc+0x34/0x170 [ 2168.375039][ T9620] should_failslab+0x5/0x10 [ 2168.379632][ T9620] kmem_cache_alloc+0x5b/0x440 [ 2168.384409][ T9620] security_file_alloc+0x34/0x170 [ 2168.389446][ T9620] __alloc_file+0xd8/0x350 [ 2168.393881][ T9620] alloc_empty_file+0x6d/0x170 [ 2168.398661][ T9620] alloc_file+0x5e/0x5a0 [ 2168.403307][ T9620] alloc_file_pseudo+0x165/0x250 [ 2168.409698][ T9620] ? alloc_file+0x5a0/0x5a0 [ 2168.414323][ T9620] ? _raw_spin_unlock+0x24/0x40 [ 2168.419183][ T9620] ? __alloc_fd+0x28d/0x600 [ 2168.423702][ T9620] anon_inode_getfile+0xc8/0x1f0 [ 2168.428769][ T9620] io_uring_setup+0x27a1/0x3770 [ 2168.434076][ T9620] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2168.439476][ T9620] ? io_sq_thread+0x1570/0x1570 [ 2168.444335][ T9620] ? io_uring_poll+0x2a0/0x2a0 [ 2168.449109][ T9620] ? wait_for_completion+0x260/0x260 [ 2168.454428][ T9620] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2168.460964][ T9620] do_syscall_64+0x2d/0x70 [ 2168.465651][ T9620] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2168.472527][ T9620] RIP: 0033:0x45e159 [ 2168.477208][ T9620] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2168.496823][ T9620] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2168.505972][ T9620] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2168.515267][ T9620] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2168.523246][ T9620] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 02:31:22 executing program 5 (fault-call:2 fault-nth:16): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2168.532262][ T9620] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2168.540966][ T9620] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:22 executing program 3 (fault-call:2 fault-nth:20): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x8c, r4, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x62}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4010}, 0x24000000) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0304000000000000000067200000080001003e00200008000300", @ANYRES32=0x0, @ANYBLOB="2b9bd9733c33f4ef21847fadb63b2f16c12ab838ce9204bfcc5563638c7847bce40c4763ee836001c2083728f9bd5a918d9b0187b1c0a1c9be8183700083c50ebed6f1"], 0x24}}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x118, &(0x7f0000000100), 0x0, 0x4) r6 = syz_io_uring_complete(r5) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) 02:31:22 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x60}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2168.668221][ T9641] FAULT_INJECTION: forcing a failure. [ 2168.668221][ T9641] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.731904][ T9641] CPU: 1 PID: 9641 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2168.740277][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2168.750435][ T9641] Call Trace: [ 2168.753744][ T9641] dump_stack+0x107/0x163 [ 2168.758095][ T9641] should_fail.cold+0x5/0xa [ 2168.762686][ T9641] ? apparmor_sk_alloc_security+0x79/0x100 [ 2168.769295][ T9641] ? apparmor_sk_alloc_security+0x79/0x100 [ 2168.776070][ T9641] should_failslab+0x5/0x10 [ 2168.780590][ T9641] kmem_cache_alloc_trace+0x55/0x360 [ 2168.786951][ T9641] apparmor_sk_alloc_security+0x79/0x100 [ 2168.793875][ T9641] security_sk_alloc+0x50/0xb0 [ 2168.798655][ T9641] sk_prot_alloc+0xae/0x300 [ 2168.803176][ T9641] sk_alloc+0x32/0xbd0 [ 2168.807591][ T9641] unix_create1+0xbb/0x570 [ 2168.812144][ T9641] unix_create+0xf9/0x1e0 [ 2168.816483][ T9641] __sock_create+0x3de/0x780 [ 2168.822462][ T9641] io_uring_setup+0x1cd3/0x3770 [ 2168.828712][ T9641] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2168.834790][ T9641] ? io_sq_thread+0x1570/0x1570 [ 2168.841089][ T9641] ? io_uring_poll+0x2a0/0x2a0 [ 2168.846697][ T9641] ? wait_for_completion+0x260/0x260 [ 2168.852844][ T9641] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2168.859516][ T9641] do_syscall_64+0x2d/0x70 [ 2168.865396][ T9641] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2168.871899][ T9641] RIP: 0033:0x45e159 [ 2168.876166][ T9641] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2168.895776][ T9641] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2168.905848][ T9641] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2168.914333][ T9641] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2168.922830][ T9641] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 02:31:22 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x42}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:22 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x30}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2168.931317][ T9641] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2168.939824][ T9641] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:22 executing program 5 (fault-call:2 fault-nth:17): r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2169.000283][ T9660] FAULT_INJECTION: forcing a failure. [ 2169.000283][ T9660] name failslab, interval 1, probability 0, space 0, times 0 [ 2169.032937][ T9660] CPU: 0 PID: 9660 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2169.041662][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2169.052939][ T9660] Call Trace: [ 2169.056249][ T9660] dump_stack+0x107/0x163 [ 2169.060592][ T9660] should_fail.cold+0x5/0xa [ 2169.065984][ T9660] ? io_uring_alloc_task_context+0x43/0x2a0 [ 2169.071891][ T9660] ? io_uring_alloc_task_context+0x43/0x2a0 [ 2169.078548][ T9660] should_failslab+0x5/0x10 [ 2169.083062][ T9660] kmem_cache_alloc_trace+0x55/0x360 [ 2169.088595][ T9660] io_uring_alloc_task_context+0x43/0x2a0 [ 2169.094325][ T9660] io_uring_add_task_file+0x1a8/0x230 [ 2169.100155][ T9660] io_uring_setup+0x2815/0x3770 [ 2169.106483][ T9660] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2169.112727][ T9660] ? io_sq_thread+0x1570/0x1570 [ 2169.117586][ T9660] ? io_uring_poll+0x2a0/0x2a0 [ 2169.122356][ T9660] ? wait_for_completion+0x260/0x260 [ 2169.127673][ T9660] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2169.133581][ T9660] do_syscall_64+0x2d/0x70 [ 2169.138009][ T9660] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2169.143905][ T9660] RIP: 0033:0x45e159 [ 2169.148235][ T9660] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2169.167987][ T9660] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2169.176425][ T9660] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2169.184398][ T9660] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2169.192859][ T9660] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2169.201689][ T9660] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2169.210499][ T9660] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 02:31:23 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x300}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2169.292346][ T9691] FAULT_INJECTION: forcing a failure. [ 2169.292346][ T9691] name failslab, interval 1, probability 0, space 0, times 0 [ 2169.312270][ T9691] CPU: 1 PID: 9691 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 2169.320620][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2169.330788][ T9691] Call Trace: [ 2169.334098][ T9691] dump_stack+0x107/0x163 [ 2169.338441][ T9691] should_fail.cold+0x5/0xa [ 2169.342958][ T9691] ? __d_alloc+0x2a/0x950 [ 2169.347304][ T9691] should_failslab+0x5/0x10 [ 2169.351818][ T9691] kmem_cache_alloc+0x5b/0x440 [ 2169.356600][ T9691] __d_alloc+0x2a/0x950 [ 2169.360777][ T9691] d_alloc_pseudo+0x19/0x70 [ 2169.365297][ T9691] alloc_file_pseudo+0xc6/0x250 [ 2169.370159][ T9691] ? rwlock_bug.part.0+0x90/0x90 [ 2169.375113][ T9691] ? alloc_file+0x5a0/0x5a0 [ 2169.379635][ T9691] ? do_raw_spin_unlock+0x171/0x230 [ 2169.384851][ T9691] ? _raw_spin_unlock+0x24/0x40 [ 2169.389714][ T9691] ? __alloc_fd+0x28d/0x600 [ 2169.394232][ T9691] anon_inode_getfile+0xc8/0x1f0 [ 2169.398145][ T9660] ------------[ cut here ]------------ [ 2169.399185][ T9691] io_uring_setup+0x27a1/0x3770 [ 2169.399217][ T9691] ? io_link_timeout_fn+0x5c0/0x5c0 [ 2169.399235][ T9691] ? io_sq_thread+0x1570/0x1570 [ 2169.405118][ T9660] percpu_ref_kill_and_confirm called more than once on io_ring_ctx_ref_free! [ 2169.409956][ T9691] ? io_uring_poll+0x2a0/0x2a0 [ 2169.415492][ T9660] WARNING: CPU: 0 PID: 9660 at lib/percpu-refcount.c:382 percpu_ref_kill_and_confirm+0x126/0x180 [ 2169.419959][ T9691] ? wait_for_completion+0x260/0x260 [ 2169.428685][ T9660] Modules linked in: [ 2169.433449][ T9691] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2169.444001][ T9660] [ 2169.444025][ T9660] CPU: 0 PID: 9660 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2169.449295][ T9691] do_syscall_64+0x2d/0x70 [ 2169.453160][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2169.459036][ T9691] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2169.461347][ T9660] RIP: 0010:percpu_ref_kill_and_confirm+0x126/0x180 [ 2169.469659][ T9691] RIP: 0033:0x45e159 [ 2169.474052][ T9660] Code: 5d 08 48 8d 7b 08 48 89 fa 48 c1 ea 03 80 3c 02 00 75 5d 48 8b 53 08 48 c7 c6 00 4b 9d 89 48 c7 c7 60 4a 9d 89 e8 86 67 f6 04 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 [ 2169.484084][ T9691] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:31:23 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x36}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 02:31:23 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x4, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0304000000000000000067000000080001003e00000008000300", @ANYRES32=0x0, @ANYBLOB="2645a69ef878b382bb57377531922cb6835d3c833df725a2e729b43301f50b6fc9"], 0x24}}, 0x0) 02:31:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x13, &(0x7f0000000400)={0x0, 0x60}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) [ 2169.489940][ T9660] RSP: 0018:ffffc9000260fe10 EFLAGS: 00010086 [ 2169.496518][ T9691] RSP: 002b:00007f056e1eebe8 EFLAGS: 00000206 [ 2169.500408][ T9660] RAX: 0000000000000000 RBX: ffff888013bce300 RCX: 0000000000000000 [ 2169.520000][ T9691] ORIG_RAX: 00000000000001a9 [ 2169.539579][ T9660] RDX: 0000000000040000 RSI: ffffffff8158c865 RDI: fffff520004c1fb4 [ 2169.539595][ T9660] RBP: ffff88802c6bc000 R08: 0000000000000001 R09: ffff8880b9e2011b [ 2169.545636][ T9691] RAX: ffffffffffffffda RBX: 0000000020000400 RCX: 000000000045e159 [ 2169.551700][ T9660] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000246 [ 2169.559643][ T9691] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2169.559659][ T9691] RBP: 00007f056e1eeca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2169.564312][ T9660] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888031728178 [ 2169.572252][ T9691] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2169.572269][ T9691] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2169.580225][ T9660] FS: 00007f49c4089700(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 2169.644884][ T9660] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2169.651499][ T9660] CR2: 00000000004fff30 CR3: 0000000011786000 CR4: 00000000001506f0 [ 2169.659452][ T9660] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2169.667420][ T9660] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2169.675369][ T9660] Call Trace: [ 2169.678647][ T9660] io_ring_ctx_wait_and_kill+0x2b/0x450 [ 2169.684177][ T9660] io_uring_release+0x3e/0x50 [ 2169.688835][ T9660] __fput+0x285/0x920 [ 2169.692798][ T9660] ? io_ring_ctx_wait_and_kill+0x450/0x450 [ 2169.698603][ T9660] task_work_run+0xdd/0x190 [ 2169.703090][ T9660] exit_to_user_mode_prepare+0x17e/0x1a0 [ 2169.708702][ T9660] syscall_exit_to_user_mode+0x38/0x260 [ 2169.714230][ T9660] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2169.720100][ T9660] RIP: 0033:0x45e159 [ 2169.723982][ T9660] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2169.743649][ T9660] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2169.752040][ T9660] RAX: fffffffffffffff4 RBX: 0000000020000400 RCX: 000000000045e159 [ 2169.763316][ T9660] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2169.771266][ T9660] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2169.779233][ T9660] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2169.787183][ T9660] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2169.796296][ T9660] Kernel panic - not syncing: panic_on_warn set ... [ 2169.802878][ T9660] CPU: 0 PID: 9660 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2169.811191][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2169.821221][ T9660] Call Trace: [ 2169.824489][ T9660] dump_stack+0x107/0x163 [ 2169.828802][ T9660] panic+0x306/0x73d [ 2169.832695][ T9660] ? __warn_printk+0xf3/0xf3 [ 2169.837287][ T9660] ? __warn.cold+0x1a/0x44 [ 2169.841697][ T9660] ? percpu_ref_kill_and_confirm+0x126/0x180 [ 2169.847653][ T9660] __warn.cold+0x35/0x44 [ 2169.851877][ T9660] ? percpu_ref_kill_and_confirm+0x126/0x180 [ 2169.857855][ T9660] report_bug+0x1bd/0x210 [ 2169.862167][ T9660] handle_bug+0x3c/0x60 [ 2169.866301][ T9660] exc_invalid_op+0x14/0x40 [ 2169.870781][ T9660] asm_exc_invalid_op+0x12/0x20 [ 2169.875612][ T9660] RIP: 0010:percpu_ref_kill_and_confirm+0x126/0x180 [ 2169.882191][ T9660] Code: 5d 08 48 8d 7b 08 48 89 fa 48 c1 ea 03 80 3c 02 00 75 5d 48 8b 53 08 48 c7 c6 00 4b 9d 89 48 c7 c7 60 4a 9d 89 e8 86 67 f6 04 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 [ 2169.901771][ T9660] RSP: 0018:ffffc9000260fe10 EFLAGS: 00010086 [ 2169.907816][ T9660] RAX: 0000000000000000 RBX: ffff888013bce300 RCX: 0000000000000000 [ 2169.915784][ T9660] RDX: 0000000000040000 RSI: ffffffff8158c865 RDI: fffff520004c1fb4 [ 2169.923734][ T9660] RBP: ffff88802c6bc000 R08: 0000000000000001 R09: ffff8880b9e2011b [ 2169.931684][ T9660] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000246 [ 2169.939636][ T9660] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888031728178 [ 2169.947610][ T9660] ? vprintk_func+0x95/0x1e0 [ 2169.952185][ T9660] io_ring_ctx_wait_and_kill+0x2b/0x450 [ 2169.958318][ T9660] io_uring_release+0x3e/0x50 [ 2169.962973][ T9660] __fput+0x285/0x920 [ 2169.966937][ T9660] ? io_ring_ctx_wait_and_kill+0x450/0x450 [ 2169.972726][ T9660] task_work_run+0xdd/0x190 [ 2169.977212][ T9660] exit_to_user_mode_prepare+0x17e/0x1a0 [ 2169.982826][ T9660] syscall_exit_to_user_mode+0x38/0x260 [ 2169.988349][ T9660] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2169.994234][ T9660] RIP: 0033:0x45e159 [ 2169.998107][ T9660] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2170.022201][ T9660] RSP: 002b:00007f49c4088be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2170.030593][ T9660] RAX: fffffffffffffff4 RBX: 0000000020000400 RCX: 000000000045e159 [ 2170.038560][ T9660] RDX: 0000000020ffa000 RSI: 0000000020000400 RDI: 0000000000000013 [ 2170.046534][ T9660] RBP: 00007f49c4088ca0 R08: 00000000200004c0 R09: 00000000200004c0 [ 2170.054483][ T9660] R10: 0000000020000480 R11: 0000000000000206 R12: 0000000020ffa000 [ 2170.062695][ T9660] R13: 0000000020ffc000 R14: 00000000200004c0 R15: 0000000020000480 [ 2171.162492][ T9660] Shutting down cpus with NMI [ 2171.167988][ T9660] Kernel Offset: disabled [ 2171.172593][ T9660] Rebooting in 86400 seconds..