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"})
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfffffffa})
sync_file_range(r2, 0x3, 0xabc8, 0x1)
r8 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000180), 0x0)
ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f00000001c0)=0xffffffff)
r9 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r9, 0xc018480d, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfffffffa})
sendmsg$netlink(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)={0x10, 0x28, 0x1}, 0x10}], 0x1}, 0x0)

[  563.135906][  T120] usb 2-1: USB disconnect, device number 46
10:01:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x7b8, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x758, 0x8, 0x0, 0x1, [{0x204, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1c0, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1f, @mcast1, 0x9}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x100, @rand_addr=' \x01\x00', 0x3}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x101, @local, 0x8fa}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xfffff001, @private2={0xfc, 0x2, '\x00', 0x1}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xff}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}]}, {0x37c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x378, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5}}]}]}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c14ae84f00a98396fc958ef54c58a01a1ee30adb9bd83715c777aa7516c227f"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7fff, @private0, 0x101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @mcast1, 0x8}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @mcast2, 0x9}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x7b8}, 0x1, 0x0, 0x0, 0x80}, 0x58000)
r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000040)={<r3=>0x0, 0x1000, 0x9f6})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000440)={0x2, 0x6, {0x3, @usage=0x5, 0x0, 0x3, 0x8000000000000001, 0x6, 0x3f, 0x0, 0x2, @struct={0x4}, 0x9170, 0x2, [0x5, 0x10001, 0xb135, 0x0, 0x5, 0x875c]}, {0x1, @usage=0x10001, r3, 0x1, 0x400, 0x1, 0x9, 0xae, 0x408, @struct={0x8d2, 0x10001}, 0x6, 0x80000, [0xfffffffffffff599, 0x7b, 0x4, 0x1, 0x81, 0xffffffffffffff81]}, {0x1, @struct={0x8, 0xfff}, <r4=>0x0, 0x7, 0x7, 0x5, 0x4, 0x8001, 0x0, @struct={0xff, 0x6}, 0x101, 0x4, [0x8, 0x6, 0xc3c, 0x1ff, 0x4, 0x1]}, {0x6, 0x8ecd, 0x1c0}})
setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x10, &(0x7f0000000840)=0x6, 0x4)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000880)=<r5=>0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000008c0)={{}, r5, 0xc, @unused=[0x7, 0x8, 0x8, 0x100000000], @devid=r4})
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
r7 = accept4$inet6(0xffffffffffffffff, &(0x7f00000018c0), &(0x7f0000001900)=0x1c, 0x100800)
ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000001940)={{r7}, r5, 0x14, @unused=[0x3, 0x6, 0x1000, 0x1ff], @name="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"})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r5, 0x2, @inherit={0x90, &(0x7f0000000200)={0x1, 0x9, 0x4, 0x1, {0x39, 0x7, 0xc926, 0x5, 0x100000001}, [0x2, 0x7, 0x0, 0x1000, 0x1000, 0x1f, 0x1ff, 0x1ca, 0x4]}}, @name="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"})
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfffffffa})
sync_file_range(r2, 0x3, 0xabc8, 0x1)
r8 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000180), 0x0)
ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f00000001c0)=0xffffffff)
r9 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r9, 0xc018480d, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfffffffa})
sendmsg$netlink(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)={0x10, 0x28, 0x1}, 0x10}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x7b8, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x758, 0x8, 0x0, 0x1, [{0x204, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1c0, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1f, @mcast1, 0x9}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x100, @rand_addr=' \x01\x00', 0x3}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x101, @local, 0x8fa}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xfffff001, @private2={0xfc, 0x2, '\x00', 0x1}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xff}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}]}, {0x37c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x378, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5}}]}]}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c14ae84f00a98396fc958ef54c58a01a1ee30adb9bd83715c777aa7516c227f"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7fff, @private0, 0x101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @mcast1, 0x8}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @mcast2, 0x9}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x7b8}, 0x1, 0x0, 0x0, 0x80}, 0x58000) (async)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000040)={0x0, 0x1000, 0x9f6}) (async)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000440)={0x2, 0x6, {0x3, @usage=0x5, 0x0, 0x3, 0x8000000000000001, 0x6, 0x3f, 0x0, 0x2, @struct={0x4}, 0x9170, 0x2, [0x5, 0x10001, 0xb135, 0x0, 0x5, 0x875c]}, {0x1, @usage=0x10001, r3, 0x1, 0x400, 0x1, 0x9, 0xae, 0x408, @struct={0x8d2, 0x10001}, 0x6, 0x80000, [0xfffffffffffff599, 0x7b, 0x4, 0x1, 0x81, 0xffffffffffffff81]}, {0x1, @struct={0x8, 0xfff}, 0x0, 0x7, 0x7, 0x5, 0x4, 0x8001, 0x0, @struct={0xff, 0x6}, 0x101, 0x4, [0x8, 0x6, 0xc3c, 0x1ff, 0x4, 0x1]}, {0x6, 0x8ecd, 0x1c0}}) (async)
setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x10, &(0x7f0000000840)=0x6, 0x4) (async)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000880)) (async)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000008c0)={{}, r5, 0xc, @unused=[0x7, 0x8, 0x8, 0x100000000], @devid=r4}) (async)
socket$inet_dccp(0x2, 0x6, 0x0) (async)
accept4$inet6(0xffffffffffffffff, &(0x7f00000018c0), &(0x7f0000001900)=0x1c, 0x100800) (async)
ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000001940)={{r7}, r5, 0x14, @unused=[0x3, 0x6, 0x1000, 0x1ff], @name="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"}) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r5, 0x2, @inherit={0x90, &(0x7f0000000200)={0x1, 0x9, 0x4, 0x1, {0x39, 0x7, 0xc926, 0x5, 0x100000001}, [0x2, 0x7, 0x0, 0x1000, 0x1000, 0x1f, 0x1ff, 0x1ca, 0x4]}}, @name="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"}) (async)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfffffffa}) (async)
sync_file_range(r2, 0x3, 0xabc8, 0x1) (async)
accept4$phonet_pipe(r1, 0x0, &(0x7f0000000180), 0x0) (async)
ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f00000001c0)=0xffffffff) (async)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$HIDIOCGUCODE(r9, 0xc018480d, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfffffffa}) (async)
sendmsg$netlink(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)={0x10, 0x28, 0x1}, 0x10}], 0x1}, 0x0) (async)

10:01:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  563.434632][ T3141] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  563.593315][ T3638] usb 3-1: new full-speed USB device number 56 using dummy_hcd
10:01:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x7b8, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x758, 0x8, 0x0, 0x1, [{0x204, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1c0, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1f, @mcast1, 0x9}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x100, @rand_addr=' \x01\x00', 0x3}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x101, @local, 0x8fa}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xfffff001, @private2={0xfc, 0x2, '\x00', 0x1}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xff}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}]}, {0x37c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x378, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5}}]}]}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c14ae84f00a98396fc958ef54c58a01a1ee30adb9bd83715c777aa7516c227f"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7fff, @private0, 0x101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @mcast1, 0x8}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @mcast2, 0x9}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x7b8}, 0x1, 0x0, 0x0, 0x80}, 0x58000) (async)
r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000040)={<r3=>0x0, 0x1000, 0x9f6})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000440)={0x2, 0x6, {0x3, @usage=0x5, 0x0, 0x3, 0x8000000000000001, 0x6, 0x3f, 0x0, 0x2, @struct={0x4}, 0x9170, 0x2, [0x5, 0x10001, 0xb135, 0x0, 0x5, 0x875c]}, {0x1, @usage=0x10001, r3, 0x1, 0x400, 0x1, 0x9, 0xae, 0x408, @struct={0x8d2, 0x10001}, 0x6, 0x80000, [0xfffffffffffff599, 0x7b, 0x4, 0x1, 0x81, 0xffffffffffffff81]}, {0x1, @struct={0x8, 0xfff}, <r4=>0x0, 0x7, 0x7, 0x5, 0x4, 0x8001, 0x0, @struct={0xff, 0x6}, 0x101, 0x4, [0x8, 0x6, 0xc3c, 0x1ff, 0x4, 0x1]}, {0x6, 0x8ecd, 0x1c0}}) (async)
setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x10, &(0x7f0000000840)=0x6, 0x4) (async)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000880)=<r5=>0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000008c0)={{}, r5, 0xc, @unused=[0x7, 0x8, 0x8, 0x100000000], @devid=r4}) (async)
r6 = socket$inet_dccp(0x2, 0x6, 0x0) (async)
r7 = accept4$inet6(0xffffffffffffffff, &(0x7f00000018c0), &(0x7f0000001900)=0x1c, 0x100800)
ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000001940)={{r7}, r5, 0x14, @unused=[0x3, 0x6, 0x1000, 0x1ff], @name="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"}) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r5, 0x2, @inherit={0x90, &(0x7f0000000200)={0x1, 0x9, 0x4, 0x1, {0x39, 0x7, 0xc926, 0x5, 0x100000001}, [0x2, 0x7, 0x0, 0x1000, 0x1000, 0x1f, 0x1ff, 0x1ca, 0x4]}}, @name="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"}) (async)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfffffffa})
sync_file_range(r2, 0x3, 0xabc8, 0x1) (async)
r8 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000180), 0x0)
ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f00000001c0)=0xffffffff) (async)
r9 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r9, 0xc018480d, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfffffffa}) (async)
sendmsg$netlink(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)={0x10, 0x28, 0x1}, 0x10}], 0x1}, 0x0)

10:01:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:17 executing program 1:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/batman_adv', 0x48c0, 0x0)
sendto$inet6(r0, &(0x7f0000000040)="ca2139899b37524f86ec74200f361cbf649c8c3feb54bc66a9c760dbd2", 0x1d, 0xc000, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @mcast1, 0x2}, 0x1c)
syz_usb_connect(0x0, 0x46, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x58, 0x83, 0x77, 0x10, 0x421, 0x1d0, 0x5a46, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm_detail={0x5, 0x24, 0x13, 0x0, "bf"}]}]}}]}}]}}, 0x0)

[  563.692708][ T3141] usb 6-1: Using ep0 maxpacket: 8
10:01:17 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

[  563.813447][ T3141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  563.824635][ T3141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  563.835065][ T3141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024
[  563.846526][ T3141] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
10:01:18 executing program 3:
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa}, 0x2b, &(0x7f0000000080)={0x5, 0xf, 0xffffffffffffff13, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ext_cap={0x7}, @wireless={0xb}]}, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000340)=@string={0x2}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}]})
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xaf, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0xfff, 0x9, 0x1, {0x22, 0x298}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x0, 0x8c}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x0, 0x5, 0x1, 0xff, 0x3}, 0x24, &(0x7f0000000140)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3f, "ee0000000004011e000000002600"}, @wireless={0xb, 0x10, 0x1, 0x0, 0xd0, 0x7, 0x9, 0x2e91, 0x2}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44f}}, {0xa9, &(0x7f00000001c0)=@string={0x6e, 0x3, "ff147029c420f599651a2c97c37930ceb0361d84b82b82e534d1f6a17bc3d48da728150fe989b76e30f9dc7178df8b423328a9dd7b0480ae995318a911ea7cb923420ba1ee2a3f4b49159c53207c4995e29f5bede8e107989be21aec072f8c49e65389374d6a4c1cf3bc00ac"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x860}}]})

[  563.976616][ T3638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 10
[  563.987936][ T3638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  563.997990][ T3638] usb 3-1: New USB device found, idVendor=1bc7, idProduct=110a, bcdDevice=ca.76
[  564.007272][ T3638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.079033][ T3638] usb 3-1: config 0 descriptor??
[  564.083829][ T3141] usb 6-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86
[  564.093379][ T3141] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.101531][ T3141] usb 6-1: Product: syz
[  564.106137][ T3141] usb 6-1: Manufacturer: syz
[  564.110859][ T3141] usb 6-1: SerialNumber: syz
[  564.149138][ T3638] option 3-1:0.0: GSM modem (1-port) converter detected
[  564.156151][ T3141] usb 6-1: config 0 descriptor??
[  564.206197][  T120] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  564.233518][ T3546] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  564.353706][ T9918] UDC core: couldn't find an available UDC or it's busy: -16
[  564.361225][ T9918] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  564.400316][ T9918] UDC core: couldn't find an available UDC or it's busy: -16
[  564.408229][ T9918] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  564.412941][   T19] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  564.429907][ T9918] UDC core: couldn't find an available UDC or it's busy: -16
[  564.438106][ T9918] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  564.450767][ T3546] usb 1-1: device descriptor read/64, error 18
[  564.453006][  T120] usb 2-1: Using ep0 maxpacket: 16
[  564.493658][ T9918] UDC core: couldn't find an available UDC or it's busy: -16
[  564.501522][ T9918] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
10:01:18 executing program 2:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x14, 0x6, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
unshare(0x40020400)

10:01:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  564.642419][ T3141] usb 3-1: USB disconnect, device number 56
[  564.652315][ T3141] option 3-1:0.0: device disconnected
[  564.703989][   T19] usb 4-1: Using ep0 maxpacket: 16
[  564.742780][ T3546] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  564.744727][  T120] usb 2-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=5a.46
[  564.759931][  T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.768418][  T120] usb 2-1: Product: syz
[  564.772821][  T120] usb 2-1: Manufacturer: syz
[  564.777550][  T120] usb 2-1: SerialNumber: syz
[  564.877144][   T19] usb 4-1: unable to get BOS descriptor set
[  564.897193][  T120] usb 2-1: config 0 descriptor??
[  564.932975][ T3546] usb 1-1: device descriptor read/64, error 18
[  564.963140][   T19] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  564.982132][  T120] usb 2-1: bad CDC descriptors
10:01:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  565.020095][  T120] usb 2-1: bad CDC descriptors
[  565.063937][ T3546] usb usb1-port1: attempt power cycle
[  565.153384][  T120] usb 2-1: USB disconnect, device number 47
[  565.293784][   T19] usb 4-1: string descriptor 0 read error: -22
[  565.300527][   T19] usb 4-1: New USB device found, idVendor=056a, idProduct=00c2, bcdDevice= 0.40
[  565.310041][   T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.411205][   T19] usbhid 4-1:1.0: couldn't find an input interrupt endpoint
[  565.483081][ T3546] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  565.608703][ T9941] UDC core: couldn't find an available UDC or it's busy: -16
[  565.616618][ T9941] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  565.627791][   T19] usb 4-1: USB disconnect, device number 54
[  565.673700][ T3546] usb 1-1: device descriptor read/8, error -61
[  565.952940][ T3546] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  566.133194][ T3546] usb 1-1: device descriptor read/8, error -61
[  566.256225][ T3546] usb usb1-port1: unable to enumerate USB device
10:01:20 executing program 5:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
syz_open_dev$midi(&(0x7f0000000340), 0x3ff, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
dup2(0xffffffffffffffff, r0) (async)
syz_open_dev$midi(&(0x7f0000000340), 0x3ff, 0x0) (async)

10:01:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:20 executing program 2:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x14, 0x6, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
unshare(0x40020400)

10:01:20 executing program 1:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/batman_adv', 0x48c0, 0x0)
sendto$inet6(r0, &(0x7f0000000040)="ca2139899b37524f86ec74200f361cbf649c8c3feb54bc66a9c760dbd2", 0x1d, 0xc000, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @mcast1, 0x2}, 0x1c)
syz_usb_connect(0x0, 0x46, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x58, 0x83, 0x77, 0x10, 0x421, 0x1d0, 0x5a46, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm_detail={0x5, 0x24, 0x13, 0x0, "bf"}]}]}}]}}]}}, 0x0)

10:01:20 executing program 3:
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa}, 0x2b, &(0x7f0000000080)={0x5, 0xf, 0xffffffffffffff13, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ext_cap={0x7}, @wireless={0xb}]}, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000340)=@string={0x2}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}]})
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xaf, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0xfff, 0x9, 0x1, {0x22, 0x298}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x0, 0x8c}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x0, 0x5, 0x1, 0xff, 0x3}, 0x24, &(0x7f0000000140)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3f, "ee0000000004011e000000002600"}, @wireless={0xb, 0x10, 0x1, 0x0, 0xd0, 0x7, 0x9, 0x2e91, 0x2}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44f}}, {0xa9, &(0x7f00000001c0)=@string={0x6e, 0x3, "ff147029c420f599651a2c97c37930ceb0361d84b82b82e534d1f6a17bc3d48da728150fe989b76e30f9dc7178df8b423328a9dd7b0480ae995318a911ea7cb923420ba1ee2a3f4b49159c53207c4995e29f5bede8e107989be21aec072f8c49e65389374d6a4c1cf3bc00ac"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x860}}]})
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa}, 0x2b, &(0x7f0000000080)={0x5, 0xf, 0xffffffffffffff13, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ext_cap={0x7}, @wireless={0xb}]}, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000340)=@string={0x2}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}]}) (async)
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xaf, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0xfff, 0x9, 0x1, {0x22, 0x298}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x0, 0x8c}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x0, 0x5, 0x1, 0xff, 0x3}, 0x24, &(0x7f0000000140)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3f, "ee0000000004011e000000002600"}, @wireless={0xb, 0x10, 0x1, 0x0, 0xd0, 0x7, 0x9, 0x2e91, 0x2}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44f}}, {0xa9, &(0x7f00000001c0)=@string={0x6e, 0x3, "ff147029c420f599651a2c97c37930ceb0361d84b82b82e534d1f6a17bc3d48da728150fe989b76e30f9dc7178df8b423328a9dd7b0480ae995318a911ea7cb923420ba1ee2a3f4b49159c53207c4995e29f5bede8e107989be21aec072f8c49e65389374d6a4c1cf3bc00ac"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x860}}]}) (async)

[  566.487692][ T3546] usb 6-1: USB disconnect, device number 69
10:01:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  566.833384][   T19] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  566.874039][ T3638] usb 2-1: new high-speed USB device number 48 using dummy_hcd
10:01:21 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:01:21 executing program 2:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x14, 0x6, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
unshare(0x40020400)

[  567.063336][ T3546] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  567.073057][   T19] usb 4-1: Using ep0 maxpacket: 16
[  567.133023][ T3638] usb 2-1: Using ep0 maxpacket: 16
10:01:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  567.193408][   T19] usb 4-1: unable to get BOS descriptor set
[  567.309379][   T19] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  567.334256][ T3546] usb 6-1: Using ep0 maxpacket: 8
[  567.455498][ T3638] usb 2-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=5a.46
[  567.465126][ T3638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.473441][ T3638] usb 2-1: Product: syz
[  567.477743][ T3638] usb 2-1: Manufacturer: syz
[  567.482648][ T3638] usb 2-1: SerialNumber: syz
[  567.490116][ T3546] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  567.502323][ T3546] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  567.512408][ T3546] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024
[  567.523849][ T3546] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  567.563064][   T19] usb 4-1: string descriptor 0 read error: -22
[  567.569685][   T19] usb 4-1: New USB device found, idVendor=056a, idProduct=00c2, bcdDevice= 0.40
[  567.579241][   T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.592807][  T120] usb 1-1: new high-speed USB device number 52 using dummy_hcd
10:01:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  567.695097][ T3638] usb 2-1: config 0 descriptor??
[  567.761211][   T19] usbhid 4-1:1.0: couldn't find an input interrupt endpoint
[  567.782106][ T3638] usb 2-1: bad CDC descriptors
[  567.789952][ T3638] usb 2-1: bad CDC descriptors
[  567.792966][  T120] usb 1-1: device descriptor read/64, error 18
10:01:21 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@delneigh={0x1c}, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x40, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x2}]}}]}, 0x40}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, r6, 0x8cbdc66f99df3bb, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x7, 0x10}, {0xfff2, 0x3}, {0x1, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf202}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x800)

[  567.815325][ T3546] usb 6-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86
[  567.824833][ T3546] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.833130][ T3546] usb 6-1: Product: syz
[  567.837417][ T3546] usb 6-1: Manufacturer: syz
[  567.842134][ T3546] usb 6-1: SerialNumber: syz
[  567.946271][ T9115] usb 2-1: USB disconnect, device number 48
[  567.956223][ T9963] UDC core: couldn't find an available UDC or it's busy: -16
[  567.963986][ T9963] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  567.967630][ T3546] usb 6-1: config 0 descriptor??
[  568.015624][ T9963] UDC core: couldn't find an available UDC or it's busy: -16
[  568.023256][ T9963] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  568.025742][ T9980] UDC core: couldn't find an available UDC or it's busy: -16
[  568.038963][ T9980] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  568.068811][  T120] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  568.127093][ T3638] usb 4-1: USB disconnect, device number 55
[  568.139357][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  568.228087][ T9966] UDC core: couldn't find an available UDC or it's busy: -16
[  568.236094][ T9966] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
10:01:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  568.282877][  T120] usb 1-1: device descriptor read/64, error 18
[  568.403966][  T120] usb usb1-port1: attempt power cycle
[  568.813227][  T120] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  568.983770][  T120] usb 1-1: device descriptor read/8, error -61
[  569.252995][  T120] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  569.423202][  T120] usb 1-1: device descriptor read/8, error -61
[  569.544956][  T120] usb usb1-port1: unable to enumerate USB device
10:01:23 executing program 5:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) (async)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(0xffffffffffffffff, r0) (async)
syz_open_dev$midi(&(0x7f0000000340), 0x3ff, 0x0)

10:01:23 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@delneigh={0x1c}, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x40, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x2}]}}]}, 0x40}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r5=>0x0}) (async)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, r6, 0x8cbdc66f99df3bb, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x7, 0x10}, {0xfff2, 0x3}, {0x1, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf202}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x800)

10:01:23 executing program 1:
syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0xff, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xa, 0x24, 0x7, 0x0, 0x0, 0x0, "c55e8d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, "d32ae36e1a7f"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x49, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

10:01:23 executing program 3:
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa}, 0x2b, &(0x7f0000000080)={0x5, 0xf, 0xffffffffffffff13, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ext_cap={0x7}, @wireless={0xb}]}, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000340)=@string={0x2}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}]}) (async)
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xaf, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0xfff, 0x9, 0x1, {0x22, 0x298}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x0, 0x8c}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x0, 0x5, 0x1, 0xff, 0x3}, 0x24, &(0x7f0000000140)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3f, "ee0000000004011e000000002600"}, @wireless={0xb, 0x10, 0x1, 0x0, 0xd0, 0x7, 0x9, 0x2e91, 0x2}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44f}}, {0xa9, &(0x7f00000001c0)=@string={0x6e, 0x3, "ff147029c420f599651a2c97c37930ceb0361d84b82b82e534d1f6a17bc3d48da728150fe989b76e30f9dc7178df8b423328a9dd7b0480ae995318a911ea7cb923420ba1ee2a3f4b49159c53207c4995e29f5bede8e107989be21aec072f8c49e65389374d6a4c1cf3bc00ac"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x860}}]})

10:01:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  569.776721][  T120] usb 6-1: USB disconnect, device number 70
[  569.925933][ T9999] UDC core: couldn't find an available UDC or it's busy: -16
[  569.933679][ T9999] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  569.950836][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
10:01:24 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@delneigh={0x1c}, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x40, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x2}]}}]}, 0x40}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, r6, 0x8cbdc66f99df3bb, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x7, 0x10}, {0xfff2, 0x3}, {0x1, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf202}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x800)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@delneigh={0x1c}, 0x1c}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x40, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x2}]}}]}, 0x40}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, r6, 0x8cbdc66f99df3bb, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x7, 0x10}, {0xfff2, 0x3}, {0x1, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf202}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) (async)

[  570.183835][ T1021] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  570.192099][ T3638] usb 2-1: new high-speed USB device number 49 using dummy_hcd
10:01:24 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:01:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  570.345888][  T120] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  570.414033][T10008] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  570.453050][ T1021] usb 4-1: Using ep0 maxpacket: 16
[  570.458634][ T3638] usb 2-1: Using ep0 maxpacket: 32
[  570.594069][  T120] usb 6-1: Using ep0 maxpacket: 8
[  570.604032][ T3638] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  570.613564][ T3638] usb 2-1: config 1 has no interface number 1
[  570.619897][ T3638] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  570.631577][ T1021] usb 4-1: unable to get BOS descriptor set
[  570.659578][T10014] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  570.713531][  T120] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  570.724794][  T120] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  570.734300][ T1021] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  570.734983][  T120] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024
[  570.758976][  T120] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
10:01:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  570.844535][   T19] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  570.986656][ T3638] usb 2-1: string descriptor 0 read error: -22
[  570.993291][ T3638] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  571.002679][ T3638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.004286][  T120] usb 6-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86
[  571.020125][  T120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.028547][  T120] usb 6-1: Product: syz
[  571.033035][  T120] usb 6-1: Manufacturer: syz
[  571.037770][  T120] usb 6-1: SerialNumber: syz
[  571.044209][   T19] usb 1-1: device descriptor read/64, error 18
[  571.057065][  T120] usb 6-1: config 0 descriptor??
[  571.064113][ T1021] usb 4-1: string descriptor 0 read error: -22
[  571.070629][ T1021] usb 4-1: New USB device found, idVendor=056a, idProduct=00c2, bcdDevice= 0.40
[  571.081624][ T1021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
10:01:25 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
splice(r2, 0x0, r1, 0x0, 0xfbfffffffffffff9, 0x0)
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000080)='syzkaller0\x00')
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2={0xff, 0x3}}})

[  571.213511][ T3638] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[  571.221110][ T3638] usb 2-1: 2:1 : invalid channels 0
[  571.249180][ T1021] usbhid 4-1:1.0: couldn't find an input interrupt endpoint
[  571.299515][  T120] usb 6-1: USB disconnect, device number 71
[  571.313406][   T19] usb 1-1: new high-speed USB device number 57 using dummy_hcd
10:01:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  571.461333][ T3546] usb 4-1: USB disconnect, device number 56
[  571.507291][   T19] usb 1-1: device descriptor read/64, error 18
[  571.553455][ T3559] udevd[3559]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  571.609152][ T3638] usb 2-1: USB disconnect, device number 49
[  571.638121][   T19] usb usb1-port1: attempt power cycle
[  571.866364][ T3750] udevd[3750]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
10:01:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:26 executing program 1:
syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0xff, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xa, 0x24, 0x7, 0x0, 0x0, 0x0, "c55e8d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, "d32ae36e1a7f"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x49, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

[  572.053414][   T19] usb 1-1: new high-speed USB device number 58 using dummy_hcd
10:01:26 executing program 3:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000380)={0x0, 0x3f, 0xfffffffe})
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = syz_clone3(0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2})
r3 = getpid()
read$FUSE(r0, &(0x7f0000001800)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000004c0)=<r5=>0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$packet(0x11, 0x3, 0x300)
splice(r7, 0x0, r6, 0x0, 0xfbfffffffffffff9, 0x0)
syz_clone3(&(0x7f0000000540)={0x80000000, &(0x7f0000000280), &(0x7f00000003c0)=<r8=>0x0, &(0x7f0000000400), {0x36}, &(0x7f0000000440)=""/105, 0x69, &(0x7f0000000800)=""/4096, &(0x7f0000000500)=[r1, 0x0, r3, r4, r5, r2, r2], 0x7, {r6}}, 0x58)
syz_clone3(&(0x7f0000000300)={0x40000400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x30}, &(0x7f00000000c0)=""/233, 0xe9, &(0x7f00000001c0)=""/71, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8], 0x7}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="8600000000728e4ffdac7dd6de388a1bbaae452a48aac63a6c2a70f64721faafc34796fcecf8e0426b158d3113090000f10000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$packet(0x11, 0x3, 0x300)
splice(r10, 0x0, r9, 0x0, 0xfbfffffffffffff9, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f0000000240)={0x0, 0x1, 0x7, 0x3, 0x6})

10:01:26 executing program 2:
r0 = socket(0x10, 0x2, 0x0) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 32)
r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 32)
splice(r2, 0x0, r1, 0x0, 0xfbfffffffffffff9, 0x0) (async)
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000080)='syzkaller0\x00') (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2={0xff, 0x3}}})

[  572.233464][   T19] usb 1-1: device descriptor read/8, error -61
10:01:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  572.503161][   T19] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  572.543056][  T120] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  572.673000][   T19] usb 1-1: device descriptor read/8, error -61
[  572.783035][  T120] usb 2-1: Using ep0 maxpacket: 32
[  572.793502][   T19] usb usb1-port1: unable to enumerate USB device
[  572.903429][  T120] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  572.912661][  T120] usb 2-1: config 1 has no interface number 1
[  572.918891][  T120] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
10:01:27 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
splice(r2, 0x0, r1, 0x0, 0xfbfffffffffffff9, 0x0)
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000080)='syzkaller0\x00')
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2={0xff, 0x3}}})

10:01:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  573.327460][  T120] usb 2-1: string descriptor 0 read error: -22
[  573.336258][  T120] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  573.345963][  T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.422993][  T120] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[  573.430557][  T120] usb 2-1: 2:1 : invalid channels 0
10:01:27 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:01:27 executing program 3:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000380)={0x0, 0x3f, 0xfffffffe})
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = syz_clone3(0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2})
r3 = getpid()
read$FUSE(r0, &(0x7f0000001800)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000004c0)=<r5=>0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$packet(0x11, 0x3, 0x300)
splice(r7, 0x0, r6, 0x0, 0xfbfffffffffffff9, 0x0)
syz_clone3(&(0x7f0000000540)={0x80000000, &(0x7f0000000280), &(0x7f00000003c0)=<r8=>0x0, &(0x7f0000000400), {0x36}, &(0x7f0000000440)=""/105, 0x69, &(0x7f0000000800)=""/4096, &(0x7f0000000500)=[r1, 0x0, r3, r4, r5, r2, r2], 0x7, {r6}}, 0x58)
syz_clone3(&(0x7f0000000300)={0x40000400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x30}, &(0x7f00000000c0)=""/233, 0xe9, &(0x7f00000001c0)=""/71, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8], 0x7}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="8600000000728e4ffdac7dd6de388a1bbaae452a48aac63a6c2a70f64721faafc34796fcecf8e0426b158d3113090000f10000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$packet(0x11, 0x3, 0x300)
splice(r10, 0x0, r9, 0x0, 0xfbfffffffffffff9, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f0000000240)={0x0, 0x1, 0x7, 0x3, 0x6})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000380)={0x0, 0x3f, 0xfffffffe}) (async)
fcntl$getown(0xffffffffffffffff, 0x9) (async)
syz_clone3(0x0, 0x0) (async)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) (async)
getpid() (async)
read$FUSE(r0, &(0x7f0000001800)={0x2020}, 0x2020) (async)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000004c0)) (async)
pipe(&(0x7f0000000040)) (async)
socket$packet(0x11, 0x3, 0x300) (async)
splice(r7, 0x0, r6, 0x0, 0xfbfffffffffffff9, 0x0) (async)
syz_clone3(&(0x7f0000000540)={0x80000000, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000400), {0x36}, &(0x7f0000000440)=""/105, 0x69, &(0x7f0000000800)=""/4096, &(0x7f0000000500)=[r1, 0x0, r3, r4, r5, r2, r2], 0x7, {r6}}, 0x58) (async)
syz_clone3(&(0x7f0000000300)={0x40000400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x30}, &(0x7f00000000c0)=""/233, 0xe9, &(0x7f00000001c0)=""/71, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8], 0x7}, 0x58) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="8600000000728e4ffdac7dd6de388a1bbaae452a48aac63a6c2a70f64721faafc34796fcecf8e0426b158d3113090000f10000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) (async)
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) (async)
pipe(&(0x7f0000000040)) (async)
socket$packet(0x11, 0x3, 0x300) (async)
splice(r10, 0x0, r9, 0x0, 0xfbfffffffffffff9, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f0000000240)={0x0, 0x1, 0x7, 0x3, 0x6}) (async)

10:01:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  573.706244][  T120] usb 2-1: USB disconnect, device number 50
[  573.899175][ T3750] udevd[3750]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
10:01:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  574.182958][ T1021] usb 1-1: new high-speed USB device number 60 using dummy_hcd
10:01:28 executing program 1:
syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0xff, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xa, 0x24, 0x7, 0x0, 0x0, 0x0, "c55e8d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, "d32ae36e1a7f"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x49, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

10:01:28 executing program 2:
unshare(0x40000400)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
unshare(0x2c010800)
unshare(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="8b616e676c65000000000000000000080000000000000000000000000000000004"], &(0x7f00000000c0)=0x2c)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
splice(r2, 0x0, r1, 0x0, 0xfbfffffffffffff9, 0x0)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_generic(r3, &(0x7f0000001700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000180)={0x1538, 0x2f, 0x45d4197fd9cabc2a, 0x70bd25, 0x25dfdbfc, {0xd}, [@nested={0x1341, 0x3e, 0x0, 0x1, [@generic="d9411f8f8c3e33ff88df60b876ddb33c46f9160e5cdf55b233dcf66c0034d86c51bcdf4bc175b24b27554656415818507653aa7aacf813cd721923d7e661bbc68180d25a8cd5f56ffd16c527142a3ff55832b68ca34931a27ce45270588259de7abd7ce037e92418c17fd9fa00988ad4cbc8fb095f951eb862efb767597934b7ddbb18b53c13e26cb5c58ca2c998f197eb9c76ff6a635989a48b3e5f06a156ac0190505d5fa413e18a00f3cc37a43f54e5632207f30a790c72f4573e99670baa3c532b70cf", @typed={0xb, 0x87, 0x0, 0x0, @str='TIPCv2\x00'}, @typed={0xaf, 0x83, 0x0, 0x0, @binary="2f5c92c47f1f19cecbc5d22fe55d7490fcaca73e9713152416e3a59395d2e1702f63311c860ec77116807b713f9d6e743e697c983e2420fbdd5e163377ce16dbb7a169cb98d93d90a86f18015642d5cf19ca4156bca27b2cbec948b60732b6553cf0afc5f7764f699220a1ca53b8bafd981e0efa580b7dd76131910fd916efe577c18cb2fe6a907e4a163863ec9c5673f473c8cff0e54cabf6aaa716d01590ace9d88afd0eb67801dce7b2"}, @generic="73eeacaae8bc3a916a15a28eeb62af2d0dcb8642b717343f7ca0bc7ff7621d59b5cc368206f24fa574ff8d35d9b5b141daf8a4b289666e74b50ad5732d00dea5f1647239f9f52aa7ab7a1e929a963c9c106293ef9f0a000b6df4a85ee414f1af0681cbdcdbae11c0150c5a900065559e6320cd6f165bab1338c935d72d2b843538ad212dcb63043dfeb2e67c8e09c441a9f01287405c8568aa4b371beeeee25760769dcfdb0991b67430030c57c2e7c9d937f8a60beb0738e7dd74ee6255bfca0340df157c5d8583b0ae10ec1cc4d8afe3e3e73b779b0a1595311aef39cf65c22bfed3ac1578ec5e9fc96b40e30956a8ccdf198bd0310d21a8f5ce6c176cd10501290151b83125faf0b425a8fba7b4e6f03a6f2c7d42481086d912b9531377d96c0224b8f843bb7e711f1ca1d167bba0b29346f4fee72939ca8dc10c0fd4b549ccafc36cad92c503936d6cc42a945a58daa9412d51af323e8a1730e31e3d5fd58ea74d30659f756465f799349d441b9305b3825b2c390db5d3f7965b84cc9cf9ddb70531921e4eb68c453b292e6cc4eb40e3e974583b332529effa577837f3fa06170c0393ed012383b0087f54991d3fea24f6bde9aad45788a3156081e7bf937018ce0bbb3002ebde7a7246d0d38522fc20c6eddcee7405fe22eead5b9102422b7b220c5b7378692bc8a9e9061486062cf697ace9a5215c76a01fae15b22221e9229bbb06fdefd6695efc01236ca8c2b4c62177a022c4469bba08dd63f840d2f5ea927baa54a47aa196b329a8388a39661e018e49778ed1b7d40cb9f7455b2e6882842c40aaddd3e0e15ed69dbcbd8ed4c9bd7ae5af6fadb622453c92afc9cd46865429e98c419c532ca61b46cd6a6da014e904479adff20422769097bb9dd1603c35884d7cde82b5612c7010350d76f182698f97009203c061b8682a0d11b54fb21ce36a83e3dea0478194edb5d3045c9907ac0e93f96e182b0fed93464923c0b501d16bfa6ae963e33415c5d68522b43d88e56667433ab41351a0715408bdd01d4e9151e12c72b8e59f7cb71fd2ac333e036268e1db22b463e497d7e96ce77dc9c672b57a5c958c79ac7770fc7bfc58e1c8a7a60e35d6b4dd4d5f56e337ac0294db9dd426a674f4aca725a23ba823b6dc250916b46a39abbc85ecf80dfbb53739cb160635d52d9a2315f0c34ded270e820d555e4ecb86c9ae4d75426fc1beb7d51b76ac0aa95f61dbca41e44695b908b5b3d16c319cc77665e5f92ebda7d770c4cce1480218501221c348f8525c5065a730337077b5a810766e3c44c67eda26b5ee17215d0425712c26e3fd8465ec5e90df6e929cc16df6d02ba0d14d8a62abaac96c4b83f85f65b260ad31afda4ed643112d0a79b03ee0fa3eb8e161d063d9ba6e1a03b51dd07ff03d800d364049a1b991a7cd84075562b23d17b4ab1ad9c33f4296506a045ed2bde23931f428560c7487af1d8ad2e539a1d92d5f2f90ec1527ec83d8a8f9145126241d33db0533cdc882b88c482ca496e25902b6a57ed49fd8e9817d8e1d950255a58c017f1428accee6b4bc28914ccebad12aa2e66ed64aa93d14524d2535e4c5b071e1eb317685d84dbc997051451a6ab92d3924198ba39a315d2610ab3e5e298e8d32b9f60df672531559d7d4cf251edbbb8d5481c5d3e9d471de4d4b95896e4c0bf8025553a4e430d3c6900abb47b769b992c752ab72b2bac9fbd339149a9ceb726e3cba2b7694ae11072b75fc82dc43f769cf803a8b0ccc5faae8fb659f0d6b4fedefd8c1e64349061b96b9de323859688d1feb8ffbbd9cfb2ab062a79de4472acc88af7672cbeb512a49d81d8ae2aa767f7b18e90b0d46f2a9877335c86db79f04e551452a9d0c53eb1ce3ae28a2c696723c99d5501b5ad399b8bbe48a355f10228951b113a23a516258b1d2f8e7ec7d756d6792f272419c2f18bd1ec67b3241271ee2c6b81251e4228724d912322506541997330a607621e23fe445f1c18f5c69e248cf67c9a44711904957fbe416879a2e6f2e47c1885a4b2e046ff23a0e9e087b7b8f47e03f32c0aad31444d7e38e7abac00c28bf5adcde6ff06c9712f84d0028805a61258426fb989bb07a7f951a3015132bef4376f713207b871e46243b4ac520e5e1bc403cd65f910bdb0d49af166cc9fe77d45b6a631fbb2b0a591b57ecf30b4920db2c2f98eb1e5878c984187857ea5a203c3737d522a93ecfea8fdc255ac9ef2c1c3a516c5ac6543006269800d4492bff99b80f0809ec629f6523d4ccb2853a8fe2c22757a00d1e97c74d13bb3c6215f156388bbc67b7848fdb201e719ec4730679215e2601fdf7c0a0a89170b80bf8eea496298d1c9c7500374f58e25a4d64fc8c18026a0fe47b284bc44501e8b6e7a8514b21d62f264caca1701807af561bfc2d754482dd7bd32ac465b1847752c53985f5917fe6dfb8daf448c579ac3045e5767bf44c2fb50ad65140327119b324f49282aa36a7d6f9da090cc8d426230a9d4359cfcfe8efa0a6f901b18fcb8af3cfb52e1e8921f51a7a271942b26bc06ee2a7a721fb6ddb03e37312ae1e3f9e7dfcdaa52702d100b8f4643bf355338260efcf4d3f624b1f2b1a12e2f8aba59455fbf87ce43a67bf65629b551488d8962f6f489fd3a5c2e71f9bf8cdb0f3b74281f82cdeecd7ba48ab02def21a9b6ab3d5e0dda763d5958442663951a0998a87cf804c6ccbe69a36c565773fad76c2fd3596faf7814571cac417c7cec2947c309e805660b2ba26f36eb1885be7cf529ac98ae3a3ad7a88011f33991ee5866e41488e3ec9a55d40fc414e5c058dcf673e0ad88a6a1819a3c0f2eafffb9cde11e03ba65c985e333174a6cc65adaa14b9e91bee99da943b80fed2def090a7f643556acb269da4fed457e2dbb5980a2d0b5ad2d40ee7eec85d363af15db694fc7278e92e3d838591ebda7216dcc012d69e9affa38001a0bf9e817b378a7e6b09685e72a466c7615fded23d723e4e2cbecb8a76113b355244cb739b73ac4b6c8152d70d03cab302f361eef178b64fbaa3fe01625d255c76d8f613c07487f76a7186c5d41218147c857ed3542df51676fa6379b4ecba9ed826acee67cc8b103f81bfedfdce4e0a008b32d469293b9b9a751ab7bf80427db753c8448a36ff9b172332678b1fc26e5f15310c91fa53b890834ae148c1b09cf0a65a37bce1f7ed7645da5f2caf6eb3f734b518c0293a58def72c76dcc8bf5f026d18ad9df191abae92caa1916c39bab1c461ccab734e0998574c5f5298416a1f8279a781a640661c817fd19357c99f67d5a815102f3a2230402db85e5faa31d0b446f6b0c4560e322c8ac38f92262b374796985b84445252922c73fcb5fd3696494f7f793773f0def748bf592b3f59be743ae5eec38ceefdd741c0b9b4abecae70ce65d1658a646dfa427bfe3d024c5f48d9ae0724af7a4c9df4e6b4a3605777c7a5aaee660feec11c8eb874ac699fd840e612500222a0981817ee5c456e21b0c372516f62f7eb8e52b79bb0ec5f2f55729c73466928193782d6084768c72643f49a7472cb4bf3521a0b1a61952d7b828add209c3320a464384310f627a6f0f969ff793088f7fced5b27caf63229721a2861875f254d787b012c942b740fe73439c681ff4591348f069994ed9062e6c85f7ebaf5ddacce3584bf8aa91ec1e1b80b959a00102ad7014120695fbbf708650229edc316710022ec15a6b1286cbb66b84668764c15ec4896e7973e2252a2346aa1325a2ecf7d1ee9521a9368132e221caa74d74b7a20ea704f2aeff638317d9a4b417bad269d3b0c94411f7f3ea20cfdca54e692a31b84b5fc668b1a6bc2b6559ae21c2db43bac8da605cab0e1bbe4a3b48185fc4d8e21ebef24f227f9711512b164c925b2b28f8c5419f8d549d6074b855de8cd61938bbd47ab1a5f7d43abc1c8eea168e1c2eeb594bf071c3306a22e7844ec28446026242640de4431a77b2b3d69a36c2392710712e74b38b0e0c5e36decbd5ec1649cad68b8b4eee26ffc6645577b53fd22b8dae7e1569d2c528c22973a9cedcb221310e4ec3918d1b9166d2456c43a6809ce2eb7fd321e1af9767dafc7de54c22093ed8ea712ebe21e7fc884f2dcc456ad4395f53a2f808d7224ae1223d99b94ecff9dbbe6725d077b03cb32bba3116eaa611729ae89992809e5c491fc05d2bb59c9c5d023d445aa76eaa29526d82ae5f6adb028f81b8851020c05d51319901e9333f54c0031090aa0301e89a24512ea4b6563aba8d99d13a8e1e37782c9538a1facd1085256fa22a81ee0f98d819848ad307fa4fc4f7bb7f50b516cb755b056a2de7d6e096c70bc0b468840c9460ec8dd783d1383864c66e26bed7caccb9b57b2e428a2c3d3ab6705536256b355e677f9e773b6b0207b14256397dbb822c7474f3dc3f449768419afdc6942336ebd91305b5720da13e008cb2215e755debc375664f5f8ae2f5b903422d8040eed2ccd3e22c082b91b22d21758454984376ef9e5b3dc2ae2ca916755d2a26907018569ca70be286504333fc087986532cbcee970ec8180886981a28d0b0fb1541377d3de46df6b814b4100112e310b0c72ee172d8c9548671a6e2a866dad372f42e90d3c7c860fe06845372dbddb9360eebf33d5bbb58d9a9f12ce91432c24f32ff0f0c52c411328d1959d2ea5e835df1f25b3cc632de52f17ba3d6d4ba53388e40aec0230848239b94e2ca0aefb0ac6c6949ceac8676205aa7fbd7bf41c5245d27d4de73f39429a981d816f50d8bf3f81b67902b62f1ed1109ebfc0e72c867c2003893505d183fc65aa8abbde55ae2f5cb31db7548198ff1f458884f65f7f8ac1024ea95d77dc44e6e03c56178fc4c16caf9169ec8b7836a8fe92cf7e9d9cc4d73590b1c09bbe807ff7e3f47869dd05f4cca87ddb54ab617dd6ed552dabef2a6d34d8b79ea47fb2a7837b180abbd790a9d59866ccd4867e6c2e5f80d9b323e7d1c89b5bc381cf77e7a7e14f347fd011cad7d50dd9376c823d6fc03bf8ef9636725c6a94ede4641734c81bb456d4282ac5eb49ba8afc64e86e7c0b87d13b0e0e0a041b617d8b2501b868bd497320b94d19029d1ff87d85b342c3ef5cbf379d4fd8b1df024d74103ca3be289f5f6c9f1b995c9dfab9488b9995bac59f504a6540d7ca64aa825a2b6d4cc794ca1153e3db2c76a667b274dbef6c22b5d1431e1ff43d249096f568051e4c8627f372720c4a2519b433d2003ab0ef4ee58fb86e431aa7e4a878dca23b99b2bc24f5665956bf8b1e85ce74b4e5350499a6c05eba9d4bc386fd04d4fb2fbe4186a10f6b1401cde7a48a3cac9652ae0e38b89ef00ecac4bc7614ba264e8ea2a13f46b7c522375b56caae4f38ed639a084efdb4f19e86d19634a145cc029d70b57c3047d45e2262055bcc57166d6dcd99d65527c407293ba299ca909af67eb0296f8d3ab9dd4881fc2132a7f7c5f24070e3ee2af7ab4ffc37273e1aa5085dedf87af0ac3852988b0f0b869bb8db0fb04e724f6bcc8460cf0c8a21ca3ccc705d2e32e96b88852a84658a97c7d7688a42288935df7045dcc8e61979d6ec35ad943d99c364cc4de5e688da0e58fe586db09e0a021c10c4b8dec87300f46c149bd2cd71be366777aec5d121e75ea7fa734c37717c0c22edd676c215548b9ff8b04adf8e5484160ceaf9fee03e51866cfb4e03c90a976fea9fc2d0364de8b389db398f4a8ed02db5d037744ddf00459e8536a1330ec45562e70f91e67b6eeaf66de391ec42751ecfa37b9e3fb17c9a77631a47", @typed={0x8, 0x66, 0x0, 0x0, @u32=0x81}, @generic="d2113aff96642075ebde89ef66eddcc5194a987df528c63ddae8513223a9c7bc1ad30c341852128a9a5db9b6e99bce890be879a0737f1cf343786a27a53ff5ae26ba5644acc7a0b4ded93ababba79794348981ec1453fd6943abe5d3a8ff2992f5ca8338715371e9f0582df5829c6a9dbe9768dc5ccd0f94116ec7aa6189afe0513a666eb93cf8ae308d93100e81ccb8858f35cc69b9d267", @generic="3b8e5f05c903ed697d07ff7ae71d6d946098a33600271e8f7733b98b8b48d52bbd7c0a7b35c4db85691fe8ed3acb8874d9473f71cf781b1cc6bba3813737f2c629751eac21732e17b4f023cf2b727c37ada130bb1a67019b438578ca35a5a0e8b23d72f4916f34211abf014e442e4c0ab2df6ead61554826f526e5f2c3162b2441b48925381be3f8e7b5e38c604629e50624c12f99534e7452001aef8240168d018a47be318f66b4d1b7e1ecea8c19ce91ebad683151bf85e6dea24551de4d67747498ef189056bb28e3da", @typed={0x8, 0x5b, 0x0, 0x0, @pid}, @generic="d92ed534f6adc91e039537dcbfe283be3277e5e97eecdb5b30aa86ad56dc6377fe9994ab511e1026fda3d14415904a49ababd33ccdaf1c663f693dad0f25b630f82ce5881c89012de8"]}, @nested={0x1d6, 0x2a, 0x0, 0x1, [@generic="d63483c0073c46ab40bfed36a099037b6db617ce6fa86fd24b62f522e48982a254e8d41a0b01d1bcc3ad1ab519473fedc9f27418396fab7f222812b761a58109cd49dc87d379dbdae0953fe4d5a327263ac46b28654a39e997177134c9015f67d2ac5170f2326c5b24f365ab3892fff1ed777e09c9e3e8ebf4", @generic="c86c791fcc4c02013ca1082e7487463a438bbe1b4aff18312f673dcd61505d086228d4b151aa1720252b58bdb8921069f8d65122f0f0034bbd9b213275fc5e3fde276a9283b22b20384daa6472", @generic="39422008f74b3b8b30161e32a53028e0", @generic="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"]}, @typed={0x8, 0x30, 0x0, 0x0, @fd=r4}]}, 0x1538}, 0x1, 0x0, 0x0, 0x40}, 0x8050)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)

[  574.382992][ T1021] usb 1-1: device descriptor read/64, error 18
10:01:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  574.653094][ T1021] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  574.762811][  T120] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  574.843511][ T1021] usb 1-1: device descriptor read/64, error 18
[  574.963321][ T1021] usb usb1-port1: attempt power cycle
[  575.013041][  T120] usb 2-1: Using ep0 maxpacket: 32
10:01:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  575.143059][  T120] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  575.152360][  T120] usb 2-1: config 1 has no interface number 1
[  575.159043][  T120] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
10:01:29 executing program 3:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000380)={0x0, 0x3f, 0xfffffffe})
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = syz_clone3(0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2})
r3 = getpid()
read$FUSE(r0, &(0x7f0000001800)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000004c0)=<r5=>0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$packet(0x11, 0x3, 0x300)
splice(r7, 0x0, r6, 0x0, 0xfbfffffffffffff9, 0x0)
syz_clone3(&(0x7f0000000540)={0x80000000, &(0x7f0000000280), &(0x7f00000003c0)=<r8=>0x0, &(0x7f0000000400), {0x36}, &(0x7f0000000440)=""/105, 0x69, &(0x7f0000000800)=""/4096, &(0x7f0000000500)=[r1, 0x0, r3, r4, r5, r2, r2], 0x7, {r6}}, 0x58)
syz_clone3(&(0x7f0000000300)={0x40000400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x30}, &(0x7f00000000c0)=""/233, 0xe9, &(0x7f00000001c0)=""/71, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8], 0x7}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="8600000000728e4ffdac7dd6de388a1bbaae452a48aac63a6c2a70f64721faafc34796fcecf8e0426b158d3113090000f10000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$packet(0x11, 0x3, 0x300)
splice(r10, 0x0, r9, 0x0, 0xfbfffffffffffff9, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f0000000240)={0x0, 0x1, 0x7, 0x3, 0x6})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000380)={0x0, 0x3f, 0xfffffffe}) (async)
fcntl$getown(0xffffffffffffffff, 0x9) (async)
syz_clone3(0x0, 0x0) (async)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) (async)
getpid() (async)
read$FUSE(r0, &(0x7f0000001800)={0x2020}, 0x2020) (async)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000004c0)) (async)
pipe(&(0x7f0000000040)) (async)
socket$packet(0x11, 0x3, 0x300) (async)
splice(r7, 0x0, r6, 0x0, 0xfbfffffffffffff9, 0x0) (async)
syz_clone3(&(0x7f0000000540)={0x80000000, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000400), {0x36}, &(0x7f0000000440)=""/105, 0x69, &(0x7f0000000800)=""/4096, &(0x7f0000000500)=[r1, 0x0, r3, r4, r5, r2, r2], 0x7, {r6}}, 0x58) (async)
syz_clone3(&(0x7f0000000300)={0x40000400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x30}, &(0x7f00000000c0)=""/233, 0xe9, &(0x7f00000001c0)=""/71, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8], 0x7}, 0x58) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="8600000000728e4ffdac7dd6de388a1bbaae452a48aac63a6c2a70f64721faafc34796fcecf8e0426b158d3113090000f10000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) (async)
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) (async)
pipe(&(0x7f0000000040)) (async)
socket$packet(0x11, 0x3, 0x300) (async)
splice(r10, 0x0, r9, 0x0, 0xfbfffffffffffff9, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f0000000240)={0x0, 0x1, 0x7, 0x3, 0x6}) (async)

[  575.382800][ T1021] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  575.473469][  T120] usb 2-1: string descriptor 0 read error: -22
[  575.480106][  T120] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  575.491450][  T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
10:01:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  575.593448][ T1021] usb 1-1: device descriptor read/8, error -61
[  575.634588][  T120] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[  575.647188][  T120] usb 2-1: 2:1 : invalid channels 0
[  575.863562][ T1021] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  575.927020][  T120] usb 2-1: USB disconnect, device number 51
[  576.038024][ T3750] udevd[3750]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  576.085560][ T1021] usb 1-1: device descriptor read/8, error -61
[  576.204695][ T1021] usb usb1-port1: unable to enumerate USB device
10:01:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  576.422155][ T1199] ieee802154 phy0 wpan0: encryption failed: -22
[  576.429013][ T1199] ieee802154 phy1 wpan1: encryption failed: -22
10:01:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:31 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:01:31 executing program 1:
unshare(0x48040200)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x10, &(0x7f0000000300)=@raw=[@ldst={0x1, 0x0, 0x3, 0x1, 0x4, 0x50, 0xfffffffffffffff0}, @generic={0x3, 0x6, 0x8, 0x9, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x603, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}], &(0x7f0000000380)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x1e00, 0x12, '\x00', 0x0, 0x15, r3, 0x8, &(0x7f0000000400)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x5, 0x200, 0x8c}, 0x10, 0x0, r1}, 0x80)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1d)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r4, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0)
ioctl$PPPIOCGFLAGS1(r2, 0x40047454, &(0x7f0000000140))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x22004001, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f00000033c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x9, 0x6, 0x5d8, 0x0, r4, 0x7d8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x48)
bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r4}, 0x8)

10:01:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  577.463897][  T120] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  577.653524][  T120] usb 1-1: device descriptor read/64, error 18
10:01:31 executing program 3:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
splice(r2, 0x0, r1, 0x0, 0xfbfffffffffffff9, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x9c}}, './file0\x00'})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$packet(0x11, 0x3, 0x300)
splice(r6, 0x0, r5, 0x0, 0xfbfffffffffffff9, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0)
fcntl$dupfd(r3, 0x0, r4)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$packet(0x11, 0x3, 0x300)
splice(r8, 0x0, r7, 0x0, 0xfbfffffffffffff9, 0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

10:01:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  577.923373][  T120] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  578.113239][  T120] usb 1-1: device descriptor read/64, error 18
[  578.233747][  T120] usb usb1-port1: attempt power cycle
10:01:32 executing program 2:
unshare(0x40000400) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
unshare(0x2c010800) (async)
unshare(0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="8b616e676c65000000000000000000080000000000000000000000000000000004"], &(0x7f00000000c0)=0x2c) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
splice(r2, 0x0, r1, 0x0, 0xfbfffffffffffff9, 0x0) (async)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_generic(r3, &(0x7f0000001700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000180)={0x1538, 0x2f, 0x45d4197fd9cabc2a, 0x70bd25, 0x25dfdbfc, {0xd}, [@nested={0x1341, 0x3e, 0x0, 0x1, [@generic="d9411f8f8c3e33ff88df60b876ddb33c46f9160e5cdf55b233dcf66c0034d86c51bcdf4bc175b24b27554656415818507653aa7aacf813cd721923d7e661bbc68180d25a8cd5f56ffd16c527142a3ff55832b68ca34931a27ce45270588259de7abd7ce037e92418c17fd9fa00988ad4cbc8fb095f951eb862efb767597934b7ddbb18b53c13e26cb5c58ca2c998f197eb9c76ff6a635989a48b3e5f06a156ac0190505d5fa413e18a00f3cc37a43f54e5632207f30a790c72f4573e99670baa3c532b70cf", @typed={0xb, 0x87, 0x0, 0x0, @str='TIPCv2\x00'}, @typed={0xaf, 0x83, 0x0, 0x0, @binary="2f5c92c47f1f19cecbc5d22fe55d7490fcaca73e9713152416e3a59395d2e1702f63311c860ec77116807b713f9d6e743e697c983e2420fbdd5e163377ce16dbb7a169cb98d93d90a86f18015642d5cf19ca4156bca27b2cbec948b60732b6553cf0afc5f7764f699220a1ca53b8bafd981e0efa580b7dd76131910fd916efe577c18cb2fe6a907e4a163863ec9c5673f473c8cff0e54cabf6aaa716d01590ace9d88afd0eb67801dce7b2"}, @generic="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", @typed={0x8, 0x66, 0x0, 0x0, @u32=0x81}, @generic="d2113aff96642075ebde89ef66eddcc5194a987df528c63ddae8513223a9c7bc1ad30c341852128a9a5db9b6e99bce890be879a0737f1cf343786a27a53ff5ae26ba5644acc7a0b4ded93ababba79794348981ec1453fd6943abe5d3a8ff2992f5ca8338715371e9f0582df5829c6a9dbe9768dc5ccd0f94116ec7aa6189afe0513a666eb93cf8ae308d93100e81ccb8858f35cc69b9d267", @generic="3b8e5f05c903ed697d07ff7ae71d6d946098a33600271e8f7733b98b8b48d52bbd7c0a7b35c4db85691fe8ed3acb8874d9473f71cf781b1cc6bba3813737f2c629751eac21732e17b4f023cf2b727c37ada130bb1a67019b438578ca35a5a0e8b23d72f4916f34211abf014e442e4c0ab2df6ead61554826f526e5f2c3162b2441b48925381be3f8e7b5e38c604629e50624c12f99534e7452001aef8240168d018a47be318f66b4d1b7e1ecea8c19ce91ebad683151bf85e6dea24551de4d67747498ef189056bb28e3da", @typed={0x8, 0x5b, 0x0, 0x0, @pid}, @generic="d92ed534f6adc91e039537dcbfe283be3277e5e97eecdb5b30aa86ad56dc6377fe9994ab511e1026fda3d14415904a49ababd33ccdaf1c663f693dad0f25b630f82ce5881c89012de8"]}, @nested={0x1d6, 0x2a, 0x0, 0x1, [@generic="d63483c0073c46ab40bfed36a099037b6db617ce6fa86fd24b62f522e48982a254e8d41a0b01d1bcc3ad1ab519473fedc9f27418396fab7f222812b761a58109cd49dc87d379dbdae0953fe4d5a327263ac46b28654a39e997177134c9015f67d2ac5170f2326c5b24f365ab3892fff1ed777e09c9e3e8ebf4", @generic="c86c791fcc4c02013ca1082e7487463a438bbe1b4aff18312f673dcd61505d086228d4b151aa1720252b58bdb8921069f8d65122f0f0034bbd9b213275fc5e3fde276a9283b22b20384daa6472", @generic="39422008f74b3b8b30161e32a53028e0", @generic="3b50a03b87c0751df2aad56632983354d893db269d6852acb294978346b3f2de89b5852039aaf1fd38d07c21139464a696b6cfe2b34e9b4d542c0d7872c5d6666d35401ed7e23be4fd31512bf80f4d068aa2cfd0f1889f61695ff9ad42d3a8bf73a7557ebcee642c288a9e5ed693e70fa1f2bb83a70f485223195164b700f169e3c9bcfca21b2b73af084338e562e0b6508ba2d7c3ed29e00d8be00eccadd4d6856ab7ad23aab296265ee9df3f81e98639211a91314d4653e89d21e89b836980e4013dc32f5c54a8f157868978ec5b0f8995dd0b5d490a317c7ee82c64b86d28513cdf7344624b9dab7a332eeda693f82173709cb73907de9612db9e"]}, @typed={0x8, 0x30, 0x0, 0x0, @fd=r4}]}, 0x1538}, 0x1, 0x0, 0x0, 0x40}, 0x8050) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)

10:01:32 executing program 1:
unshare(0x48040200) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x10, &(0x7f0000000300)=@raw=[@ldst={0x1, 0x0, 0x3, 0x1, 0x4, 0x50, 0xfffffffffffffff0}, @generic={0x3, 0x6, 0x8, 0x9, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x603, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}], &(0x7f0000000380)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x1e00, 0x12, '\x00', 0x0, 0x15, r3, 0x8, &(0x7f0000000400)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x5, 0x200, 0x8c}, 0x10, 0x0, r1}, 0x80)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1d)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r4, 0x0) (async, rerun: 32)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) (async, rerun: 32)
ioctl$PPPIOCGFLAGS1(r2, 0x40047454, &(0x7f0000000140)) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x22004001, 0x0, 0x0) (async)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f00000033c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x9, 0x6, 0x5d8, 0x0, r4, 0x7d8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x48)
bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r4}, 0x8)

10:01:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:32 executing program 3:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
splice(r2, 0x0, r1, 0x0, 0xfbfffffffffffff9, 0x0) (async)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x9c}}, './file0\x00'}) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
splice(r6, 0x0, r5, 0x0, 0xfbfffffffffffff9, 0x0) (async)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0)
fcntl$dupfd(r3, 0x0, r4) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$packet(0x11, 0x3, 0x300)
splice(r8, 0x0, r7, 0x0, 0xfbfffffffffffff9, 0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

[  578.642899][  T120] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  578.833621][  T120] usb 1-1: device descriptor read/8, error -61
[  579.102833][  T120] usb 1-1: new high-speed USB device number 67 using dummy_hcd
10:01:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:33 executing program 3:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
splice(r2, 0x0, r1, 0x0, 0xfbfffffffffffff9, 0x0) (async)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x9c}}, './file0\x00'}) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
splice(r6, 0x0, r5, 0x0, 0xfbfffffffffffff9, 0x0) (async)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0) (async)
fcntl$dupfd(r3, 0x0, r4)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
splice(r8, 0x0, r7, 0x0, 0xfbfffffffffffff9, 0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

10:01:33 executing program 1:
unshare(0x48040200)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x10, &(0x7f0000000300)=@raw=[@ldst={0x1, 0x0, 0x3, 0x1, 0x4, 0x50, 0xfffffffffffffff0}, @generic={0x3, 0x6, 0x8, 0x9, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x603, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}], &(0x7f0000000380)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x1e00, 0x12, '\x00', 0x0, 0x15, r3, 0x8, &(0x7f0000000400)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x5, 0x200, 0x8c}, 0x10, 0x0, r1}, 0x80)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1d)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r4, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0)
ioctl$PPPIOCGFLAGS1(r2, 0x40047454, &(0x7f0000000140))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x22004001, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f00000033c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x9, 0x6, 0x5d8, 0x0, r4, 0x7d8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x48)
bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r4}, 0x8)
unshare(0x48040200) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x10, &(0x7f0000000300)=@raw=[@ldst={0x1, 0x0, 0x3, 0x1, 0x4, 0x50, 0xfffffffffffffff0}, @generic={0x3, 0x6, 0x8, 0x9, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x603, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}], &(0x7f0000000380)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x1e00, 0x12, '\x00', 0x0, 0x15, r3, 0x8, &(0x7f0000000400)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x5, 0x200, 0x8c}, 0x10, 0x0, r1}, 0x80) (async)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1d) (async)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r4, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) (async)
ioctl$PPPIOCGFLAGS1(r2, 0x40047454, &(0x7f0000000140)) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
sendto$inet6(r5, 0x0, 0x0, 0x22004001, 0x0, 0x0) (async)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f00000033c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x9, 0x6, 0x5d8, 0x0, r4, 0x7d8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x48) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r4}, 0x8) (async)

[  579.283479][  T120] usb 1-1: device descriptor read/8, error -61
[  579.403577][  T120] usb usb1-port1: unable to enumerate USB device
10:01:34 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:01:34 executing program 3:
syz_clone(0x44002100, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1})
capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x56a, 0x8, 0x3, 0x2, 0x1f, 0x1})

10:01:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:34 executing program 2:
unshare(0x40000400) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
unshare(0x2c010800) (async)
unshare(0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="8b616e676c65000000000000000000080000000000000000000000000000000004"], &(0x7f00000000c0)=0x2c)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
splice(r2, 0x0, r1, 0x0, 0xfbfffffffffffff9, 0x0) (async)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_generic(r3, &(0x7f0000001700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000180)={0x1538, 0x2f, 0x45d4197fd9cabc2a, 0x70bd25, 0x25dfdbfc, {0xd}, [@nested={0x1341, 0x3e, 0x0, 0x1, [@generic="d9411f8f8c3e33ff88df60b876ddb33c46f9160e5cdf55b233dcf66c0034d86c51bcdf4bc175b24b27554656415818507653aa7aacf813cd721923d7e661bbc68180d25a8cd5f56ffd16c527142a3ff55832b68ca34931a27ce45270588259de7abd7ce037e92418c17fd9fa00988ad4cbc8fb095f951eb862efb767597934b7ddbb18b53c13e26cb5c58ca2c998f197eb9c76ff6a635989a48b3e5f06a156ac0190505d5fa413e18a00f3cc37a43f54e5632207f30a790c72f4573e99670baa3c532b70cf", @typed={0xb, 0x87, 0x0, 0x0, @str='TIPCv2\x00'}, @typed={0xaf, 0x83, 0x0, 0x0, @binary="2f5c92c47f1f19cecbc5d22fe55d7490fcaca73e9713152416e3a59395d2e1702f63311c860ec77116807b713f9d6e743e697c983e2420fbdd5e163377ce16dbb7a169cb98d93d90a86f18015642d5cf19ca4156bca27b2cbec948b60732b6553cf0afc5f7764f699220a1ca53b8bafd981e0efa580b7dd76131910fd916efe577c18cb2fe6a907e4a163863ec9c5673f473c8cff0e54cabf6aaa716d01590ace9d88afd0eb67801dce7b2"}, @generic="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", @typed={0x8, 0x66, 0x0, 0x0, @u32=0x81}, @generic="d2113aff96642075ebde89ef66eddcc5194a987df528c63ddae8513223a9c7bc1ad30c341852128a9a5db9b6e99bce890be879a0737f1cf343786a27a53ff5ae26ba5644acc7a0b4ded93ababba79794348981ec1453fd6943abe5d3a8ff2992f5ca8338715371e9f0582df5829c6a9dbe9768dc5ccd0f94116ec7aa6189afe0513a666eb93cf8ae308d93100e81ccb8858f35cc69b9d267", @generic="3b8e5f05c903ed697d07ff7ae71d6d946098a33600271e8f7733b98b8b48d52bbd7c0a7b35c4db85691fe8ed3acb8874d9473f71cf781b1cc6bba3813737f2c629751eac21732e17b4f023cf2b727c37ada130bb1a67019b438578ca35a5a0e8b23d72f4916f34211abf014e442e4c0ab2df6ead61554826f526e5f2c3162b2441b48925381be3f8e7b5e38c604629e50624c12f99534e7452001aef8240168d018a47be318f66b4d1b7e1ecea8c19ce91ebad683151bf85e6dea24551de4d67747498ef189056bb28e3da", @typed={0x8, 0x5b, 0x0, 0x0, @pid}, @generic="d92ed534f6adc91e039537dcbfe283be3277e5e97eecdb5b30aa86ad56dc6377fe9994ab511e1026fda3d14415904a49ababd33ccdaf1c663f693dad0f25b630f82ce5881c89012de8"]}, @nested={0x1d6, 0x2a, 0x0, 0x1, [@generic="d63483c0073c46ab40bfed36a099037b6db617ce6fa86fd24b62f522e48982a254e8d41a0b01d1bcc3ad1ab519473fedc9f27418396fab7f222812b761a58109cd49dc87d379dbdae0953fe4d5a327263ac46b28654a39e997177134c9015f67d2ac5170f2326c5b24f365ab3892fff1ed777e09c9e3e8ebf4", @generic="c86c791fcc4c02013ca1082e7487463a438bbe1b4aff18312f673dcd61505d086228d4b151aa1720252b58bdb8921069f8d65122f0f0034bbd9b213275fc5e3fde276a9283b22b20384daa6472", @generic="39422008f74b3b8b30161e32a53028e0", @generic="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"]}, @typed={0x8, 0x30, 0x0, 0x0, @fd=r4}]}, 0x1538}, 0x1, 0x0, 0x0, 0x40}, 0x8050)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)

10:01:34 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
splice(r2, 0x0, r1, 0x0, 0x339, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r3, 0xe59d3d6f1c11751a, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params, @NL80211_ATTR_BSS_BASIC_RATES={0x17, 0x24, [{0x3, 0x1}, {0x1, 0x1}, {0x30}, {0x5dc3d2167c9a8e1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5}, {0x9}, {0x6c}, {0x63, 0x1}, {0x9, 0x1}, {0x9}, {0x60, 0x1}, {0x12, 0x1}, {0x1b}, {0x18}, {0x2, 0x1}, {0xb}, {0x12}]}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x306}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004040)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r4, 0x0)
shutdown(r4, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0)
r5 = socket$unix(0x1, 0x1, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
connect$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

[  580.524874][T10170] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure
10:01:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  580.722837][   T19] usb 1-1: new high-speed USB device number 68 using dummy_hcd
10:01:35 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
splice(r2, 0x0, r1, 0x0, 0x339, 0x0) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r3, 0xe59d3d6f1c11751a, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params, @NL80211_ATTR_BSS_BASIC_RATES={0x17, 0x24, [{0x3, 0x1}, {0x1, 0x1}, {0x30}, {0x5dc3d2167c9a8e1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5}, {0x9}, {0x6c}, {0x63, 0x1}, {0x9, 0x1}, {0x9}, {0x60, 0x1}, {0x12, 0x1}, {0x1b}, {0x18}, {0x2, 0x1}, {0xb}, {0x12}]}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x306}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004040) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async)
listen(r4, 0x0)
shutdown(r4, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
connect$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

[  580.912995][   T19] usb 1-1: device descriptor read/64, error 18
10:01:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  581.182717][   T19] usb 1-1: new high-speed USB device number 69 using dummy_hcd
10:01:35 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
splice(r2, 0x0, r1, 0x0, 0x339, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r3, 0xe59d3d6f1c11751a, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params, @NL80211_ATTR_BSS_BASIC_RATES={0x17, 0x24, [{0x3, 0x1}, {0x1, 0x1}, {0x30}, {0x5dc3d2167c9a8e1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5}, {0x9}, {0x6c}, {0x63, 0x1}, {0x9, 0x1}, {0x9}, {0x60, 0x1}, {0x12, 0x1}, {0x1b}, {0x18}, {0x2, 0x1}, {0xb}, {0x12}]}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x306}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004040)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r4, 0x0)
shutdown(r4, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0)
r5 = socket$unix(0x1, 0x1, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
connect$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
pipe(&(0x7f0000000040)) (async)
socket$packet(0x11, 0x3, 0x300) (async)
splice(r2, 0x0, r1, 0x0, 0x339, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r3, 0xe59d3d6f1c11751a, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params, @NL80211_ATTR_BSS_BASIC_RATES={0x17, 0x24, [{0x3, 0x1}, {0x1, 0x1}, {0x30}, {0x5dc3d2167c9a8e1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5}, {0x9}, {0x6c}, {0x63, 0x1}, {0x9, 0x1}, {0x9}, {0x60, 0x1}, {0x12, 0x1}, {0x1b}, {0x18}, {0x2, 0x1}, {0xb}, {0x12}]}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x306}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004040) (async)
socket$unix(0x1, 0x1, 0x0) (async)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async)
listen(r4, 0x0) (async)
shutdown(r4, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
connect$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)

10:01:35 executing program 3:
syz_clone(0x44002100, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) (async)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) (async)
capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x56a, 0x8, 0x3, 0x2, 0x1f, 0x1})

[  581.374450][   T19] usb 1-1: device descriptor read/64, error 18
[  581.493348][   T19] usb usb1-port1: attempt power cycle
10:01:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:36 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@delchain={0x24, 0x4e, 0x1}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

[  581.904030][   T19] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  582.083527][   T19] usb 1-1: device descriptor read/8, error -61
[  582.249390][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  582.352703][   T19] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  582.523523][   T19] usb 1-1: device descriptor read/8, error -61
[  582.643356][   T19] usb usb1-port1: unable to enumerate USB device
10:01:37 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f010000000000000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:01:37 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x2c, 0x6, 0x1, @mcast2, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x528, 0x0, 0x0, {[@sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0)

10:01:37 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@delchain={0x24, 0x4e, 0x1}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

[  583.561491][T10210] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  583.822665][   T19] usb 1-1: new high-speed USB device number 72 using dummy_hcd
10:01:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:37 executing program 3:
syz_clone(0x44002100, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) (async)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) (async)
capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x56a, 0x8, 0x3, 0x2, 0x1f, 0x1})

10:01:37 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async)
listen(r0, 0x0) (async)
syz_emit_ethernet(0x62, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x2c, 0x6, 0x1, @mcast2, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x528, 0x0, 0x0, {[@sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0)

10:01:37 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYBLOB="e7"], 0x50}}, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
splice(r2, 0x0, r1, 0x0, 0xfbfffffffffffff9, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delqdisc={0x2c, 0x25, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff2}, {0xa, 0xfff1}, {0xffe0, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x48015)

10:01:37 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@delchain={0x24, 0x4e, 0x1}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@delchain={0x24, 0x4e, 0x1}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async)

[  583.964648][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
10:01:38 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async)
listen(r0, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x2c, 0x6, 0x1, @mcast2, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x528, 0x0, 0x0, {[@sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0)

[  584.183696][   T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  584.196119][   T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  584.205553][   T19] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  584.209079][T10224] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
10:01:38 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYBLOB="e7"], 0x50}}, 0x0) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
splice(r2, 0x0, r1, 0x0, 0xfbfffffffffffff9, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delqdisc={0x2c, 0x25, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff2}, {0xa, 0xfff1}, {0xffe0, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x48015)

10:01:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:38 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x150)
munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001000)=ANY=[@ANYBLOB="3304020700000000ff0100e677915035667cf4a1280099a5b15bc45a1a1763a90501fc4a00000000"], 0x28)
openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x80100, 0x0)
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040)=0xffffffffffff7fff, 0x8, 0x6)
mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'bridge0\x00', <r2=>0x0})
syz_clone(0x40000000, &(0x7f0000000300)="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", 0xcdd, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)="757856df71283fb517b53274510fdd520f4d2315d49a43dcd6935e667c7d396d6ee7ea02a2f6c089f2525c3b682a615a32516c1a18784fcd7a8760b31e291551")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x0, 0x4800, {0x0, 0x0, 0x0, r2, 0x0, 0x8}}, 0x20}}, 0x0)

[  584.553857][   T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  584.563339][   T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.571485][   T19] usb 1-1: Product: syz
[  584.576473][   T19] usb 1-1: Manufacturer: syz
[  584.581197][   T19] usb 1-1: SerialNumber: syz
[  584.783838][   T19] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  584.790813][   T19] cdc_ncm 1-1:1.0: bind() failure
[  584.858149][T10243] device bridge_slave_1 left promiscuous mode
[  584.865165][T10243] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.891925][T10243] device bridge_slave_0 left promiscuous mode
[  584.899319][T10243] bridge0: port 1(bridge_slave_0) entered disabled state
10:01:40 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f010000000000000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:01:40 executing program 5:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080))
setrlimit(0x7, &(0x7f0000000000))
mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000000c0)={0x100000, 0x8, 0x120000}, 0x20)
ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)

10:01:40 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYBLOB="e7"], 0x50}}, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
splice(r2, 0x0, r1, 0x0, 0xfbfffffffffffff9, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delqdisc={0x2c, 0x25, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff2}, {0xa, 0xfff1}, {0xffe0, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x48015)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYBLOB="e7"], 0x50}}, 0x0) (async)
pipe(&(0x7f0000000040)) (async)
socket$packet(0x11, 0x3, 0x300) (async)
splice(r2, 0x0, r1, 0x0, 0xfbfffffffffffff9, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delqdisc={0x2c, 0x25, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff2}, {0xa, 0xfff1}, {0xffe0, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x48015) (async)

10:01:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:40 executing program 3:
r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x10000, 0x800)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2600, 0x41)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000240)="0f6824650f0179f52e3e0f01c964f4f30f1ec60fc72a0f43a86f3c2e0f0f329a670f219df0870d", 0x27}], 0x1, 0x1, &(0x7f00000002c0)=[@vmwrite={0x8, 0x0, 0x16, 0x0, 0x0, 0x0, 0x3}, @cr0={0x0, 0x20}], 0x2)
syz_emit_ethernet(0x1012, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa00110e020f48cef6d9db9a5bd4f059444ac83a8a95f5568565b5763be25a5377d3985b7b0db194533bf08218b67faa047a7521702db979bae9b4a4904dffb00251197b02730f54bf9298309a26d6283bd24f25d92ea14e35d7b62b9cc75f223dafaae691193c6d3ad22bbf643cb60b9dde07ebeb845a1fb70995bf1fcdec31fdeb19116f4e1dcccfcbe4919f446e005af55f6d906bc417610691d72c334c6b3e203914884792fad0742992baa8db0acd1b7b1c841b010b6dc5fec61184775688bf68533898741d92dd2bfac2c535eb7e2bf32bcdabbc364b67e00b5933647542342e78eea4b47e61bdf939abf086b1fe96ab70eae5b1ea690259c78b186fa4462cbdb9c9e27d0427a2c5815e51f5196544b6ca725361b93747e5aa62b10e22bfcb41975fd5debca7aa68c96e99f46128e91201b725951b237e72041ede66bc5bf826ab4a984594b3623e4479c14adda81e42b9806e49dec745c718fca91eb3bba5c10bfec9d34e41fbfdfdfcb3ed92734faaafa205a0338d03506a5e2a02672a6e22fd7a3e50c41f5e7b24dc03d653beb79798f72e69ad8f732b13f9c53594d12bbdaf41f2faf022a473f38db59bd6162ffa9e30073d3c5a3741dfaf01ccd3fe2cd4dd4f30a11b1e34fb03f1e902e4d7e4d46a93a36e46cc5cefce75e83a5a34eaf42cf74903222b48c30147a93f27d7c43e2402f90864ce43afc49670fa31137aa439d1098614606a3d1f7f2e2f457ce09c0f51fc4a08816aafd353f69b426f48fe21870ecc948039ad5bda3c406d41fe6112abca343c03ba566efe7f81891a0ac46fb9892cd304aa0d378c40fa3b30822b7bf922954c9067365b989aa67839de2d8a64233d40b7a2df23eced0363fe83df4ca1f31f59b3f67239df560665650cab25bd5399f46e7e866820ddd406e29f8f932a33b70baed4030c72dbb3d9a5d732990b0682293f28a3c639cfed7067215096dde24030c7d9cf0fbaecd8d885c1168cb86c75780f85f7a51c660c6ab10618bf61aa4f5824b3f31ad1dd1bffd0f0f644b9b1703e12b1ee8f13e4e9954f93588598bc616428bd1fef3493147d4710d9c66b94f3d8d8f7d56a6d727bc84d8f962954d315f3d95e314ea4f685b704e534d4a7c51adde6ac65719989e2196e6273cccd444518fb6145078e3eb182a1707750b75f4895fafdf4015e8430801fc67aaf546b7496d65e719950fbe54167ed3cf55d7627bcef55e894ad8eb30bbcf0a8a0ddc6dc75879c4d42d4fb0fc32f401b3e217fb0c7031cc0e0d2d4b72f4f770e624a526ebc72e083a447879930ff084ada2b6fc86b6dec197ccdbcb95cf7e791b30855e54a6f0640a0705883a915292c4f60b030812bc4d6cbc2a87e4b282f70b891599f037c5ff055cf1fce37d9d40392fdb26e6fb79fd8cf1da831d9b76789ed72225fffb13dc4e8544979bac00d42997792ac84089cb0aca5d0692bac41af09cea8d14e1019d7856b394579f5216ce659f6ee3328d5622337a6db5c9cd850c878160be63ae87bda5ad4e41604628f6b15d0667160be628db0cd668947e094794abfc416d9aac18b7259b644fbc4ff4bb8da80d401137ef1c78040612203fd8df1a87fa8279f283c8b48d02353ba1130aeaa5a5caf35f8277f146851c19152c60855bcb4825a8abe5f545dd23914e6c7ec7726736780180fe541c2cab22b8344fdc1bc58d2a348b1167434f23a2572f6d645959cec4f292d8d73bb812df575cd438009e4779efdb621c90ee358d3552e0b2a4d0e8102c81133a425b0d669682ec6b5bd1c44baab4aabd182d7b1ea0195f4f54c9e275503feb742bae0db11a4207bb8c3735dd8ab6b987da8efecc2cd68764321e0d308bff3ec78a4f77f0de0ce90a94f12e71cef330052a6ac4c921d097ae9541d9728658fbe436933aa5ce7272777358f2e80ae9720c54aad9a21a6ff0e3d989d0eaf152efded2203d392ed541fcdce5933326122e84d37444757d8a4530b8565558d11c2c66d623f86c786df75f3c255bef43c876631970ac139e10a2651ebb7b1765ce94290d47d98b4c33b33610efcd2d919680aca8329b7ee20e1bb257eacadbb38f63fca7ff0e2e2c550bdb2ba1d393992fe299c36eac14833974df3470d00387ed08ad9f95e5b6636a0807ae7c0ee04a60f98ccd425b92144949d8e202a095d377906642d79bf439d09ead93fbca568f574573beccf0a086004d1ac3aee3833a36e1317c9d11f5d7a5ec116469d40c45e8f12baaf7dcc83a0de80ff1906b2bfeb0ddc322c5d14d5808f2cd9e8055b5c11bad837fe2941edf55fbad3fb3d2bdf2d54678af0f7ee4a2a75a8e08ba9b7e5358068436718254078474a0d01f62e955599c8c3a9d41d971f51ba5ef1bf3bd0676b96aa8366a116329cafdc6523142181ed55ccbadfea55b32bc9eb67c5617202ce43f9d5d04298007b16b3360f0f50cae1e84a2ba62db57c11893acea54bd6f8c33e10edd3abf41273fa170f6a523261111292edf87b140f3ced09a7c9678bf6de24e8ac3372422e2317a7ed4f4107138b515a9687503d6541555ae6f3ce510e4dee3b57679f313a734f7f752c0bce9682e712bc19c57fd6a384da90b28c36e9c53722fa22a4748b86890f24c89f09d59134386b85e735b166943d1b5dc15e0997de5e0ade47156a74857877105b5f5ac8fc9218da3ae50d71177d475816d74ac6d2107adcbabcb2a1b8cac15fb277d921f90c3be725050f09f19920e8121ec956eb6f70f5673aa0993a0f7c89e8a06026afffde2ec3893d5914e56b94a3c3b8a2b39f7955009155c1696289767476a000bc65fda86230ec1f49e40d69427073b22e208f73fd0659cf1d0fa023325d99be31a14f749a32d38767bc6dcd5e8fb9c742a99caf315d1e368ed8c05840c474396ff96544e7357e618426a3c0285a6f1e56d5844e76701e2167d30694ae06474e186d2c3a4a6481f7250a9caf659dccc01f1efd7e62f8162397cce891ea0b07749f31805588da140c0071cf13cc46186d5e085e25a72bc94ff5b56824baf8d810fb0cd8c921e41f554dc4351c7950d3b203e86222e29ae9de1e516c808cb9455edd9ce1993a351a74b7ff6702231006ebdca88a086ac6e490080aa0d2a7fe2ba58918cc84cbe7cacd722315d8e5f95a385ead291f1bb8e9f82d0f239673d118202da397689f2b06fda2f50b405baaf70844237d22e9da77362c4bdb3bfe97093c76d7f4ad0a1c57142e0ecfdbf49ac82f68b508f18acdce8363cce082eee07c0e94fd888704e489e722f59e22cb4392b73244c9a8dce8b19414ba35b310f33c5868827bb103f282a85c3579526ba7ca865f0541d72e5dd87b0e3574efe1c7afdf520d1679927135032c3e95501ce0ea2b5c4b64f298b7fe2cb3eec0101ae0d26ac7f590ae620c6d1ea9dba83676c946c64b527477fb5b586ed5c3f040eb10d2bac5c00227a2b93e6eb9ae04f9b7757f7d80d7be860dc5bba483dcc8070bf8a23a24472e713d1b2d79ce24686131b195090493f6149a365c4f46ea33703740c257ca77876304282a01767568396dbd97ea30a780512451ccbfc76455bdb834cbf015800aa328f9e468d04c33ee5ac8eef5abe6cd5ce8aab69124ab97b87c54c1772f46e3cb7bc827e268cf618445a7832fae0e5289185aa6f34aab6c13996c434f1d2fed2bd8c907fa792224782383a56b79f8f578b85dc29fb8fc59acaf0465fb28ae7adb0902e43f387c02d37e9b8ef189efbc48d7b0a8c3dcec97d61490195925c2904b271619825257aee86b8afe283f4b44061f802dd4f2b070573dbe175e34778cbedb7c537e78727356deb8d0f2d9c23e6420b8dcd53aa13fee05beea1eae002d476022d1bb1552f0944d23660143826cd59c066a222e3649225a09c19116dc5d18f9b98ca9147b07adc00bf2c63f2c996afeee074853e3f6f4f3b31b74871240ba863fc584be2f6678cebe20a7999f88756a0c89ec73701fdbed856d770e776b9943b27829b439837db1d78d20255865fe8465c154f28c65d4555ec7b1d34576f1b41f5849e855ecc7bd907488739b51d7064f003445555d22102dbf1c436ea5ff950f72f1ae87d84d477833cdb130a004a8d886480c18fef1b4fba922ef1177c12d6198cab97a0f6219a7484b9def6a6d33d8aa2d3d880abfdba7e367aabafd48f9a1298a0a6b03dbfe08447664754ebb1bb3f861b3ec61541e8d9723fff03cd1d655bc0814d0f15bceefea466a12f3c5fe5e4e84a9d5620a751f8d2df7d331cee20a2514fdd66dbfeca0cf0ce38a5458745128616d05bbf3bd93c5b78741543b233c5dc0f757ddad6a72309c4b45984e8042e448618636717171f944efc710c69197855810dbd1508c828f710b048c05cf9f02be13e8a9bbbd742e5797adbb6a26af6637ca5ac5d391ec49f85854979b4380de20ad3d13a4fc88818a087d3e79d0eab8d0817943b8eafe236b0310ca8eaa4ba1969c463f54a208f0621394fc1ccdd0baef176d9d4498372b5830419b8f1bd454e276258ea8ce5df6657b8a1b42363bd3245061002e4281125c5f9f32b5a6bb41e1866317b3df63046c25de5158be00f331deb6c0e0f0ac7f2012bb3814817e1998f5aba706ece7481008fa5e1adc17e1a0db58bece957347cd793bda504f10de17c46e2eab7d03ff048470482fd4c7cfa0d3e05c9aab8e859f7ac6a674f4ff1298623745e26c5491df9c798df97051fdf99b511b8395d7723cc75b9dadcdfcb9b38e59fe2c5a4e13a54e681d85bf5b4917391b9669c6b03a6e843118ba592df7b91bc04fb887ad60d00b990f1edb08059d4f13b6e2621c301b2991f3a8865ad72c40a055303d587631e36faa0e41227556cf20c3f12c2f2815ba799280818e24ad7b7d41f2a260e8fe9ea7324fae731d3d3862ed4b3943e66901cd61219136701979ad83105c029e55cb059ec8c518acef695eb15e2b1331b59dc6e3fa304448004adca774dc99cf6e32897c66751a49d213050ec1ad3533e6ff726792f387451e29e6179a7578dbf2877784d3f2789ae882c7492db3c27a6379d22c64e3cd29828d35357a2743b1848fb7977ccab1082669549313d2579afbf2903f8b58bfd6a7cffe5b91a323056910f82a7fb8f210b78afc18ebcc2a5bf72fa2c091d6e7bdb61cf40e54fd8c67c2b0d96d3bf6b7eeef11f86db92bb84aac16a3e88f60bf516624868427535c611fe23a5784400cb2e70812f1e1b3cdca81366f7579ad43e0893f79db80655a87bfc376e4b930e7c5ef074050d3dfeb584153354275d08d93ca7a4c06e9d4bbcdeee74047320c4a07f193bd666e0e7f6da1669593481466af4935a8b353671c75444999e2b0caeb335f6ee7203fac07f200b0cd19983ac9fdbff8a1addc1fa39baf701ab59ecdc7ab957f2914591b88d53a91ba2d2a8e335a204c9a7b2990b82ea042ca2bea64d7fe07384d162527a764c440c8cb19fae34afed2105a7ffb1a67a3f550aa1ba3395fb2ff8eccf104ebf07fa5ea497a8f9609d425b9a796eecb2edf6778d29558a6889097788ebae2822be288564d613b094f502656dada0ebc97e726a39d59e15db9ecb73f091affc598287b7fe82480f9c04141073e4b30c77318e953f434d5f75b19a4d5e2a230a0c80cf0db303ee728a1e0af57f9d88140bc64db62531e7ed52ae3de312e690505d6f77fdae9cd8ce4774892e8eda3c785b1511110a3d56b89bd7e69f899df838f3130bedc1a633eef98afddb0d9c39f940590a7e21dc80c58063621e5ede620050c9c7cd23c47d53de125430339"], 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @remote, @void, {@canfd={0xd, {{0x4, 0x1}, 0xe, 0x2, 0x0, 0x0, "5ba9886a8e2a36139cc5af3cb0f4ab36292817db3aa7548fd430fcdef81bf0a0056cd6cf7286347fcb0ef8dd9369efbbd9f0a5adf2c62546d01726335111fb05"}}}}, &(0x7f0000000180)={0x1, 0x1, [0x19e, 0xfa8, 0xa7e, 0xe17]})
syz_emit_ethernet(0xb2, &(0x7f0000000000)={@local, @link_local, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x7}], @generic="893c519f474a8007f521cd44d0b99a76e0e53ec956502b372a25ee80b4fd1ebee2ccf9ea8cc156f32996a402d68d3bf66f014aac7f5410decdeca5ababe82e65a998d525fff5b7b41fee4427cb58978699c47ae5138c3222277231ef82f8e8c8c15a7f7e98b55b4cdd61f8f936c78ca0f4d9e5d01601c731f79b09a19cdad012101b325dd6927d5108f06dc3d9afc8de7e45c3701a9f768ca0eccd62"}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x93d, 0xe80, 0xbee, 0x986]})

10:01:40 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x150) (async)
munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) (async)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001000)=ANY=[@ANYBLOB="3304020700000000ff0100e677915035667cf4a1280099a5b15bc45a1a1763a90501fc4a00000000"], 0x28)
openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x80100, 0x0) (async)
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async)
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040)=0xffffffffffff7fff, 0x8, 0x6) (async, rerun: 64)
mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) (rerun: 64)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'bridge0\x00', <r2=>0x0})
syz_clone(0x40000000, &(0x7f0000000300)="11518dc622cfe10cfb5334b2ce6bd4ef3723a0454b8edd5100d929174690ef17cf095f9b2cf83b183b4de08aa4485b34afae952a68a656faec73fe7d389858700c2cc2ffd4dcb3614dc0cb2ee2601abe0b28360f92b6e89538e63953d1796123c85015f72e7ea0cb4da2073e9f5a6e34884ed240afec8b718d7a78b9c5dc5381b4e1b4ad9d9f8f2d646b8b819e2e30cc1382512a2b82087f7bcd653bff373f39522835513f095f8cb8ec01fa6d309e926b3da23dd250f76ee7d43ebed1d4cc6973885f1dee59ba493e927339f615a095b59a5ceed1bdafaac947975da55f2ab4b0b5e2c9af026dd8a025579f553eaabc459d1a7ecd4f909ff04afd267daa3c1ba789ba709f73fe15788eaecd31583e13fffa6fbc5977140e1f7e56d642aeece16e02edda1435c95907509234d88e79fded3c4b5b9bbe2ab336a8d71f1b047acc9d36d92fdf818dca5a5b77221380459030baa822d0b02bbd5ff6388eb2cca19b55dd9613139c8fef1492c74c8fa136041f3140eda04adbeed34d04a44ed91c5f3f68afb3d7c9043603bc3af4bd56d892b172de28e79d31240097fc88bbf25112455fc43549bec00cde33d9e0856896de4586606817c7e25072ea496183c00190e77b2f2c974f935257a4c9c449b61debfed3b057725db35e145f3cb821571c16eddc24f42c9b2358a959ae02a4b044223f4ea63d0ad6cc11ea1fb4eb1d2a0ddf05f62f46e4bbd77500e96d196f116cd129a239228838b7164847666f6824800565fee6d9e5bb4a9b51a30cf5bd34855827f5d4765d2e932941f3199ce550258b0f55a3ca0039560e32727fdbba24fbddc1d7b3845eaa4690c0a49a60d9072d57e1be80cbf1b1bd261193a907f987bbd9bff522e1a1f1ed90c83daa0ddd7fb9050e7fcc6de6dc62173bb3d8a8eca90dcc0dd49317592ec4f1aa0239728d16c7e5be7471b2059bff7ee5ccc5dee9d5b05c3a7b6f56ec3153f9f31886ab59e68b5f2e5b7e8fe6b89330f37929e9bbf2f48adfb9bcde1822c021cccf5e8fa09c37d1cdb2814df6018a18c99fe0dbe7522330993e064f76341b9f250e95ad39e4e9974a749fe547696384fdec1a211cbcbd791ca7340197dc2abf493fa83eed3c7ae05989bf277c4381f6a8bb815d8508ba359fc2ecb797956513e2e900b254e8e8360e09bf8379ca06344f98926eda900c6a282ad4711a91d847592f99fc86f740a3667c4753f85dbfbe1e6f72cbb9181b2c52517ad94205bfdca5686aebb6e6692adcaccf36176b4af4e05b72829c577da74259db682b108f99bf13d3f3ad6776aa02e6047399e7f91e4d21244df3d3a6f79f6796416330585e751d5a78ab8a710539d18e83f37c20678cba64164d90ebab906f491fdac2a6667df71e77c2d85133f38f6d93a81d59c4dd07c41ce6792ee943abdb68eb28258bafc5289bcd396468905e734f0e3741f9d2ffef1a15d0c22f1eabdcb7ad2ab9d56f474d9ee21e4da5f44cd4cc502a2e81641303f1f40a2778b309e132842fa19555e474a2b4a11fa811c3b61853bbee0f6c90eba562980a2784b547ca5a46dcf1540484b099e86f12615771b82cf206d931c649090ef3c86a459f9fd08baf73070685dedbf0391d802b382b60958ca0107fb15d271f3b3e901fb0232d64ab948be7faf757d3c1e28dfce624dca1821ec10c3fee8d18a8443782b56a621de077b9c3e782fe54202a88b5203288f320566af21f255300676430fa5cb23074e00ce8a536c842960696f92a5ddc2ffb3cd9e21a56a00b21d0a45e0886a7c7c26c0f04c6177a5132ad5eed5db55ee004eba70a5775a411717d959fe4ffb55f816130351159aa4900a130f08a9c3bc36f405aac4f98310990d6a82d5eb02aedef114cfb51c3a2a48e2cdcf52b3457d8330f486a3435bf5bf5d7d2b9e618132d4d6e5a131e023d25894c2f559c249a8f33bdcbdadd6f26a16d57628cb99659089556b15018d904364588d321f405c71b130ca51bc387e363e4ab6ebc4218efc2f6fba083fa8063b10f08714c9adf339df86be0e4247a68d2e8df2c0bb7d1583e6d79c977f1a53c7485584cabb3c90962bfdd9f962936b33b166f4d7cd930fa758db2fcfcd25d0bdc3a699140ddca92ca9bbfd4ed4318b9649913add95305c5083f8ad699f5ed494d72977ba6440cfa41aebb8b5c26ea646e24d9a4fe54f4f6c1105d4a1d28b2ee4f9ce283cf707282a8dca1c9bcf0766ff7d9ec4cc05fd3bb158615a6d8a46d10f3e1e10a9cbccc44d30a48d5290215df881ebd1520a1069d4300599bf7305cd18c945a4062175a6821648f672c120d1c53f54b7b4e0179db48b9ed923a222a0d08bfbafc57d88e62a933c3d816631bcbf9416d01862bd5374c4bb5a2fa00372a970503538080f931427de40a0d13e525c64a192ff601e2a98de3d45c34e8a92b02ba57f18d62288a85307453fa3e3aae4a674dc3924b529a941233e5a51c0711a37434f079b404908f022ec37bad2f842a1778fab0f001f7f776304bbce73b6f8c257ba0aac077e1668a5e4ce3d8e47b62f5b7cefd5caf6e172125754e44a8e9b88e4f61591e877ce9e267c73c3c4e06eeb600137e2b23a3f788e88a6ff3b8b805fd70e6761e3c03b75260f7c12e447831c48640122264930740194d9b407d6712357daa73d5ffe7a12ea864f36cd46e430a2afa2462ccbae98395c47986bd571cf5253b06ea3c3d4a88139ae1d353349ddf67e75b08037b51bb7fbf2ad905c059251e622dbb83ad6b5c931fd630bf931f6fd7bd399894267eb0d7f7280f510aae127a6fcc1a9c71dc4aafae39a30e4a985a1ce4ab24bb311fdce2c46bd34371f4d33a6fb797126daea0b74ea82cff6bf54fe3f13391a4c7868aa3b2bdfb11e0943389c5948f249eef6256146f36500d576c5286577b18b54fe054d63e88155800bb426282c765122ef4c0bc9e85f8e3ff28dccb3a8a19fc0a9cde63999a472a40574740f148beee3fb65cd6ce87ac1d5119ab49397ce345434229f9edaf7891ebc93f2c851f1ca541c2cb767386a5eb8bebda7bfe67ccc1f8fe78c58ca55a240a268efa6b97e574968b4c51b4eff6b4300941e69bdaa651c3602feb3e4fe447167fea03a4274dd6859a90a9c23fb88ede163b3e033459c6aec4f78b5033024c2879b03ad49401b68b0e18040a362ca500f98ec87045f6e52acaddead164b01709535674bd39866564e3b4f828879e3cb261d4c19a8dcf5eb96343b24ee0569670f9a263722cc2e6446b95b1c5a321d82aae6280c77638b282c4bf8bfd196153c8af5ee0e980059de6c3334e1478375fc04e7ed4add461f92461da66d8a6969b58341955803f1aa8ff39605a11c81f7242b851f831f240b664700119be0af73942cdb95509b05e4acfa18f0cd2d12ada87a2983c89348e34c667381abb1c6f5e7ada4c349a86e4b6a35fc6b502dbac49da0a3a0c268e3adcfd7f16bb456da8fcb2a1efb804d8dd5ea42358f11a83c8160b9cbffd2608ba54179fe72cea3fa6cbc45cc0ae13031bfbf55628eaf724a145575374d49ca14eea3920d2918ac88d489a263594b2ac82406d3e65bfbd24984ef6713bb27cc0b5d820e4a2ded12e48f862d0c3027d1d3a3aba4c8319e30e73760648b6dcfc065341971c63bec117aecfeaa51d2e9b64e715fc3173f82f0b63faade5940a04a5b12479c8889f2258e92b32fbbd366cbf42109adcb08292d7118beb3b254ce72406a133a2eb1e5523a9b3a5cc7ee68855913018bb84714f0f174fa5955411d02166ad2b2478cd94e72a2a96c9041a04ee47bc298723d79fb3ff6f8657a687beb482ee5282c35f4f4a05eca0224b2b54e47d7a925a55e542f18af9155eea2935e81d21a0cd1c45a09214b3df4bc9441c43aefc16e3165bb28f2a32b69ed7bf15dfc513f96d1bb5905248ac6ce54ddf6c8115e47685728780817dbe52dc0dd16e59fe46a19d2aa30ea26caecde075dfd9c9973a73b18d641e8abc260e9d0ec736d6e4e9feb1d7d34de55b9cf0b6838a70fdbcde4faf216df5edbcaec9796d8d74914912e0da1b445de0226c4d045951448b0b16072ec0b026c1959c8c07bd57c33b1dfb73dd8eff63e96e81858d9e9879a90b4b0dc953b1c176fbd461084c465cc10713f4d847828ab163dffe04753e91d5bf4c715e728d46cb46ea79159db2ee65e86c1e03edfc7d364f57a39fad26c7d95c8228b3dcd4286fbc47a5f21a7c1d959ae2ea947314ef392bcdc7ceb3f4da9332edc22fd9ef17ca6d9b5678885279aa7874634ffdd17721eda50d03d37245f9966973c0231e903c9b23b6a6f1736ea75e13638d40b7f5287d2f5f429411aa4cb7a269f98e4426d7b8774b8dde9be8941daeda5add77a4c5558183cf4b22cb51d1d93f279ccff8ef2bb3ef648a1f2bbfe8f6fe2241ac35833657d5fe0d203af7d2b7514599d968f62e19de88b6d511f9632bfaaa0d92df6eb9f76c50093a75fe76d847f7f7710ed76074ca3b6a9a9ecceba368708714c97046e6797f37e7aa44d7044467d0768dedab10c4930e79e342fa3815f9fe95e52ff779e6364b097230768348cf8680d48ec13a92c9ec944bcd7a902413d232f7d222621423d8a3d2aec5b39e6f05c3230788d0621be0831541415d113bfd6ed641f503655a", 0xcdd, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)="757856df71283fb517b53274510fdd520f4d2315d49a43dcd6935e667c7d396d6ee7ea02a2f6c089f2525c3b682a615a32516c1a18784fcd7a8760b31e291551") (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x0, 0x4800, {0x0, 0x0, 0x0, r2, 0x0, 0x8}}, 0x20}}, 0x0)

[  586.568709][ T1021] usb 1-1: USB disconnect, device number 72
10:01:40 executing program 5:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080))
setrlimit(0x7, &(0x7f0000000000)) (async)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000000c0)={0x100000, 0x8, 0x120000}, 0x20) (async)
ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)

10:01:41 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x150)
munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001000)=ANY=[@ANYBLOB="3304020700000000ff0100e677915035667cf4a1280099a5b15bc45a1a1763a90501fc4a00000000"], 0x28)
openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x80100, 0x0)
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040)=0xffffffffffff7fff, 0x8, 0x6)
mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'bridge0\x00', <r2=>0x0})
syz_clone(0x40000000, &(0x7f0000000300)="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", 0xcdd, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)="757856df71283fb517b53274510fdd520f4d2315d49a43dcd6935e667c7d396d6ee7ea02a2f6c089f2525c3b682a615a32516c1a18784fcd7a8760b31e291551")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x0, 0x4800, {0x0, 0x0, 0x0, r2, 0x0, 0x8}}, 0x20}}, 0x0)

10:01:41 executing program 3:
r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x10000, 0x800) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2600, 0x41)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000240)="0f6824650f0179f52e3e0f01c964f4f30f1ec60fc72a0f43a86f3c2e0f0f329a670f219df0870d", 0x27}], 0x1, 0x1, &(0x7f00000002c0)=[@vmwrite={0x8, 0x0, 0x16, 0x0, 0x0, 0x0, 0x3}, @cr0={0x0, 0x20}], 0x2)
syz_emit_ethernet(0x1012, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) (async)
syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @remote, @void, {@canfd={0xd, {{0x4, 0x1}, 0xe, 0x2, 0x0, 0x0, "5ba9886a8e2a36139cc5af3cb0f4ab36292817db3aa7548fd430fcdef81bf0a0056cd6cf7286347fcb0ef8dd9369efbbd9f0a5adf2c62546d01726335111fb05"}}}}, &(0x7f0000000180)={0x1, 0x1, [0x19e, 0xfa8, 0xa7e, 0xe17]})
syz_emit_ethernet(0xb2, &(0x7f0000000000)={@local, @link_local, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x7}], @generic="893c519f474a8007f521cd44d0b99a76e0e53ec956502b372a25ee80b4fd1ebee2ccf9ea8cc156f32996a402d68d3bf66f014aac7f5410decdeca5ababe82e65a998d525fff5b7b41fee4427cb58978699c47ae5138c3222277231ef82f8e8c8c15a7f7e98b55b4cdd61f8f936c78ca0f4d9e5d01601c731f79b09a19cdad012101b325dd6927d5108f06dc3d9afc8de7e45c3701a9f768ca0eccd62"}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x93d, 0xe80, 0xbee, 0x986]})

10:01:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:41 executing program 5:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080))
setrlimit(0x7, &(0x7f0000000000)) (async)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000000c0)={0x100000, 0x8, 0x120000}, 0x20) (async)
ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)

[  587.162978][ T1021] usb 1-1: new high-speed USB device number 73 using dummy_hcd
10:01:41 executing program 3:
r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x10000, 0x800) (async, rerun: 32)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2600, 0x41) (rerun: 32)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000240)="0f6824650f0179f52e3e0f01c964f4f30f1ec60fc72a0f43a86f3c2e0f0f329a670f219df0870d", 0x27}], 0x1, 0x1, &(0x7f00000002c0)=[@vmwrite={0x8, 0x0, 0x16, 0x0, 0x0, 0x0, 0x3}, @cr0={0x0, 0x20}], 0x2) (async)
syz_emit_ethernet(0x1012, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) (async)
syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @remote, @void, {@canfd={0xd, {{0x4, 0x1}, 0xe, 0x2, 0x0, 0x0, "5ba9886a8e2a36139cc5af3cb0f4ab36292817db3aa7548fd430fcdef81bf0a0056cd6cf7286347fcb0ef8dd9369efbbd9f0a5adf2c62546d01726335111fb05"}}}}, &(0x7f0000000180)={0x1, 0x1, [0x19e, 0xfa8, 0xa7e, 0xe17]})
syz_emit_ethernet(0xb2, &(0x7f0000000000)={@local, @link_local, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x7}], @generic="893c519f474a8007f521cd44d0b99a76e0e53ec956502b372a25ee80b4fd1ebee2ccf9ea8cc156f32996a402d68d3bf66f014aac7f5410decdeca5ababe82e65a998d525fff5b7b41fee4427cb58978699c47ae5138c3222277231ef82f8e8c8c15a7f7e98b55b4cdd61f8f936c78ca0f4d9e5d01601c731f79b09a19cdad012101b325dd6927d5108f06dc3d9afc8de7e45c3701a9f768ca0eccd62"}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x93d, 0xe80, 0xbee, 0x986]})

[  587.371491][T10280] device bridge_slave_1 left promiscuous mode
[  587.378737][T10280] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.395067][T10280] device bridge_slave_0 left promiscuous mode
[  587.401837][T10280] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.564110][ T1021] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  587.576268][ T1021] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  587.585677][ T1021] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  587.883180][ T1021] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  587.892789][ T1021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.900926][ T1021] usb 1-1: Product: syz
[  587.905385][ T1021] usb 1-1: Manufacturer: syz
[  587.910107][ T1021] usb 1-1: SerialNumber: syz
[  587.986829][ T1021] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  587.994101][ T1021] cdc_ncm 1-1:1.0: bind() failure
10:01:43 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f010000000000000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:01:43 executing program 5:
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503001000092140000001220f0009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f000000daf73248289e2f72b3"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x0, 0x5, 0xf, {0xf, 0x10, "cb3fe07ab3321cb61d28a1c62a"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x7}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0xa6, 0x1, {0x22, 0x8e3}}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x0, 0x5, 0x95, "8e27e1814d474e9d139f4713ab670faa6bbdf050682face5128b94b2c0e20a9cb53a843b06d85851e63a5acf8284bd6b4dce17d7ed2cfd1c14a368a3cf9132aced491bf327b04cdc1cf96f8869f12604e0a5ddc812757dd24a5cc0632d6219782cfd2b64813db218e16084f04d61ad1b5f63d824d915dbbc5ad5ed4619545728c14a6ef3a2af0107567b512e4ef0c31f5c46b39759"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x1, 0xc, "c5863c434f1103b006b5858d"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1e}})

10:01:43 executing program 3:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x181001, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_bridge\x00'}, 0x18)
syz_clone3(&(0x7f0000000080)={0x40000000, 0x0, 0x0, 0x0, {0xb}, &(0x7f0000000300)=""/220, 0xdc, &(0x7f00000004c0)=""/127, 0x0}, 0x58)

10:01:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:43 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x150)
munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001000)=ANY=[@ANYBLOB="3304020700000000ff0100e677915035667cf4a1280099a5b15bc45a1a1763a90501fc4a00000000"], 0x28)
openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x80100, 0x0)
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040)=0xffffffffffff7fff, 0x8, 0x6)
mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'bridge0\x00', <r2=>0x0})
syz_clone(0x40000000, &(0x7f0000000300)="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", 0xcdd, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)="757856df71283fb517b53274510fdd520f4d2315d49a43dcd6935e667c7d396d6ee7ea02a2f6c089f2525c3b682a615a32516c1a18784fcd7a8760b31e291551")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x0, 0x4800, {0x0, 0x0, 0x0, r2, 0x0, 0x8}}, 0x20}}, 0x0)

[  589.830647][ T3546] usb 1-1: USB disconnect, device number 73
[  590.203567][ T1021] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  590.333145][ T3546] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  590.416746][ T1021] usb 6-1: device descriptor read/64, error 18
[  590.721287][ T1021] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  590.745575][ T3546] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  590.755910][ T3546] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  590.765053][ T3546] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  590.953250][ T1021] usb 6-1: device descriptor read/64, error 18
[  590.964096][ T3546] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  590.973456][ T3546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.981591][ T3546] usb 1-1: Product: syz
[  590.986044][ T3546] usb 1-1: Manufacturer: syz
[  590.990791][ T3546] usb 1-1: SerialNumber: syz
[  591.068724][ T3546] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  591.075842][ T3546] cdc_ncm 1-1:1.0: bind() failure
[  591.088153][ T1021] usb usb6-port1: attempt power cycle
10:01:45 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x150)
munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async, rerun: 32)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) (async, rerun: 32)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001000)=ANY=[@ANYBLOB="3304020700000000ff0100e677915035667cf4a1280099a5b15bc45a1a1763a90501fc4a00000000"], 0x28) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x80100, 0x0) (async, rerun: 64)
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async, rerun: 64)
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040)=0xffffffffffff7fff, 0x8, 0x6)
mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') (async, rerun: 32)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'bridge0\x00', <r2=>0x0})
syz_clone(0x40000000, &(0x7f0000000300)="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", 0xcdd, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)="757856df71283fb517b53274510fdd520f4d2315d49a43dcd6935e667c7d396d6ee7ea02a2f6c089f2525c3b682a615a32516c1a18784fcd7a8760b31e291551") (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x0, 0x4800, {0x0, 0x0, 0x0, r2, 0x0, 0x8}}, 0x20}}, 0x0) (rerun: 32)

10:01:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:45 executing program 3:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x181001, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_bridge\x00'}, 0x18)
syz_clone3(&(0x7f0000000080)={0x40000000, 0x0, 0x0, 0x0, {0xb}, &(0x7f0000000300)=""/220, 0xdc, &(0x7f00000004c0)=""/127, 0x0}, 0x58)

10:01:45 executing program 2:
sendmmsg(0xffffffffffffffff, &(0x7f000001ae80)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x1, @random="df273fbe601b", 'veth1_macvtap\x00'}}, 0x80, &(0x7f0000019640)=[{&(0x7f0000000280)="9a471540c8b7989283b4b445e0335efd21459488ccdc00c7d5270f9e4de0cbab90b407eeee207be5d32406e808b618969aa4104f04b7d355e86502bef7b755ed85719a08874a694599c7b803e2279657f7a40be4eb1e9cf416ca9f5fedd5cca52fbc45cc7a26f61c06c0999e62bbbcf92e22051f81cb538ebf98", 0x7a}, {&(0x7f00000193c0)="4bd14e292647d8f78d1a17363b1c9be75e4f3971faf1d97818e96de4060bbcaef2e5223a6804b91785f11839ff4bfb19a7e67a49dd6951fc6c7f5ca973c0df7989de7ad39432d548e0908f443e3a7b2ae7a3419211fdfd151e98bdbf28797eddf046a15fa0e317ef36f418b3e0d7d9df0b5b390b3f657e7506641316db2850312437577d3e133df5bcda9eeff9b1feefb39bc7178cf125c62deecac6bd4c7cc4b7d336f7367f94dde0dbc26037423b075d313d16773b3a8d4ce17193d5608a245f140c0588873eac46e871aa0775f6b0272fdfdf2ddfcfcb6b4f0914587ef383eb9cf3", 0xe3}, {&(0x7f00000194c0)="e5826cdd2ef8f9ca8b65f0877319200739dd657914135b773dce2b9a1ffd02765f3e1877704841b0a90451fd7725e4c7951e2ff0cf500d82af5c7c154908e8c15a45e6fe28b36a22f47823e70a7d77dde799538faa73b87afd1e300cb738146d8696c7ffd504d8125663735bf556bc974f17c2eede21d03c2b4d61a845e3625ea19d2666d4391172b325884a0a3453973c922bb71c56c7f9ca53", 0x9a}, {&(0x7f0000019580)="fcfddc5dedc90b8abf6c02843cf503b211706b2d9b1e57709c1156746c45ffe26ce54a3e5ba8a4bc85e4911fe4b62ae36c3b095cfef2d88ce4c12d76e361b486b3feca79c74878e5dfaf65868c2a8a7cf375d16765eb04498d90e63f09d2a1c926f46ea78663fdd2bdc99d5e27e2e9be398e2767c18233b2550797176c309b1827200ef559594a4d39", 0x89}, {&(0x7f0000000300)="f3e6c235c40d517b16116d5fd54b00a760593f82e8c0ed4edf87748997081164d6f2d40dee14ccac79e1db14f252c910c944c916c7c343570d8f70966b0c57dcb8db2a3bd93d34ef51e956be6d4b19f6a235c2841b9e948fdd32da24193e6c238a9c9a1a3fd43cd7ba87944bda45ce21a50bab8573390cafc18444f01ca1c213", 0x80}], 0x5, &(0x7f00000196c0)=[{0x110, 0x103, 0x6, "7f4c7c0e1b6fd6474445b30e2cae9cafd78c805b0f8792f469e2605df46663e4fe636f102a588a835053f992f20a8c6dbc9a0c813e9bbfc5187d3f802c5b8ec0080096abc48107ba06b2c624408af4433e8fd5f3a499b955171a34d5752ec4900a456215fb18e1f4b92205479c4594ea98429f759d6eb190635b9c423bcade2299a468df08f3c8bd4c4cfec1ff8318674b41b0ce8f391eb0c78fb8ba2f9189e215fc955073e6cead89f94e185610d30ebdde2e0051b8e237cefc21bc87a483f1e349250853fa283e509d7207c9599f001ef51d47a0ace769e333b3becd022a329beec8a0a0e6a302012e82bdb8af47b5fd3946448c1629fd5020a60251"}], 0x110}}, {{0x0, 0x0, &(0x7f0000019a40)=[{&(0x7f0000019800)="447ef1d1cfd4ece4a1c9412a8d10d6b0ef6910c693de945d75fd0ad06ceb03dae204556af5520b8086c4c89f7556b288f75b348ddd1a8ce6244a0f60536686ee2bf3c897bca2766b098cb61bfac38c3d8cae76937725344ee57cb1270599b3fc1bf387069e9f5675dd7932b3a9212a291940de851dfe1521f720292a55170e2600292421b05add22e4ba20aa8e872031926984e63d8eb3b1eac64810a94d8b4b82705860131e6f151cb8014e527f7323773a32205cd5f0bad04b0966daa6d44a5f9c6adf0345c4557a07d4dd9d35633d0ccb88bf3690cbb38375292fea00c55577", 0xe1}, {&(0x7f0000019900)="a75632133b325799324300c4bb75aed5b7ceada86399cda29a7f0d028b0ea3ddec40a72e3672e79ac3007458bc6ebaca0e03c43dcef887af76a60679e5b1ee2c64286d718f4f21240ed80e8d767d1e953e322ac5071a0fa3e543775794a3e1a8c6e9c94e6a683a2b02167af828c4ae2ffd0b7b40d72f40b49a473f9a58fc85bdd7bdd8427a931860ff921a0f0ca2867b708100b369", 0x95}, {&(0x7f00000199c0)="b20c903a5471ca61d570f7a81301ad96e6ef248f659c", 0x16}, {&(0x7f0000019a00)="2e9a5d4e4049e1b28e1ecbf514713fecef55d8f274ba8c4f38227eef1c2aae772d53448b4b7c915898e1891e8f1b27d97eda385716dff4fe1d45", 0x3a}], 0x4, &(0x7f0000019a80)=[{0x108, 0x103, 0x2, "77429d4345ff93460b828e8cb2068d907a2cb194e5b0a6d45d360eec42ccbb39af2fd85138a2445c5eb01cc6fe746cdb5f79ae0e5443f0daace86164b6daf6d97d0d267cabb797f81aab76cc07289787cd6bc34e199199570f98dc2b3e917954c0fca1af2e5d2021966db4e87eb662c5a01e8abce4aaccdef8e690cc9f9a20e3c2a1f7be7719957e04eaf01d09195acdc471f72e0368c2199c6b1a4e3f8564854b026cfc13610c7bcd7b01877731e3516d6595889589fea77c62571cf2236100fd6ddd50832d34a58bb099a4e9045c44a43ecbab7a6ca7e864213e3b54a39cbf2602353d717623c84dcea230bebdff25b382c2fbc9fc15"}, {0x20, 0x119, 0x9, "0c4446740ceeff542080c7c1"}, {0xf8, 0x1, 0x0, "d0d5bf347852fb1736dd057734053e10b9f3cc4c2ba4441a0eb92352508c6bc2a0324f6bed1208da478233c40dabbe23f320703edc6b8ab8940ee14b32483376cd88e65ff9423057828893c13bd53d2740ad42ac175e962bac97c0c15d25dc32d7ef441518814c58fd44ae2116ca8788b81fa015c63f8734e4e336f9b32d31e4a482c827be1591c9d074cbeadce0f29526410adca99d61a9725e5a90e27932f74baef84108a187d4c895e5bc292c7731c49146b0c2852d4e631777660614315c32b107f171d32ab9f68be3d824a7ff2a7fa63d63b8cf6c039b52401141dff7f193494e820c"}, {0x28, 0x0, 0x1, "6c945eeaa91d96b3d306172725309ca9e25df6282dee7e"}, {0x1010, 0x111, 0x100, "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"}, {0xc0, 0x84, 0x9, "75c2e81fd6b3605d1d1a2eeeb2108fb7a1bfb4fed949f4dcb3dff3a738a3b0f1fccf152aec111fe1a39e54b080dc8d8c1b7faba568f11501b87915c2a9df58d48d9fbd0f1bc4b17f0245a7da617d8564bf2dc7357c542a03b99d674f5985e06ce1a41e5f546534f281182c55045c3bb5c7e4994fa2dea672d1129e710b7e8c3f712b339a1b13ad2b0a03dcd2ca941f84b0b0eb1f71e0855d4c3e817a23753b4d09eb85acc80a0726f8661db10fe4"}, {0xc0, 0x112, 0x10001, "86b8356c5b8e31b9b0066fb9b97549a92a97dcc3f6fff2a784da889e887afa61c67907749f78b6fd6376f26fdc4aee8fbd1af47493082a65b2aa6a382ca6bf13f5d4a8c32e94cc45286fd5f020646cc61d6288bde4ee4028f9d99dc558d1a6d5acca7578183d290f9dc96d584a98c1b71d961706ff90bb359990a755b5b6dc972fd6a0fe5f198946e4889d3b1730019a28a40e857e5ce6df11f1e16ba43e56cd8e2bfb492809c562a912"}], 0x13d8}}], 0x2, 0x4044880)
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003120000000003"], 0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f00000000c0)=0xc)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503001000092140000001220f0009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f000000daf73248289e2f72b3"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f000001b040)={0x24, &(0x7f000001af00)={0x0, 0x30, 0x6d, {0x6d, 0x30, "2e02a33807ea7467298fce59950c0ad8103e38566c7962c821d53465dd5fc5117885398f9063570f1d7984d8126b993cfd902e097afa23686789b19f595ed019649cb42e7c49b27974b410267056caaab04e2e419c434d711f3bada59df2b1f5487ded7e2b94fd5e216b14"}}, &(0x7f000001af80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f000001afc0)={0x0, 0x22, 0x11, {[@local=@item_4={0x3, 0x2, 0x2, "b5b03af0"}, @global=@item_4={0x3, 0x1, 0x3, "f875ad6a"}, @global=@item_012={0x1, 0x1, 0x9, "93"}, @global=@item_4={0x3, 0x1, 0x7, "b3063b71"}]}}, &(0x7f000001b000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x311}}}}, &(0x7f000001b300)={0x2c, &(0x7f000001b080)={0x40, 0xf, 0xe1, "a0cfca96989cd9aa85904ae23323f8f4eef8a4a86c88d0246f0a342296a302cf8e3abcdb94a13c056d8c463262fd5829de87b4574013d6ea73ccd9e1d37ee40926a302d23e6cb542038078f9d8ecf284cad61e4b9363fbab49d3ad2dccedea9d1fcac1888f5abef23f5424cb61c6f518cbb1d0a486157bdcf3fb1164b456a0658b0b95d94b530680afc67211e59c10eb8ae6f803193059e1298579a74ce322f467edbf4f105b0aed70d93d348612cdd59e86248157aefd4443d2fed442b694487d39fd86ce750353974405d12e1334ddf6837e8333576f36542bf75693f0496a93"}, &(0x7f000001b180)={0x0, 0xa, 0x1, 0x80}, &(0x7f000001b1c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f000001b200)={0x20, 0x1, 0x96, "6fefeb8f7641b392052f2b7e0df0514969d919d406e7d7925d0db2618d4ff94d59a6127afe6594a5a890c3e76aad20f069b1cceec88cee4cee4d7abf1dcec3e905c48f5728dbc2bcbcb193d478b765fd6c33b388674c3031adfc09a2a9b8e3b66fc4ed9ec85d4284b0d400dead3df98bf611642eeee566bf3bf5913fdfe8e6c12a897ee64c4321b309d5ad89a31f7444be25b449ca08"}, &(0x7f000001b2c0)={0x20, 0x3, 0x1, 0x7f}})
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r3, 0x3, 0x19000, &(0x7f00000003c0)=""/102400)
bind(r1, &(0x7f0000000140)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[])

[  591.532980][ T1021] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  591.774594][ T1021] usb 6-1: device descriptor read/8, error -61
10:01:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  591.902920][ T3546] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  592.043271][ T1021] usb 6-1: new high-speed USB device number 75 using dummy_hcd
10:01:46 executing program 3:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x181001, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_bridge\x00'}, 0x18)
syz_clone3(&(0x7f0000000080)={0x40000000, 0x0, 0x0, 0x0, {0xb}, &(0x7f0000000300)=""/220, 0xdc, &(0x7f00000004c0)=""/127, 0x0}, 0x58)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x181001, 0x0) (async)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_bridge\x00'}, 0x18) (async)
syz_clone3(&(0x7f0000000080)={0x40000000, 0x0, 0x0, 0x0, {0xb}, &(0x7f0000000300)=""/220, 0xdc, &(0x7f00000004c0)=""/127, 0x0}, 0x58) (async)

[  592.175205][ T3546] usb 3-1: Using ep0 maxpacket: 16
[  592.264814][ T1021] usb 6-1: device descriptor read/8, error -61
[  592.306979][ T3546] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  592.317419][ T3546] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  592.328725][ T3546] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  592.338985][ T3546] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
10:01:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  592.349027][ T3546] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  592.389025][ T1021] usb usb6-port1: unable to enumerate USB device
[  592.502386][ T3546] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  592.512096][ T3546] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  592.521015][ T3546] usb 3-1: Manufacturer: syz
[  592.697868][ T3546] usb 3-1: config 0 descriptor??
10:01:47 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:01:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:47 executing program 5:
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x0) (async)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503001000092140000001220f0009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f000000daf73248289e2f72b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x0, 0x5, 0xf, {0xf, 0x10, "cb3fe07ab3321cb61d28a1c62a"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x7}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0xa6, 0x1, {0x22, 0x8e3}}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x0, 0x5, 0x95, "8e27e1814d474e9d139f4713ab670faa6bbdf050682face5128b94b2c0e20a9cb53a843b06d85851e63a5acf8284bd6b4dce17d7ed2cfd1c14a368a3cf9132aced491bf327b04cdc1cf96f8869f12604e0a5ddc812757dd24a5cc0632d6219782cfd2b64813db218e16084f04d61ad1b5f63d824d915dbbc5ad5ed4619545728c14a6ef3a2af0107567b512e4ef0c31f5c46b39759"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x1, 0xc, "c5863c434f1103b006b5858d"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1e}})

[  593.074935][ T1021] usb 1-1: USB disconnect, device number 74
[  593.145079][ T3546] rc_core: IR keymap rc-hauppauge not found
[  593.151106][ T3546] Registered IR keymap rc-empty
[  593.156879][ T3546] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  593.170447][T10316] UDC core: couldn't find an available UDC or it's busy: -16
[  593.178092][T10316] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  593.241149][T10347] UDC core: couldn't find an available UDC or it's busy: -16
[  593.248911][T10347] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  593.280312][ T3546] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  593.307778][T10316] UDC core: couldn't find an available UDC or it's busy: -16
[  593.315716][T10316] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  593.330583][ T3546] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  593.345582][ T3546] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input93
10:01:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  593.490577][ T3546] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  593.525848][ T3546] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  593.573752][ T3546] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  593.581206][    T7] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  593.624851][ T3546] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  593.662103][ T3546] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  593.693432][ T3546] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  593.712914][ T3141] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  593.733585][ T3546] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  593.763895][ T3546] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  593.783967][    T7] usb 6-1: device descriptor read/64, error 18
[  593.797550][ T3546] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  593.833118][ T3546] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  593.876416][ T3546] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  593.884733][ T3546] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  593.959445][ T3546] usb 3-1: USB disconnect, device number 57
[  594.063549][    T7] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[  594.073482][ T3141] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  594.084328][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
10:01:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  594.254171][    T7] usb 6-1: device descriptor read/64, error 18
[  594.313966][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  594.325659][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.334308][ T3141] usb 1-1: Product: syz
[  594.338604][ T3141] usb 1-1: Manufacturer: syz
[  594.343519][ T3141] usb 1-1: SerialNumber: syz
[  594.373160][    T7] usb usb6-port1: attempt power cycle
[  594.525266][ T3141] usb 1-1: selecting invalid altsetting 1
[  594.803125][    T7] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  594.973604][ T3141] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  594.979836][ T3141] cdc_ncm 1-1:1.0: bind() failure
[  595.038364][    T7] usb 6-1: device descriptor read/8, error -61
[  595.330003][    T7] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  595.513566][    T7] usb 6-1: device descriptor read/8, error -61
[  595.636391][    T7] usb usb6-port1: unable to enumerate USB device
[  596.443739][    T7] usb 1-1: USB disconnect, device number 75
10:01:51 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/164, 0x1a, 0xa4, 0x1}, 0x20)

10:01:51 executing program 5:
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x0) (async)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503001000092140000001220f0009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f000000daf73248289e2f72b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x0, 0x5, 0xf, {0xf, 0x10, "cb3fe07ab3321cb61d28a1c62a"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x7}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0xa6, 0x1, {0x22, 0x8e3}}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x0, 0x5, 0x95, "8e27e1814d474e9d139f4713ab670faa6bbdf050682face5128b94b2c0e20a9cb53a843b06d85851e63a5acf8284bd6b4dce17d7ed2cfd1c14a368a3cf9132aced491bf327b04cdc1cf96f8869f12604e0a5ddc812757dd24a5cc0632d6219782cfd2b64813db218e16084f04d61ad1b5f63d824d915dbbc5ad5ed4619545728c14a6ef3a2af0107567b512e4ef0c31f5c46b39759"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x1, 0xc, "c5863c434f1103b006b5858d"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1e}})

10:01:51 executing program 2:
sendmmsg(0xffffffffffffffff, &(0x7f000001ae80)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x1, @random="df273fbe601b", 'veth1_macvtap\x00'}}, 0x80, &(0x7f0000019640)=[{&(0x7f0000000280)="9a471540c8b7989283b4b445e0335efd21459488ccdc00c7d5270f9e4de0cbab90b407eeee207be5d32406e808b618969aa4104f04b7d355e86502bef7b755ed85719a08874a694599c7b803e2279657f7a40be4eb1e9cf416ca9f5fedd5cca52fbc45cc7a26f61c06c0999e62bbbcf92e22051f81cb538ebf98", 0x7a}, {&(0x7f00000193c0)="4bd14e292647d8f78d1a17363b1c9be75e4f3971faf1d97818e96de4060bbcaef2e5223a6804b91785f11839ff4bfb19a7e67a49dd6951fc6c7f5ca973c0df7989de7ad39432d548e0908f443e3a7b2ae7a3419211fdfd151e98bdbf28797eddf046a15fa0e317ef36f418b3e0d7d9df0b5b390b3f657e7506641316db2850312437577d3e133df5bcda9eeff9b1feefb39bc7178cf125c62deecac6bd4c7cc4b7d336f7367f94dde0dbc26037423b075d313d16773b3a8d4ce17193d5608a245f140c0588873eac46e871aa0775f6b0272fdfdf2ddfcfcb6b4f0914587ef383eb9cf3", 0xe3}, {&(0x7f00000194c0)="e5826cdd2ef8f9ca8b65f0877319200739dd657914135b773dce2b9a1ffd02765f3e1877704841b0a90451fd7725e4c7951e2ff0cf500d82af5c7c154908e8c15a45e6fe28b36a22f47823e70a7d77dde799538faa73b87afd1e300cb738146d8696c7ffd504d8125663735bf556bc974f17c2eede21d03c2b4d61a845e3625ea19d2666d4391172b325884a0a3453973c922bb71c56c7f9ca53", 0x9a}, {&(0x7f0000019580)="fcfddc5dedc90b8abf6c02843cf503b211706b2d9b1e57709c1156746c45ffe26ce54a3e5ba8a4bc85e4911fe4b62ae36c3b095cfef2d88ce4c12d76e361b486b3feca79c74878e5dfaf65868c2a8a7cf375d16765eb04498d90e63f09d2a1c926f46ea78663fdd2bdc99d5e27e2e9be398e2767c18233b2550797176c309b1827200ef559594a4d39", 0x89}, {&(0x7f0000000300)="f3e6c235c40d517b16116d5fd54b00a760593f82e8c0ed4edf87748997081164d6f2d40dee14ccac79e1db14f252c910c944c916c7c343570d8f70966b0c57dcb8db2a3bd93d34ef51e956be6d4b19f6a235c2841b9e948fdd32da24193e6c238a9c9a1a3fd43cd7ba87944bda45ce21a50bab8573390cafc18444f01ca1c213", 0x80}], 0x5, &(0x7f00000196c0)=[{0x110, 0x103, 0x6, "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"}], 0x110}}, {{0x0, 0x0, &(0x7f0000019a40)=[{&(0x7f0000019800)="447ef1d1cfd4ece4a1c9412a8d10d6b0ef6910c693de945d75fd0ad06ceb03dae204556af5520b8086c4c89f7556b288f75b348ddd1a8ce6244a0f60536686ee2bf3c897bca2766b098cb61bfac38c3d8cae76937725344ee57cb1270599b3fc1bf387069e9f5675dd7932b3a9212a291940de851dfe1521f720292a55170e2600292421b05add22e4ba20aa8e872031926984e63d8eb3b1eac64810a94d8b4b82705860131e6f151cb8014e527f7323773a32205cd5f0bad04b0966daa6d44a5f9c6adf0345c4557a07d4dd9d35633d0ccb88bf3690cbb38375292fea00c55577", 0xe1}, {&(0x7f0000019900)="a75632133b325799324300c4bb75aed5b7ceada86399cda29a7f0d028b0ea3ddec40a72e3672e79ac3007458bc6ebaca0e03c43dcef887af76a60679e5b1ee2c64286d718f4f21240ed80e8d767d1e953e322ac5071a0fa3e543775794a3e1a8c6e9c94e6a683a2b02167af828c4ae2ffd0b7b40d72f40b49a473f9a58fc85bdd7bdd8427a931860ff921a0f0ca2867b708100b369", 0x95}, {&(0x7f00000199c0)="b20c903a5471ca61d570f7a81301ad96e6ef248f659c", 0x16}, {&(0x7f0000019a00)="2e9a5d4e4049e1b28e1ecbf514713fecef55d8f274ba8c4f38227eef1c2aae772d53448b4b7c915898e1891e8f1b27d97eda385716dff4fe1d45", 0x3a}], 0x4, &(0x7f0000019a80)=[{0x108, 0x103, 0x2, "77429d4345ff93460b828e8cb2068d907a2cb194e5b0a6d45d360eec42ccbb39af2fd85138a2445c5eb01cc6fe746cdb5f79ae0e5443f0daace86164b6daf6d97d0d267cabb797f81aab76cc07289787cd6bc34e199199570f98dc2b3e917954c0fca1af2e5d2021966db4e87eb662c5a01e8abce4aaccdef8e690cc9f9a20e3c2a1f7be7719957e04eaf01d09195acdc471f72e0368c2199c6b1a4e3f8564854b026cfc13610c7bcd7b01877731e3516d6595889589fea77c62571cf2236100fd6ddd50832d34a58bb099a4e9045c44a43ecbab7a6ca7e864213e3b54a39cbf2602353d717623c84dcea230bebdff25b382c2fbc9fc15"}, {0x20, 0x119, 0x9, "0c4446740ceeff542080c7c1"}, {0xf8, 0x1, 0x0, "d0d5bf347852fb1736dd057734053e10b9f3cc4c2ba4441a0eb92352508c6bc2a0324f6bed1208da478233c40dabbe23f320703edc6b8ab8940ee14b32483376cd88e65ff9423057828893c13bd53d2740ad42ac175e962bac97c0c15d25dc32d7ef441518814c58fd44ae2116ca8788b81fa015c63f8734e4e336f9b32d31e4a482c827be1591c9d074cbeadce0f29526410adca99d61a9725e5a90e27932f74baef84108a187d4c895e5bc292c7731c49146b0c2852d4e631777660614315c32b107f171d32ab9f68be3d824a7ff2a7fa63d63b8cf6c039b52401141dff7f193494e820c"}, {0x28, 0x0, 0x1, "6c945eeaa91d96b3d306172725309ca9e25df6282dee7e"}, {0x1010, 0x111, 0x100, "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"}, {0xc0, 0x84, 0x9, "75c2e81fd6b3605d1d1a2eeeb2108fb7a1bfb4fed949f4dcb3dff3a738a3b0f1fccf152aec111fe1a39e54b080dc8d8c1b7faba568f11501b87915c2a9df58d48d9fbd0f1bc4b17f0245a7da617d8564bf2dc7357c542a03b99d674f5985e06ce1a41e5f546534f281182c55045c3bb5c7e4994fa2dea672d1129e710b7e8c3f712b339a1b13ad2b0a03dcd2ca941f84b0b0eb1f71e0855d4c3e817a23753b4d09eb85acc80a0726f8661db10fe4"}, {0xc0, 0x112, 0x10001, "86b8356c5b8e31b9b0066fb9b97549a92a97dcc3f6fff2a784da889e887afa61c67907749f78b6fd6376f26fdc4aee8fbd1af47493082a65b2aa6a382ca6bf13f5d4a8c32e94cc45286fd5f020646cc61d6288bde4ee4028f9d99dc558d1a6d5acca7578183d290f9dc96d584a98c1b71d961706ff90bb359990a755b5b6dc972fd6a0fe5f198946e4889d3b1730019a28a40e857e5ce6df11f1e16ba43e56cd8e2bfb492809c562a912"}], 0x13d8}}], 0x2, 0x4044880) (async)
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003120000000003"], 0x0, 0x0, 0x0}, 0x0) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f00000000c0)=0xc) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503001000092140000001220f0009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f000000daf73248289e2f72b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f000001b040)={0x24, &(0x7f000001af00)={0x0, 0x30, 0x6d, {0x6d, 0x30, "2e02a33807ea7467298fce59950c0ad8103e38566c7962c821d53465dd5fc5117885398f9063570f1d7984d8126b993cfd902e097afa23686789b19f595ed019649cb42e7c49b27974b410267056caaab04e2e419c434d711f3bada59df2b1f5487ded7e2b94fd5e216b14"}}, &(0x7f000001af80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f000001afc0)={0x0, 0x22, 0x11, {[@local=@item_4={0x3, 0x2, 0x2, "b5b03af0"}, @global=@item_4={0x3, 0x1, 0x3, "f875ad6a"}, @global=@item_012={0x1, 0x1, 0x9, "93"}, @global=@item_4={0x3, 0x1, 0x7, "b3063b71"}]}}, &(0x7f000001b000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x311}}}}, &(0x7f000001b300)={0x2c, &(0x7f000001b080)={0x40, 0xf, 0xe1, "a0cfca96989cd9aa85904ae23323f8f4eef8a4a86c88d0246f0a342296a302cf8e3abcdb94a13c056d8c463262fd5829de87b4574013d6ea73ccd9e1d37ee40926a302d23e6cb542038078f9d8ecf284cad61e4b9363fbab49d3ad2dccedea9d1fcac1888f5abef23f5424cb61c6f518cbb1d0a486157bdcf3fb1164b456a0658b0b95d94b530680afc67211e59c10eb8ae6f803193059e1298579a74ce322f467edbf4f105b0aed70d93d348612cdd59e86248157aefd4443d2fed442b694487d39fd86ce750353974405d12e1334ddf6837e8333576f36542bf75693f0496a93"}, &(0x7f000001b180)={0x0, 0xa, 0x1, 0x80}, &(0x7f000001b1c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f000001b200)={0x20, 0x1, 0x96, "6fefeb8f7641b392052f2b7e0df0514969d919d406e7d7925d0db2618d4ff94d59a6127afe6594a5a890c3e76aad20f069b1cceec88cee4cee4d7abf1dcec3e905c48f5728dbc2bcbcb193d478b765fd6c33b388674c3031adfc09a2a9b8e3b66fc4ed9ec85d4284b0d400dead3df98bf611642eeee566bf3bf5913fdfe8e6c12a897ee64c4321b309d5ad89a31f7444be25b449ca08"}, &(0x7f000001b2c0)={0x20, 0x3, 0x1, 0x7f}}) (async)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r3, 0x3, 0x19000, &(0x7f00000003c0)=""/102400)
bind(r1, &(0x7f0000000140)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[])

10:01:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:51 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:01:51 executing program 3:
pipe(&(0x7f0000000ac0))
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)

[  597.623862][T10370] UDC core: couldn't find an available UDC or it's busy: -16
[  597.631379][T10370] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
10:01:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)

10:01:51 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@private2}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xe8)

10:01:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  597.853267][ T3141] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  597.893359][    T7] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  597.901415][ T3546] usb 6-1: new high-speed USB device number 80 using dummy_hcd
10:01:52 executing program 3:
bpf$BPF_BTF_LOAD(0x18, 0x0, 0x0)

[  598.104803][ T3546] usb 6-1: device descriptor read/64, error 18
[  598.153184][    T7] usb 3-1: Using ep0 maxpacket: 16
10:01:52 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r1, 0x0, 0x0, 0x0}, 0x30)
sendmsg$netlink(r0, &(0x7f0000002b80)={&(0x7f0000002a00)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002b00)=[{&(0x7f0000003f00)={0x78, 0x12, 0x1, 0x70bd2d, 0x25dfdbff, "", [@nested={0x51, 0x6, 0x0, 0x1, [@typed={0x8, 0x34, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="65a0287b222d1bb29e7d4cda87", @generic="31df249b210a5193e5b7e4392facf3c185b609b16163e0062d78b98d581eb8a8dff5a0db17c45e4f62c4408ce1c8b5e519377e2a", @typed={0x4, 0x35}]}, @nested={0xc, 0x6e, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, @typed={0x6, 0x30, 0x0, 0x0, @str='*\x00'}, @generic]}, 0x78}, {&(0x7f0000002a80)={0x14, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, "", [@generic="f50b02"]}, 0x14}], 0x2, 0x0, 0x0, 0x1}, 0x20004000)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0xc0}, 0x0)
socket(0x0, 0x0, 0x0)

[  598.212897][ T3141] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  598.225659][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  598.294634][    T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  598.305154][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  598.316545][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  598.326487][    T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  598.336514][    T7] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
10:01:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  598.404159][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  598.413803][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.422773][ T3546] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  598.431696][ T3141] usb 1-1: Product: syz
[  598.436382][ T3141] usb 1-1: Manufacturer: syz
[  598.441110][ T3141] usb 1-1: SerialNumber: syz
10:01:52 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000)

[  598.540090][ T3141] usb 1-1: selecting invalid altsetting 1
[  598.562118][T10384] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'.
[  598.652742][ T3546] usb 6-1: device descriptor read/64, error 18
[  598.683911][    T7] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  598.693587][    T7] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  598.701822][    T7] usb 3-1: Manufacturer: syz
[  598.773443][ T3546] usb usb6-port1: attempt power cycle
[  598.796092][    T7] usb 3-1: config 0 descriptor??
[  598.963327][ T3141] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  598.969546][ T3141] cdc_ncm 1-1:1.0: bind() failure
[  599.049193][T10391] UDC core: couldn't find an available UDC or it's busy: -16
[  599.056832][T10391] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  599.140231][T10394] UDC core: couldn't find an available UDC or it's busy: -16
[  599.147849][T10394] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  599.182914][ T3546] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[  599.363560][ T3546] usb 6-1: device descriptor read/8, error -61
[  599.393013][    T7] rc_core: IR keymap rc-hauppauge not found
[  599.399195][    T7] Registered IR keymap rc-empty
[  599.404644][    T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  599.442836][    T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  599.484125][    T7] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  599.499311][    T7] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input94
[  599.541290][    T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  599.579271][    T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  599.631292][    T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  599.672974][    T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  599.680573][ T3546] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[  599.713153][    T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  599.743197][    T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  599.782701][    T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  599.822881][    T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  599.863431][    T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  599.883192][ T3546] usb 6-1: device descriptor read/8, error -61
[  599.901439][    T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  599.935645][    T7] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  599.944042][    T7] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  600.004916][ T3546] usb usb6-port1: unable to enumerate USB device
[  600.012170][    T7] usb 3-1: USB disconnect, device number 58
10:01:54 executing program 2:
sendmmsg(0xffffffffffffffff, &(0x7f000001ae80)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x1, @random="df273fbe601b", 'veth1_macvtap\x00'}}, 0x80, &(0x7f0000019640)=[{&(0x7f0000000280)="9a471540c8b7989283b4b445e0335efd21459488ccdc00c7d5270f9e4de0cbab90b407eeee207be5d32406e808b618969aa4104f04b7d355e86502bef7b755ed85719a08874a694599c7b803e2279657f7a40be4eb1e9cf416ca9f5fedd5cca52fbc45cc7a26f61c06c0999e62bbbcf92e22051f81cb538ebf98", 0x7a}, {&(0x7f00000193c0)="4bd14e292647d8f78d1a17363b1c9be75e4f3971faf1d97818e96de4060bbcaef2e5223a6804b91785f11839ff4bfb19a7e67a49dd6951fc6c7f5ca973c0df7989de7ad39432d548e0908f443e3a7b2ae7a3419211fdfd151e98bdbf28797eddf046a15fa0e317ef36f418b3e0d7d9df0b5b390b3f657e7506641316db2850312437577d3e133df5bcda9eeff9b1feefb39bc7178cf125c62deecac6bd4c7cc4b7d336f7367f94dde0dbc26037423b075d313d16773b3a8d4ce17193d5608a245f140c0588873eac46e871aa0775f6b0272fdfdf2ddfcfcb6b4f0914587ef383eb9cf3", 0xe3}, {&(0x7f00000194c0)="e5826cdd2ef8f9ca8b65f0877319200739dd657914135b773dce2b9a1ffd02765f3e1877704841b0a90451fd7725e4c7951e2ff0cf500d82af5c7c154908e8c15a45e6fe28b36a22f47823e70a7d77dde799538faa73b87afd1e300cb738146d8696c7ffd504d8125663735bf556bc974f17c2eede21d03c2b4d61a845e3625ea19d2666d4391172b325884a0a3453973c922bb71c56c7f9ca53", 0x9a}, {&(0x7f0000019580)="fcfddc5dedc90b8abf6c02843cf503b211706b2d9b1e57709c1156746c45ffe26ce54a3e5ba8a4bc85e4911fe4b62ae36c3b095cfef2d88ce4c12d76e361b486b3feca79c74878e5dfaf65868c2a8a7cf375d16765eb04498d90e63f09d2a1c926f46ea78663fdd2bdc99d5e27e2e9be398e2767c18233b2550797176c309b1827200ef559594a4d39", 0x89}, {&(0x7f0000000300)="f3e6c235c40d517b16116d5fd54b00a760593f82e8c0ed4edf87748997081164d6f2d40dee14ccac79e1db14f252c910c944c916c7c343570d8f70966b0c57dcb8db2a3bd93d34ef51e956be6d4b19f6a235c2841b9e948fdd32da24193e6c238a9c9a1a3fd43cd7ba87944bda45ce21a50bab8573390cafc18444f01ca1c213", 0x80}], 0x5, &(0x7f00000196c0)=[{0x110, 0x103, 0x6, "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"}], 0x110}}, {{0x0, 0x0, &(0x7f0000019a40)=[{&(0x7f0000019800)="447ef1d1cfd4ece4a1c9412a8d10d6b0ef6910c693de945d75fd0ad06ceb03dae204556af5520b8086c4c89f7556b288f75b348ddd1a8ce6244a0f60536686ee2bf3c897bca2766b098cb61bfac38c3d8cae76937725344ee57cb1270599b3fc1bf387069e9f5675dd7932b3a9212a291940de851dfe1521f720292a55170e2600292421b05add22e4ba20aa8e872031926984e63d8eb3b1eac64810a94d8b4b82705860131e6f151cb8014e527f7323773a32205cd5f0bad04b0966daa6d44a5f9c6adf0345c4557a07d4dd9d35633d0ccb88bf3690cbb38375292fea00c55577", 0xe1}, {&(0x7f0000019900)="a75632133b325799324300c4bb75aed5b7ceada86399cda29a7f0d028b0ea3ddec40a72e3672e79ac3007458bc6ebaca0e03c43dcef887af76a60679e5b1ee2c64286d718f4f21240ed80e8d767d1e953e322ac5071a0fa3e543775794a3e1a8c6e9c94e6a683a2b02167af828c4ae2ffd0b7b40d72f40b49a473f9a58fc85bdd7bdd8427a931860ff921a0f0ca2867b708100b369", 0x95}, {&(0x7f00000199c0)="b20c903a5471ca61d570f7a81301ad96e6ef248f659c", 0x16}, {&(0x7f0000019a00)="2e9a5d4e4049e1b28e1ecbf514713fecef55d8f274ba8c4f38227eef1c2aae772d53448b4b7c915898e1891e8f1b27d97eda385716dff4fe1d45", 0x3a}], 0x4, &(0x7f0000019a80)=[{0x108, 0x103, 0x2, "77429d4345ff93460b828e8cb2068d907a2cb194e5b0a6d45d360eec42ccbb39af2fd85138a2445c5eb01cc6fe746cdb5f79ae0e5443f0daace86164b6daf6d97d0d267cabb797f81aab76cc07289787cd6bc34e199199570f98dc2b3e917954c0fca1af2e5d2021966db4e87eb662c5a01e8abce4aaccdef8e690cc9f9a20e3c2a1f7be7719957e04eaf01d09195acdc471f72e0368c2199c6b1a4e3f8564854b026cfc13610c7bcd7b01877731e3516d6595889589fea77c62571cf2236100fd6ddd50832d34a58bb099a4e9045c44a43ecbab7a6ca7e864213e3b54a39cbf2602353d717623c84dcea230bebdff25b382c2fbc9fc15"}, {0x20, 0x119, 0x9, "0c4446740ceeff542080c7c1"}, {0xf8, 0x1, 0x0, "d0d5bf347852fb1736dd057734053e10b9f3cc4c2ba4441a0eb92352508c6bc2a0324f6bed1208da478233c40dabbe23f320703edc6b8ab8940ee14b32483376cd88e65ff9423057828893c13bd53d2740ad42ac175e962bac97c0c15d25dc32d7ef441518814c58fd44ae2116ca8788b81fa015c63f8734e4e336f9b32d31e4a482c827be1591c9d074cbeadce0f29526410adca99d61a9725e5a90e27932f74baef84108a187d4c895e5bc292c7731c49146b0c2852d4e631777660614315c32b107f171d32ab9f68be3d824a7ff2a7fa63d63b8cf6c039b52401141dff7f193494e820c"}, {0x28, 0x0, 0x1, "6c945eeaa91d96b3d306172725309ca9e25df6282dee7e"}, {0x1010, 0x111, 0x100, "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"}, {0xc0, 0x84, 0x9, "75c2e81fd6b3605d1d1a2eeeb2108fb7a1bfb4fed949f4dcb3dff3a738a3b0f1fccf152aec111fe1a39e54b080dc8d8c1b7faba568f11501b87915c2a9df58d48d9fbd0f1bc4b17f0245a7da617d8564bf2dc7357c542a03b99d674f5985e06ce1a41e5f546534f281182c55045c3bb5c7e4994fa2dea672d1129e710b7e8c3f712b339a1b13ad2b0a03dcd2ca941f84b0b0eb1f71e0855d4c3e817a23753b4d09eb85acc80a0726f8661db10fe4"}, {0xc0, 0x112, 0x10001, "86b8356c5b8e31b9b0066fb9b97549a92a97dcc3f6fff2a784da889e887afa61c67907749f78b6fd6376f26fdc4aee8fbd1af47493082a65b2aa6a382ca6bf13f5d4a8c32e94cc45286fd5f020646cc61d6288bde4ee4028f9d99dc558d1a6d5acca7578183d290f9dc96d584a98c1b71d961706ff90bb359990a755b5b6dc972fd6a0fe5f198946e4889d3b1730019a28a40e857e5ce6df11f1e16ba43e56cd8e2bfb492809c562a912"}], 0x13d8}}], 0x2, 0x4044880)
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003120000000003"], 0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f00000000c0)=0xc)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503001000092140000001220f0009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f000000daf73248289e2f72b3"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f000001b040)={0x24, &(0x7f000001af00)={0x0, 0x30, 0x6d, {0x6d, 0x30, "2e02a33807ea7467298fce59950c0ad8103e38566c7962c821d53465dd5fc5117885398f9063570f1d7984d8126b993cfd902e097afa23686789b19f595ed019649cb42e7c49b27974b410267056caaab04e2e419c434d711f3bada59df2b1f5487ded7e2b94fd5e216b14"}}, &(0x7f000001af80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f000001afc0)={0x0, 0x22, 0x11, {[@local=@item_4={0x3, 0x2, 0x2, "b5b03af0"}, @global=@item_4={0x3, 0x1, 0x3, "f875ad6a"}, @global=@item_012={0x1, 0x1, 0x9, "93"}, @global=@item_4={0x3, 0x1, 0x7, "b3063b71"}]}}, &(0x7f000001b000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x311}}}}, &(0x7f000001b300)={0x2c, &(0x7f000001b080)={0x40, 0xf, 0xe1, "a0cfca96989cd9aa85904ae23323f8f4eef8a4a86c88d0246f0a342296a302cf8e3abcdb94a13c056d8c463262fd5829de87b4574013d6ea73ccd9e1d37ee40926a302d23e6cb542038078f9d8ecf284cad61e4b9363fbab49d3ad2dccedea9d1fcac1888f5abef23f5424cb61c6f518cbb1d0a486157bdcf3fb1164b456a0658b0b95d94b530680afc67211e59c10eb8ae6f803193059e1298579a74ce322f467edbf4f105b0aed70d93d348612cdd59e86248157aefd4443d2fed442b694487d39fd86ce750353974405d12e1334ddf6837e8333576f36542bf75693f0496a93"}, &(0x7f000001b180)={0x0, 0xa, 0x1, 0x80}, &(0x7f000001b1c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f000001b200)={0x20, 0x1, 0x96, "6fefeb8f7641b392052f2b7e0df0514969d919d406e7d7925d0db2618d4ff94d59a6127afe6594a5a890c3e76aad20f069b1cceec88cee4cee4d7abf1dcec3e905c48f5728dbc2bcbcb193d478b765fd6c33b388674c3031adfc09a2a9b8e3b66fc4ed9ec85d4284b0d400dead3df98bf611642eeee566bf3bf5913fdfe8e6c12a897ee64c4321b309d5ad89a31f7444be25b449ca08"}, &(0x7f000001b2c0)={0x20, 0x3, 0x1, 0x7f}})
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r3, 0x3, 0x19000, &(0x7f00000003c0)=""/102400)
bind(r1, &(0x7f0000000140)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[])
sendmmsg(0xffffffffffffffff, &(0x7f000001ae80)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x1, @random="df273fbe601b", 'veth1_macvtap\x00'}}, 0x80, &(0x7f0000019640)=[{&(0x7f0000000280)="9a471540c8b7989283b4b445e0335efd21459488ccdc00c7d5270f9e4de0cbab90b407eeee207be5d32406e808b618969aa4104f04b7d355e86502bef7b755ed85719a08874a694599c7b803e2279657f7a40be4eb1e9cf416ca9f5fedd5cca52fbc45cc7a26f61c06c0999e62bbbcf92e22051f81cb538ebf98", 0x7a}, {&(0x7f00000193c0)="4bd14e292647d8f78d1a17363b1c9be75e4f3971faf1d97818e96de4060bbcaef2e5223a6804b91785f11839ff4bfb19a7e67a49dd6951fc6c7f5ca973c0df7989de7ad39432d548e0908f443e3a7b2ae7a3419211fdfd151e98bdbf28797eddf046a15fa0e317ef36f418b3e0d7d9df0b5b390b3f657e7506641316db2850312437577d3e133df5bcda9eeff9b1feefb39bc7178cf125c62deecac6bd4c7cc4b7d336f7367f94dde0dbc26037423b075d313d16773b3a8d4ce17193d5608a245f140c0588873eac46e871aa0775f6b0272fdfdf2ddfcfcb6b4f0914587ef383eb9cf3", 0xe3}, {&(0x7f00000194c0)="e5826cdd2ef8f9ca8b65f0877319200739dd657914135b773dce2b9a1ffd02765f3e1877704841b0a90451fd7725e4c7951e2ff0cf500d82af5c7c154908e8c15a45e6fe28b36a22f47823e70a7d77dde799538faa73b87afd1e300cb738146d8696c7ffd504d8125663735bf556bc974f17c2eede21d03c2b4d61a845e3625ea19d2666d4391172b325884a0a3453973c922bb71c56c7f9ca53", 0x9a}, {&(0x7f0000019580)="fcfddc5dedc90b8abf6c02843cf503b211706b2d9b1e57709c1156746c45ffe26ce54a3e5ba8a4bc85e4911fe4b62ae36c3b095cfef2d88ce4c12d76e361b486b3feca79c74878e5dfaf65868c2a8a7cf375d16765eb04498d90e63f09d2a1c926f46ea78663fdd2bdc99d5e27e2e9be398e2767c18233b2550797176c309b1827200ef559594a4d39", 0x89}, {&(0x7f0000000300)="f3e6c235c40d517b16116d5fd54b00a760593f82e8c0ed4edf87748997081164d6f2d40dee14ccac79e1db14f252c910c944c916c7c343570d8f70966b0c57dcb8db2a3bd93d34ef51e956be6d4b19f6a235c2841b9e948fdd32da24193e6c238a9c9a1a3fd43cd7ba87944bda45ce21a50bab8573390cafc18444f01ca1c213", 0x80}], 0x5, &(0x7f00000196c0)=[{0x110, 0x103, 0x6, "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"}], 0x110}}, {{0x0, 0x0, &(0x7f0000019a40)=[{&(0x7f0000019800)="447ef1d1cfd4ece4a1c9412a8d10d6b0ef6910c693de945d75fd0ad06ceb03dae204556af5520b8086c4c89f7556b288f75b348ddd1a8ce6244a0f60536686ee2bf3c897bca2766b098cb61bfac38c3d8cae76937725344ee57cb1270599b3fc1bf387069e9f5675dd7932b3a9212a291940de851dfe1521f720292a55170e2600292421b05add22e4ba20aa8e872031926984e63d8eb3b1eac64810a94d8b4b82705860131e6f151cb8014e527f7323773a32205cd5f0bad04b0966daa6d44a5f9c6adf0345c4557a07d4dd9d35633d0ccb88bf3690cbb38375292fea00c55577", 0xe1}, {&(0x7f0000019900)="a75632133b325799324300c4bb75aed5b7ceada86399cda29a7f0d028b0ea3ddec40a72e3672e79ac3007458bc6ebaca0e03c43dcef887af76a60679e5b1ee2c64286d718f4f21240ed80e8d767d1e953e322ac5071a0fa3e543775794a3e1a8c6e9c94e6a683a2b02167af828c4ae2ffd0b7b40d72f40b49a473f9a58fc85bdd7bdd8427a931860ff921a0f0ca2867b708100b369", 0x95}, {&(0x7f00000199c0)="b20c903a5471ca61d570f7a81301ad96e6ef248f659c", 0x16}, {&(0x7f0000019a00)="2e9a5d4e4049e1b28e1ecbf514713fecef55d8f274ba8c4f38227eef1c2aae772d53448b4b7c915898e1891e8f1b27d97eda385716dff4fe1d45", 0x3a}], 0x4, &(0x7f0000019a80)=[{0x108, 0x103, 0x2, "77429d4345ff93460b828e8cb2068d907a2cb194e5b0a6d45d360eec42ccbb39af2fd85138a2445c5eb01cc6fe746cdb5f79ae0e5443f0daace86164b6daf6d97d0d267cabb797f81aab76cc07289787cd6bc34e199199570f98dc2b3e917954c0fca1af2e5d2021966db4e87eb662c5a01e8abce4aaccdef8e690cc9f9a20e3c2a1f7be7719957e04eaf01d09195acdc471f72e0368c2199c6b1a4e3f8564854b026cfc13610c7bcd7b01877731e3516d6595889589fea77c62571cf2236100fd6ddd50832d34a58bb099a4e9045c44a43ecbab7a6ca7e864213e3b54a39cbf2602353d717623c84dcea230bebdff25b382c2fbc9fc15"}, {0x20, 0x119, 0x9, "0c4446740ceeff542080c7c1"}, {0xf8, 0x1, 0x0, "d0d5bf347852fb1736dd057734053e10b9f3cc4c2ba4441a0eb92352508c6bc2a0324f6bed1208da478233c40dabbe23f320703edc6b8ab8940ee14b32483376cd88e65ff9423057828893c13bd53d2740ad42ac175e962bac97c0c15d25dc32d7ef441518814c58fd44ae2116ca8788b81fa015c63f8734e4e336f9b32d31e4a482c827be1591c9d074cbeadce0f29526410adca99d61a9725e5a90e27932f74baef84108a187d4c895e5bc292c7731c49146b0c2852d4e631777660614315c32b107f171d32ab9f68be3d824a7ff2a7fa63d63b8cf6c039b52401141dff7f193494e820c"}, {0x28, 0x0, 0x1, "6c945eeaa91d96b3d306172725309ca9e25df6282dee7e"}, {0x1010, 0x111, 0x100, "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"}, {0xc0, 0x84, 0x9, "75c2e81fd6b3605d1d1a2eeeb2108fb7a1bfb4fed949f4dcb3dff3a738a3b0f1fccf152aec111fe1a39e54b080dc8d8c1b7faba568f11501b87915c2a9df58d48d9fbd0f1bc4b17f0245a7da617d8564bf2dc7357c542a03b99d674f5985e06ce1a41e5f546534f281182c55045c3bb5c7e4994fa2dea672d1129e710b7e8c3f712b339a1b13ad2b0a03dcd2ca941f84b0b0eb1f71e0855d4c3e817a23753b4d09eb85acc80a0726f8661db10fe4"}, {0xc0, 0x112, 0x10001, "86b8356c5b8e31b9b0066fb9b97549a92a97dcc3f6fff2a784da889e887afa61c67907749f78b6fd6376f26fdc4aee8fbd1af47493082a65b2aa6a382ca6bf13f5d4a8c32e94cc45286fd5f020646cc61d6288bde4ee4028f9d99dc558d1a6d5acca7578183d290f9dc96d584a98c1b71d961706ff90bb359990a755b5b6dc972fd6a0fe5f198946e4889d3b1730019a28a40e857e5ce6df11f1e16ba43e56cd8e2bfb492809c562a912"}], 0x13d8}}], 0x2, 0x4044880) (async)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003120000000003"], 0x0, 0x0, 0x0}, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f00000000c0)=0xc) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503001000092140000001220f0009058103"], 0x0) (async)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f000000daf73248289e2f72b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f000001b040)={0x24, &(0x7f000001af00)={0x0, 0x30, 0x6d, {0x6d, 0x30, "2e02a33807ea7467298fce59950c0ad8103e38566c7962c821d53465dd5fc5117885398f9063570f1d7984d8126b993cfd902e097afa23686789b19f595ed019649cb42e7c49b27974b410267056caaab04e2e419c434d711f3bada59df2b1f5487ded7e2b94fd5e216b14"}}, &(0x7f000001af80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f000001afc0)={0x0, 0x22, 0x11, {[@local=@item_4={0x3, 0x2, 0x2, "b5b03af0"}, @global=@item_4={0x3, 0x1, 0x3, "f875ad6a"}, @global=@item_012={0x1, 0x1, 0x9, "93"}, @global=@item_4={0x3, 0x1, 0x7, "b3063b71"}]}}, &(0x7f000001b000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x311}}}}, &(0x7f000001b300)={0x2c, &(0x7f000001b080)={0x40, 0xf, 0xe1, "a0cfca96989cd9aa85904ae23323f8f4eef8a4a86c88d0246f0a342296a302cf8e3abcdb94a13c056d8c463262fd5829de87b4574013d6ea73ccd9e1d37ee40926a302d23e6cb542038078f9d8ecf284cad61e4b9363fbab49d3ad2dccedea9d1fcac1888f5abef23f5424cb61c6f518cbb1d0a486157bdcf3fb1164b456a0658b0b95d94b530680afc67211e59c10eb8ae6f803193059e1298579a74ce322f467edbf4f105b0aed70d93d348612cdd59e86248157aefd4443d2fed442b694487d39fd86ce750353974405d12e1334ddf6837e8333576f36542bf75693f0496a93"}, &(0x7f000001b180)={0x0, 0xa, 0x1, 0x80}, &(0x7f000001b1c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f000001b200)={0x20, 0x1, 0x96, "6fefeb8f7641b392052f2b7e0df0514969d919d406e7d7925d0db2618d4ff94d59a6127afe6594a5a890c3e76aad20f069b1cceec88cee4cee4d7abf1dcec3e905c48f5728dbc2bcbcb193d478b765fd6c33b388674c3031adfc09a2a9b8e3b66fc4ed9ec85d4284b0d400dead3df98bf611642eeee566bf3bf5913fdfe8e6c12a897ee64c4321b309d5ad89a31f7444be25b449ca08"}, &(0x7f000001b2c0)={0x20, 0x3, 0x1, 0x7f}}) (async)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
syz_usb_ep_read(r3, 0x3, 0x19000, &(0x7f00000003c0)=""/102400) (async)
bind(r1, &(0x7f0000000140)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000000)=ANY=[]) (async)

10:01:54 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x0, 0x300)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000300)=0x2f, 0x4)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
r2 = socket$packet(0x11, 0x0, 0x300)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6})
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0)

10:01:54 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)

10:01:54 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:01:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:54 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter, 0x48)

[  600.629869][   T19] usb 1-1: USB disconnect, device number 76
10:01:54 executing program 1:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x891d, &(0x7f0000000300))

10:01:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0)

[  600.866330][ T3141] usb 3-1: new high-speed USB device number 59 using dummy_hcd
10:01:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  601.113255][ T3141] usb 3-1: Using ep0 maxpacket: 16
[  601.203125][   T19] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  601.233411][ T3141] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
10:01:55 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891d, &(0x7f0000000200)={'syztnl2\x00', 0x0})

[  601.244252][ T3141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  601.255576][ T3141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  601.265534][ T3141] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  601.275647][ T3141] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
10:01:55 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@dstopts={{0x18}}, @flowinfo={{0x14, 0x29, 0xb, 0x38bb2980}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x58}, 0xc011)

10:01:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  601.543655][ T3141] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  601.553201][ T3141] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  601.561349][ T3141] usb 3-1: Manufacturer: syz
[  601.613999][   T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  601.624442][   T19] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  601.663909][ T3141] usb 3-1: config 0 descriptor??
[  601.813947][   T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  601.823409][   T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.831552][   T19] usb 1-1: Product: syz
[  601.836031][   T19] usb 1-1: Manufacturer: syz
[  601.840760][   T19] usb 1-1: SerialNumber: syz
[  601.935934][   T19] usb 1-1: selecting invalid altsetting 1
[  602.062883][ T3141] rc_core: IR keymap rc-hauppauge not found
[  602.069058][ T3141] Registered IR keymap rc-empty
[  602.074451][ T3141] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  602.103433][ T3141] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  602.118107][T10399] UDC core: couldn't find an available UDC or it's busy: -16
[  602.126243][T10399] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  602.153873][ T3141] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  602.168854][ T3141] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input95
[  602.227680][T10399] UDC core: couldn't find an available UDC or it's busy: -16
[  602.235414][T10399] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  602.320446][ T3141] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  602.354506][ T3141] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  602.384070][ T3141] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  602.403447][   T19] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  602.409797][   T19] cdc_ncm 1-1:1.0: bind() failure
[  602.449759][ T3141] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  602.483375][ T3141] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  602.513809][ T3141] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  602.559671][ T3141] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  602.593918][ T3141] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  602.627176][ T3141] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  602.663174][ T3141] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  602.698045][T10427] UDC core: couldn't find an available UDC or it's busy: -16
[  602.705729][ T3141] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  602.705791][T10427] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  602.723728][T10430] UDC core: couldn't find an available UDC or it's busy: -16
[  602.723807][T10430] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  602.740221][ T3141] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
10:01:56 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x40000}, 0x0)

[  602.862903][ T3141] usb 3-1: USB disconnect, device number 59
[  603.890144][    T7] usb 1-1: USB disconnect, device number 77
10:01:58 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback}})

10:01:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_CHANNEL(r0, 0x0, 0x0)

10:01:58 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000680)="d19e3d6cbe017d22a53883ff37c3c69851601c87", 0x14)

10:01:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:01:58 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1e98}}, 0x0)

10:01:58 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d000009"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:01:58 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140), 0x8)
setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0)

10:01:58 executing program 1:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

10:01:58 executing program 2:
pipe(&(0x7f0000000840))

10:01:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  604.503184][    T7] usb 1-1: new high-speed USB device number 78 using dummy_hcd
10:01:58 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x10}, 0x10}}, 0x0)

10:01:58 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x2}}, 0x1c)

10:01:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r1, 0x0, 0x0, 0x0}, 0x30)
sendmsg$netlink(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000003f00)={0x74, 0x12, 0x1, 0x70bd2d, 0x25dfdbff, "", [@nested={0x56, 0x0, 0x0, 0x1, [@generic, @generic="31df249b210a5193e5b7e4392facf3c185b609b16163e0062d78b98d581eb8a8dff5a0db17c45e4f62c4408ce1c8b5e519377e2a671d2a8ba4ff08f70367fcb6b77e2a95d9cd5706ffdd4fefd3b97f9f0bde"]}, @nested={0x4, 0x6e}, @typed={0x6, 0x30, 0x0, 0x0, @str='*\x00'}, @generic]}, 0x74}], 0x1}, 0x0)

10:01:58 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x4a, &(0x7f0000000680)="d19e3d6c", 0x4)

10:01:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  604.913352][    T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  604.924418][    T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  604.935675][    T7] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
10:01:59 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)

10:01:59 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x1a, 0x0, 0x0)

[  605.135468][T10470] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'.
[  605.203453][    T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  605.213171][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.221378][    T7] usb 1-1: Product: syz
[  605.225895][    T7] usb 1-1: Manufacturer: syz
[  605.230702][    T7] usb 1-1: SerialNumber: syz
[  606.513006][    T7] cdc_ncm 1-1:1.0: bind() failure
[  606.722246][    T7] usb 1-1: USB disconnect, device number 78
10:02:01 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d000009"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:01 executing program 1:
syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)

10:02:01 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x38, &(0x7f0000000680)="d19e3d6c", 0x4)

10:02:01 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x1d, &(0x7f0000000680)="d19e3d6c", 0x4)

10:02:01 executing program 2:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x11, r0, 0x0)

10:02:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000080)="090054d5296936a24d2eae3163a3c00c925a8f6acc56633efb7b307721a25508", 0x20)

10:02:01 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x1d, 0x0, 0x0)

10:02:01 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000680)="d19e3d6cbe017d22a53883ff37c3c69851601c87", 0x14)

10:02:01 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x4}]}}, &(0x7f00000001c0)=""/149, 0x26, 0x95, 0x1}, 0x20)

10:02:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  607.642892][ T3141] usb 1-1: new high-speed USB device number 79 using dummy_hcd
10:02:01 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000003f00)={0x18, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x7, 0x0, 0x0, 0x1, [@generic="65a028"]}]}, 0x18}], 0x1}, 0x0)

[  608.003663][ T3141] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  608.014397][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  608.025771][ T3141] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  608.203541][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  608.213398][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.221550][ T3141] usb 1-1: Product: syz
[  608.226027][ T3141] usb 1-1: Manufacturer: syz
[  608.230771][ T3141] usb 1-1: SerialNumber: syz
[  609.374791][ T3141] cdc_ncm 1-1:1.0: bind() failure
[  609.577610][ T3141] usb 1-1: USB disconnect, device number 79
10:02:04 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d000009"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:04 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88)

10:02:04 executing program 1:
pipe(&(0x7f0000000ac0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080))

10:02:04 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}, 0x0)

10:02:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:04 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x5, 0x0, 0x0)

[  610.185980][T10503] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
10:02:04 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x8, 0x4)

10:02:04 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

10:02:04 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, &(0x7f0000000300))

10:02:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:04 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}, 0x0)

10:02:04 executing program 2:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)

[  610.602989][    T7] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  610.973558][    T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  610.984018][    T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  610.995333][    T7] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  611.202974][    T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  611.212225][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.223727][    T7] usb 1-1: Product: syz
[  611.228095][    T7] usb 1-1: Manufacturer: syz
[  611.233625][    T7] usb 1-1: SerialNumber: syz
[  612.373144][    T7] cdc_ncm 1-1:1.0: bind() failure
[  612.577780][ T3141] usb 1-1: USB disconnect, device number 80
10:02:07 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d00000905820200020000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:07 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000200)={0x0, 0x1, 0x6, @multicast}, 0x10)

10:02:07 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="981e00000d"], 0x1e98}, 0x1, 0x0, 0x0, 0x4008040}, 0x24040044)

10:02:07 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}, 0x0)

10:02:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:07 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @private2, @loopback}})

10:02:07 executing program 1:
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000040)=@raw=[@map_fd], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80)

10:02:07 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000240)="83", 0x1}], 0x1}, 0x0)
sendto$unix(r0, &(0x7f0000000080)="97", 0x1, 0x0, 0x0, 0x0)

10:02:07 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b00)={<r0=>0xffffffffffffffff})
getsockname$unix(r0, 0x0, 0x0)

10:02:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:07 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}, 0x0)

[  613.552705][ T3141] usb 1-1: new high-speed USB device number 81 using dummy_hcd
10:02:07 executing program 1:
open(&(0x7f0000000440)='./file0\x00', 0x200, 0x0)
chown(&(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff)
unlink(&(0x7f0000000080)='./file0\x00')

[  613.913457][ T3141] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  613.923881][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  613.935121][ T3141] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  614.104143][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  614.113563][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.121979][ T3141] usb 1-1: Product: syz
[  614.126441][ T3141] usb 1-1: Manufacturer: syz
[  614.131177][ T3141] usb 1-1: SerialNumber: syz
[  615.293010][ T3141] cdc_ncm 1-1:1.0: bind() failure
[  615.504309][ T3141] usb 1-1: USB disconnect, device number 81
10:02:10 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d00000905820200020000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:10 executing program 2:
getgroups(0x7, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, <r0=>0x0, 0x0])
setregid(0x0, r0)

10:02:10 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x0)

10:02:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:10 executing program 3:
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
writev(r0, &(0x7f0000000680)=[{&(0x7f0000000180)="be", 0x1}], 0x1)

10:02:10 executing program 1:
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0)

10:02:10 executing program 5:
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x0)

10:02:10 executing program 1:
msync(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0)

10:02:10 executing program 2:
r0 = socket$inet6(0x18, 0x1, 0x0)
sendmsg(r0, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=[{0x10}], 0x10}, 0x0)

10:02:10 executing program 3:
pipe2(&(0x7f00000012c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0)

10:02:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r6, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:10 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b00))
socket$inet6(0x18, 0x2, 0x4c)
r0 = msgget(0x3, 0x13)
msgrcv(r0, &(0x7f00000001c0)={0x0, ""/191}, 0xc7, 0x3, 0x0)
r1 = msgget(0x2, 0x220)
msgsnd(r1, &(0x7f00000002c0)={0x2}, 0x8, 0x0)

[  616.503110][ T3141] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  616.873525][ T3141] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  616.883908][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  616.895259][ T3141] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  617.063398][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  617.072814][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.080963][ T3141] usb 1-1: Product: syz
[  617.085371][ T3141] usb 1-1: Manufacturer: syz
[  617.090087][ T3141] usb 1-1: SerialNumber: syz
[  618.232965][ T3141] cdc_ncm 1-1:1.0: bind() failure
[  618.436887][    T7] usb 1-1: USB disconnect, device number 82
10:02:13 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
sendto$unix(r0, &(0x7f0000000000)="859296ae0f6e416aa573f36cf07bb35e20a4928465ebb9be80ecddaad86ef730c572b8bf0e0a9b309a1459586a1ab2d72f4ffcbbe1a793ac8185ce283f76b4ddc51fd80ffcea123b61cbbc53ccba892f4bc94435ba9a5fff75ac671a1ae3859323ec86abf1783c97ec9d763b771ab1a3e8b11b1c8e7f91876d717c97af8c88a74612c80fca2dce4ad4b1966c4d59f7dc37", 0x91, 0x0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x3}, 0x8)

10:02:13 executing program 1:
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x0)

10:02:13 executing program 2:
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0)

10:02:13 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d00000905820200020000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:13 executing program 5:
r0 = socket$inet6(0x18, 0x3, 0x0)
getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0)

10:02:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r6, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:13 executing program 5:
socket(0x0, 0x7a13671548189659, 0x0)

10:02:13 executing program 3:
getgroups(0x7, &(0x7f0000000000)=[0xffffffffffffffff, 0x0, 0x0, <r0=>0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0])
setregid(r0, 0x0)

10:02:13 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000000), 0xc)

10:02:13 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000200)={0x0, 0x9}, 0x8)

10:02:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r6, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:13 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = dup(r0)
sendmsg$inet_sctp(r1, &(0x7f0000001700)={&(0x7f0000000300)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@dstaddrv6={0x1c, 0x84, 0xa, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x1c}, 0x0)

10:02:13 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c)
r1 = dup2(r0, r0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r2, &(0x7f0000000040)={0x10, 0x2}, 0x10)
r3 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r4 = dup2(r2, r3)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x107, &(0x7f0000000040), &(0x7f0000000080)=0x18)

10:02:13 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)

[  619.444530][ T1021] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  619.823644][ T1021] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  619.833988][ T1021] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  619.845310][ T1021] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  620.093898][ T1021] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  620.103277][ T1021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.111435][ T1021] usb 1-1: Product: syz
[  620.115853][ T1021] usb 1-1: Manufacturer: syz
[  620.120579][ T1021] usb 1-1: SerialNumber: syz
[  621.313046][ T1021] cdc_ncm 1-1:1.0: bind() failure
[  621.518669][ T3141] usb 1-1: USB disconnect, device number 83
10:02:16 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:16 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x102, &(0x7f00000001c0), &(0x7f0000000100)=0x8)

10:02:16 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040), 0x88)

10:02:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r6, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r5, 0x0, 0x0)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:16 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
sendmsg(r0, &(0x7f00000009c0)={&(0x7f0000000300)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000380)='I', 0x1}], 0x1, &(0x7f0000000780)=[{0x10}, {0x10}], 0x20}, 0x0)

10:02:16 executing program 5:
faccessat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0)

10:02:16 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x2)

10:02:16 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10)
connect$inet(r0, &(0x7f0000000900)={0x48, 0x2}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000009c0)="cb", 0x1}, {&(0x7f0000000a80)="1e5361", 0x3}], 0x2}, 0x0)

10:02:16 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0)
preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file1\x00', 0x40000400000806c1, 0x0)
writev(r1, &(0x7f0000000700)=[{0x0}], 0x1)

10:02:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r6, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r5, 0x0, 0x0)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:16 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = dup2(r0, r0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1}, 0x14)

[  622.483611][ T3141] usb 1-1: new high-speed USB device number 84 using dummy_hcd
10:02:16 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000001440)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000013c0)=[@authinfo={0x10}], 0x10}, 0x0)

[  622.843669][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  622.854879][ T3141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  623.023238][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  623.032608][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.040758][ T3141] usb 1-1: Product: syz
[  623.045225][ T3141] usb 1-1: Manufacturer: syz
[  623.049948][ T3141] usb 1-1: SerialNumber: syz
[  624.203017][ T3141] cdc_ncm 1-1:1.0: bind() failure
[  624.411529][ T3141] usb 1-1: USB disconnect, device number 84
10:02:19 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:19 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000040), &(0x7f0000000100)=0x90)

10:02:19 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000300)={0x0, @in, 0x0, 0x0, 0x81}, 0x98)

10:02:19 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x25, &(0x7f0000000280)={0x1, [<r2=>0x0]}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, r2}, 0x10)

10:02:19 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)="bf", 0x1}], 0x1, &(0x7f0000000500)=[{0x10}], 0x10}, 0x0)

10:02:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r6, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r5, 0x0, 0x0)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:19 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x25, &(0x7f0000000280)={0x1, [<r2=>0x0]}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080)=0x10)

10:02:19 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10)

10:02:19 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c)
r1 = dup2(r0, r0)
sendmsg$inet_sctp(r1, &(0x7f0000002ac0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0)

10:02:19 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000000), 0x10)

10:02:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r6, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:19 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c)

[  625.423707][ T3141] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  625.783176][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  625.794669][ T3141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  625.963885][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  625.975162][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.983787][ T3141] usb 1-1: Product: syz
[  625.988086][ T3141] usb 1-1: Manufacturer: syz
[  625.992902][ T3141] usb 1-1: SerialNumber: syz
[  627.153160][ T3141] cdc_ncm 1-1:1.0: bind() failure
[  627.356693][ T1021] usb 1-1: USB disconnect, device number 85
10:02:21 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:21 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)=ANY=[@ANYBLOB="01", @ANYRES32=<r3=>0x0], &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x901, &(0x7f00000001c0)={r3}, 0x8)

10:02:21 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000000), &(0x7f00000000c0)=0x98)

10:02:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r6, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:21 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000240)={0x10, 0x2}, 0x10)

10:02:21 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = dup2(r0, r0)
sendmsg$inet_sctp(r1, &(0x7f0000001300)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0)

10:02:22 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup(r0)
recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x60042)

10:02:22 executing program 3:
r0 = socket(0x1c, 0x5, 0x0)
sendmsg$unix(r0, &(0x7f0000005100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x78}, 0x0)

10:02:22 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg(r0, &(0x7f0000000040)={&(0x7f0000001380)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)

10:02:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r6, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:22 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000001440)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=[@init={0x14}, @init={0x14}], 0x28}, 0x0)

[  628.363785][ T1021] usb 1-1: new high-speed USB device number 86 using dummy_hcd
10:02:22 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup(r0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r2, &(0x7f0000000040)={0x10, 0x2}, 0x10)
r3 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r4 = dup2(r2, r3)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f0000000100)={0x1, [<r5=>0x0]}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000001840)={r5}, &(0x7f0000001880)=0x14)

[  628.734255][ T1021] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  628.745572][ T1021] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  628.943642][ T1021] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  628.953107][ T1021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.961269][ T1021] usb 1-1: Product: syz
[  628.966067][ T1021] usb 1-1: Manufacturer: syz
[  628.970802][ T1021] usb 1-1: SerialNumber: syz
[  630.103085][ T1021] cdc_ncm 1-1:1.0: bind() failure
[  630.314779][ T1021] usb 1-1: USB disconnect, device number 86
10:02:24 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d00000905820200020000000905030200"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:24 executing program 2:
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000), 0x4)

10:02:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r6, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:24 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup(r0)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4)

10:02:24 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
sendmsg(r0, &(0x7f00000016c0)={&(0x7f0000000180)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[{0x10}], 0x10}, 0x0)

10:02:24 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@init={0x14}], 0x38}, 0x0)

10:02:25 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x71, &(0x7f0000000400), 0x8)

10:02:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r6, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  631.264633][ T3141] usb 1-1: new high-speed USB device number 87 using dummy_hcd
10:02:25 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@init={0x14}, @dstaddrv4={0x10, 0x84, 0x9, @multicast1}, @dstaddrv4={0x10, 0x84, 0x9, @remote={0xac, 0x14, 0x0}}], 0x34}, 0x0)

10:02:25 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, @in, 0x0, 0x6, 0x110}, 0x98)

10:02:25 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = dup(r0)
sendmsg$inet_sctp(r1, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[@dstaddrv6={0x1c, 0x84, 0xa, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x1c}, 0x0)

10:02:25 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000440), &(0x7f0000000500)=0x98)

[  631.636621][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  631.647967][ T3141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  631.657895][ T3141] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  631.873513][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  631.882967][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.891114][ T3141] usb 1-1: Product: syz
[  631.895917][ T3141] usb 1-1: Manufacturer: syz
[  631.900752][ T3141] usb 1-1: SerialNumber: syz
[  633.103042][ T3141] cdc_ncm 1-1:1.0: bind() failure
[  633.306841][ T3141] usb 1-1: USB disconnect, device number 87
10:02:27 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d00000905820200020000000905030200"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r6, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:27 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@un=@file={0xa}, 0xa)

10:02:27 executing program 2:
r0 = socket(0x1c, 0x5, 0x0)
setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), 0x8)

10:02:27 executing program 5:
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0)

10:02:27 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)={0x1, [<r3=>0x0]}, &(0x7f00000000c0)=0x8)
r4 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r4, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c)
r5 = dup2(r4, r4)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x108, &(0x7f00000001c0)={r3, 0x0, 0xf}, &(0x7f0000000200)=0x18)

10:02:28 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)={0x1, [<r3=>0x0]}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000140)=0x10)

10:02:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, 0x0, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:28 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
recvmsg(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xc0)

[  634.336911][ T3141] usb 1-1: new high-speed USB device number 88 using dummy_hcd
10:02:28 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000140), 0x98)

10:02:28 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c)
r1 = dup2(r0, r0)
r2 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c)
r3 = dup2(r2, r2)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000001c0)={0x1, [<r4=>0x0]}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0x10001, 0x0, 0x6}, 0x10)

10:02:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, 0x0, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  634.723296][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  634.734927][ T3141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  634.744872][ T3141] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  635.063684][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  635.073010][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.083252][ T3141] usb 1-1: Product: syz
[  635.087553][ T3141] usb 1-1: Manufacturer: syz
[  635.092279][ T3141] usb 1-1: SerialNumber: syz
[  636.313083][ T3141] cdc_ncm 1-1:1.0: bind() failure
[  636.526216][ T3141] usb 1-1: USB disconnect, device number 88
10:02:31 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d00000905820200020000000905030200"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:31 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)

10:02:31 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
recvmsg(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x40081)

10:02:31 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000080), 0x8)

10:02:31 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c)

10:02:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, 0x0, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:31 executing program 5:
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
pipe2(&(0x7f00000001c0), 0x0)

10:02:31 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c)
r1 = dup(r0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000000c0), &(0x7f0000000180)=0x98)

10:02:31 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
listen(r0, 0x0)

10:02:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x0, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:31 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind(r0, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c)

[  637.523271][ T1021] usb 1-1: new high-speed USB device number 89 using dummy_hcd
10:02:31 executing program 5:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6)

[  637.861731][ T1199] ieee802154 phy0 wpan0: encryption failed: -22
[  637.868352][ T1199] ieee802154 phy1 wpan1: encryption failed: -22
[  637.893476][ T1021] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  637.904892][ T1021] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  637.915123][ T1021] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  638.083027][ T1021] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  638.092356][ T1021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.100851][ T1021] usb 1-1: Product: syz
[  638.105406][ T1021] usb 1-1: Manufacturer: syz
[  638.110139][ T1021] usb 1-1: SerialNumber: syz
[  639.343181][ T1021] cdc_ncm 1-1:1.0: bind() failure
[  639.546677][ T3141] usb 1-1: USB disconnect, device number 89
10:02:34 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:34 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0x8)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r6 = dup2(r4, r5)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x105, &(0x7f0000000180)={0x1, [<r7=>0x0]}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x902, &(0x7f0000000000)=r7, 0x4)

10:02:34 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
bind(r0, &(0x7f00000028c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
dup2(r0, r1)
r2 = fcntl$dupfd(r1, 0x0, r0)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x903, &(0x7f0000000500), 0x8)

10:02:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x0, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:34 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
dup2(r0, r1)
connect$inet(r1, &(0x7f0000000040)={0x10, 0x2}, 0x10)

10:02:34 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup2(r0, r0)
sendto$inet(r1, &(0x7f0000000140)="03", 0x1, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10)

10:02:34 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0), 0x98)

10:02:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x0, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  640.553529][ T3141] usb 1-1: new high-speed USB device number 90 using dummy_hcd
10:02:34 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@authinfo={0x10}], 0x10}, 0x0)

10:02:34 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c)
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8)

10:02:34 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x11}, 0x10)

10:02:34 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup2(r0, r0)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x902, &(0x7f0000000040), 0x4)

[  640.913593][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  641.093073][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  641.103295][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.111451][ T3141] usb 1-1: Product: syz
[  641.115879][ T3141] usb 1-1: Manufacturer: syz
[  641.120624][ T3141] usb 1-1: SerialNumber: syz
[  641.902991][ T3141] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  641.909220][ T3141] cdc_ncm 1-1:1.0: bind() failure
10:02:37 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r6, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:37 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)={0x1, [<r3=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={r3, 0x0, 0x0, 0x7f}, 0x14)

10:02:37 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
setsockopt$inet6_int(r0, 0x29, 0xa, 0x0, 0x0)

10:02:37 executing program 3:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3f, &(0x7f0000000040)=0x243, 0x4)

10:02:37 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000380), 0x8)

[  643.216964][    T7] usb 1-1: USB disconnect, device number 90
10:02:37 executing program 2:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x55, 0x0, 0x0)

10:02:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r6, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:37 executing program 5:
syz_clone(0x11368000, 0x0, 0x0, 0x0, 0x0, 0x0)

10:02:37 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004b40)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

10:02:37 executing program 1:
syz_clone(0x70084000, 0x0, 0x0, 0x0, 0x0, 0x0)

[  643.843038][    T7] usb 1-1: new high-speed USB device number 91 using dummy_hcd
10:02:38 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  644.213663][    T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  644.383227][    T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  644.392744][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.402104][    T7] usb 1-1: Product: syz
[  644.406785][    T7] usb 1-1: Manufacturer: syz
[  644.411581][    T7] usb 1-1: SerialNumber: syz
[  645.143002][    T7] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  645.149460][    T7] cdc_ncm 1-1:1.0: bind() failure
10:02:40 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:40 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

10:02:40 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x803e}, 0x0)

10:02:40 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = dup2(r0, r0)
sendmsg$inet_sctp(r1, &(0x7f0000001300)={&(0x7f0000000180)=@in={0x10, 0x2}, 0x10, 0x0}, 0x141)

10:02:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r6, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:40 executing program 1:
syz_clone(0x10000200, 0x0, 0x0, 0x0, 0x0, 0x0)

[  646.404205][ T3141] usb 1-1: USB disconnect, device number 91
10:02:40 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0)

10:02:40 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r0)

10:02:40 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004b40)={0x18, 0x5, &(0x7f00000004c0)=@framed={{}, [@btf_id]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

10:02:40 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000080)=""/168, 0x26, 0xa8, 0x1}, 0x20)

10:02:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:40 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000000c0))

[  647.013100][ T3141] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  647.433194][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.603448][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  647.612805][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.621075][ T3141] usb 1-1: Product: syz
[  647.625577][ T3141] usb 1-1: Manufacturer: syz
[  647.630307][ T3141] usb 1-1: SerialNumber: syz
[  648.343128][ T3141] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  648.349358][ T3141] cdc_ncm 1-1:1.0: bind() failure
10:02:43 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:43 executing program 3:
syz_clone(0x40000600, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0)

[  649.640217][    T7] usb 1-1: USB disconnect, device number 92
10:02:43 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4}, 0x48)

10:02:43 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000000600)=""/240, 0x26, 0xf0, 0x1}, 0x20)

10:02:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:43 executing program 5:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f00000019c0)={&(0x7f0000000580)=@id, 0x10, 0x0}, 0x40020c0)

10:02:43 executing program 1:
r0 = syz_clone(0x40000600, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000011c0)={r0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001180)='devices.list\x00'}, 0x30)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@txtime={{0x18}}, @mark={{0x14}}, @timestamping={{0x14}}, @timestamping={{0x14}}, @timestamping={{0x14}}, @timestamping={{0x14}}, @mark={{0x14}}], 0xa8}, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001680)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
bpf$BPF_PROG_ATTACH(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)

10:02:44 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x4020940d, &(0x7f0000000000)={'wg0\x00'})

10:02:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:44 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f00)={&(0x7f0000000300)=ANY=[], &(0x7f0000001e00)=""/219, 0x2a, 0xdb, 0x1}, 0x20)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000080))

10:02:44 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="ab110000010000fcfffff4009ad22fff45f81f"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xef, &(0x7f0000000180)=""/239, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  650.212782][    T7] usb 1-1: new high-speed USB device number 93 using dummy_hcd
10:02:44 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000000e00)="7a099ab8888e9687bc2233546a1f25dca436cb8345ac086df19676f3a915154d6cc050bfc3ec345ecf08a3661e4b50ce10835afcab908bd6c1831253f9c7bfcd5576da05f92c5ce0fd088e", 0x4b}], 0x1}, 0x0)
recvmsg$unix(r1, &(0x7f0000003500)={0x0, 0x0, &(0x7f0000003440)=[{0x0}, {&(0x7f00000004c0)=""/74, 0x4a}], 0x2}, 0x22)

[  650.682959][    T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  650.865285][    T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  650.875048][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.883427][    T7] usb 1-1: Product: syz
[  650.887786][    T7] usb 1-1: Manufacturer: syz
[  650.892698][    T7] usb 1-1: SerialNumber: syz
[  651.632941][    T7] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  651.639314][    T7] cdc_ncm 1-1:1.0: bind() failure
10:02:46 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:46 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

10:02:46 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x5460, 0x0)

10:02:46 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r0}, 0x10)

10:02:46 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
recvmsg$unix(r1, &(0x7f0000003500)={0x0, 0x0, 0x0}, 0x0)

[  652.819967][ T1021] usb 1-1: USB disconnect, device number 93
10:02:47 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x48)

10:02:47 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f0000000000)={'wg0\x00'})

10:02:47 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

10:02:47 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x5451, 0x0)

10:02:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:47 executing program 1:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000001780)=""/239, 0x26, 0xef, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x4}, 0x10}, 0x80)

[  653.453156][ T1021] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  653.823451][ T1021] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  653.993092][ T1021] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  654.002422][ T1021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.010765][ T1021] usb 1-1: Product: syz
[  654.015274][ T1021] usb 1-1: Manufacturer: syz
[  654.019989][ T1021] usb 1-1: SerialNumber: syz
[  654.763045][ T1021] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  654.769238][ T1021] cdc_ncm 1-1:1.0: bind() failure
10:02:50 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:50 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000004580), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'xfrm0\x00', 0x12})
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1)

10:02:50 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000004580), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'xfrm0\x00', 0x12})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000))

10:02:50 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000004580), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'xfrm0\x00', 0x12})
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000))

10:02:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  655.989571][ T3141] usb 1-1: USB disconnect, device number 94
10:02:50 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001940)=@bpf_lsm={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
close(r0)

10:02:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:50 executing program 1:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000001780)=""/239, 0x26, 0xef, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400), 0x20000410}, 0x80)

10:02:50 executing program 3:
request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0xffffffffffffffff)

10:02:50 executing program 2:
openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001640))

10:02:50 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000004580), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'xfrm0\x00', 0x12})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000))

[  656.592921][ T3141] usb 1-1: new high-speed USB device number 95 using dummy_hcd
10:02:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  656.974162][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  657.173116][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  657.182354][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.190605][ T3141] usb 1-1: Product: syz
[  657.195017][ T3141] usb 1-1: Manufacturer: syz
[  657.201703][ T3141] usb 1-1: SerialNumber: syz
[  657.923082][ T3141] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  657.929397][ T3141] cdc_ncm 1-1:1.0: bind() failure
10:02:53 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:53 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x54)

10:02:53 executing program 3:
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001340)='syz1\x00', 0x1ff)

10:02:53 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x43400)

10:02:53 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000004580), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'xfrm0\x00', 0x12})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000))

10:02:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  659.190913][ T3141] usb 1-1: USB disconnect, device number 95
10:02:53 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001500)={r0, &(0x7f00000013c0), 0x0}, 0x20)

10:02:53 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@datasec={0x4, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x0, 0x9}], "c62bc5"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "dd"}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000940)=""/190, 0x46, 0xbe, 0x1}, 0x20)

10:02:53 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7f)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x32, 0x0, 0x0)

10:02:53 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000004580), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'xfrm0\x00', 0x12})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000))

10:02:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, 0x0, 0x80)

10:02:53 executing program 2:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)

[  659.762725][ T3141] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  660.153576][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  660.333184][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  660.342417][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.350814][ T3141] usb 1-1: Product: syz
[  660.355158][ T3141] usb 1-1: Manufacturer: syz
[  660.359818][ T3141] usb 1-1: SerialNumber: syz
[  661.063128][ T3141] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  661.069352][ T3141] cdc_ncm 1-1:1.0: bind() failure
10:02:56 executing program 1:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
clock_gettime(0x0, &(0x7f0000000580))

10:02:56 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:56 executing program 3:
pipe2(&(0x7f0000000280), 0x0)
select(0x40, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={0x5b0e}, &(0x7f0000000200)={0x0, 0x2710})

10:02:56 executing program 5:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0)

10:02:56 executing program 2:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000090000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r1}, 0x10)
read$rfkill(r0, 0x0, 0x0)

10:02:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, 0x0, 0x80)

[  662.363632][ T3141] usb 1-1: USB disconnect, device number 96
10:02:56 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b)

10:02:56 executing program 2:
r0 = shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000)
shmdt(r0)

10:02:56 executing program 5:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040))

10:02:56 executing program 3:
pipe2(&(0x7f0000000280), 0x0)
select(0x40, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={0x5b0e}, &(0x7f0000000200)={0x0, 0x2710})

10:02:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, 0x0, 0x80)

10:02:56 executing program 3:
pipe2(&(0x7f0000000280), 0x0)
select(0x40, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={0x5b0e}, &(0x7f0000000200)={0x0, 0x2710})

10:02:57 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x600, 0x2, 0x0, 0x1}, 0x48)

[  662.925300][ T3141] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  663.323079][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  663.502961][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  663.512280][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.520621][ T3141] usb 1-1: Product: syz
[  663.525076][ T3141] usb 1-1: Manufacturer: syz
[  663.529804][ T3141] usb 1-1: SerialNumber: syz
[  664.232955][ T3141] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  664.239199][ T3141] cdc_ncm 1-1:1.0: bind() failure
10:02:59 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:02:59 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48)

10:02:59 executing program 2:
r0 = shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000)
shmdt(r0)

10:02:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x6c, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:02:59 executing program 3:
pipe2(&(0x7f0000000280), 0x0)
select(0x40, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={0x5b0e}, &(0x7f0000000200)={0x0, 0x2710})

10:02:59 executing program 5:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff)

[  665.538683][ T3141] usb 1-1: USB disconnect, device number 97
10:02:59 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)="f346f7ce3515c53ffa6d1f01c7dd5e76c46e6354d87b9085db8ff5d513f52398baee9eea568fb7d68d1b01a8167fcd472d79425c882f3b8e6e5d5f841dae46680a6060cfffb178fdc79208033c2ea68ae191494602c61c6b55d0396e0c3e9c644b6efb9a2f3415aa0484ac06ade41f01fade8432c9d7e9189cf303cd48a1201cd07122b9fabe725704dfc613b3d5aa73", 0x90)

10:02:59 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000))

10:02:59 executing program 2:
r0 = shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000)
shmdt(r0)

10:02:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)

10:02:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x6c, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:00 executing program 2:
r0 = shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000)
shmdt(r0)

[  666.123060][ T3141] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[  666.524546][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  666.703460][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  666.712860][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.723023][ T3141] usb 1-1: Product: syz
[  666.727319][ T3141] usb 1-1: Manufacturer: syz
[  666.732039][ T3141] usb 1-1: SerialNumber: syz
[  667.442875][ T3141] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  667.449064][ T3141] cdc_ncm 1-1:1.0: bind() failure
10:03:02 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:03:02 executing program 3:
openat$vcsu(0xffffff9c, &(0x7f0000000b80), 0x288000, 0x0)
keyctl$negate(0x15, 0x0, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'syztnl0\x00', <r1=>0x0, 0x4, 0xd5, 0x9, 0x6, 0x40, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast2, 0x7800, 0x40, 0x5, 0x2b}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', <r2=>0x0, 0x29, 0x9, 0x5, 0x6, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8, 0x1, 0x6, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'sit0\x00', <r3=>0x0, 0x29, 0x8, 0x5, 0xcc6, 0x31, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x700, 0x1, 0x10000, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', <r4=>0x0, 0x4, 0x4, 0x0, 0x3, 0x2, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7, 0x9, 0x100}})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000600)={0x2d4, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="2400e944a7ec24971d485777a04d182103e3ab7593992c31308d5fde943a94014fcc7c3bc8b825f54f602c90b7db0be0fe8aed5dd3ef53341272de70a91c3d334214f080b715c9b96aa2656fa3fba459309981b90000000000000000d32825070678739367", @ANYRES16=r0, @ANYBLOB="000139bd7000fbdbdf2503000000050038000100000005002f0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40055}, 0x800)
add_key$fscrypt_provisioning(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, &(0x7f0000000a00)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffc)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffe, &(0x7f0000000a40)='cifs.idmap\x00', 0x0)
request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', 0xfffffffffffffffb)
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0x0)

10:03:02 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x404, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0, 0x4}, 0x20)

10:03:02 executing program 1:
r0 = socket$kcm(0x29, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e1, &(0x7f0000000580)={r1})

10:03:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x6c, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:02 executing program 2:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x48)

[  668.742171][ T3141] usb 1-1: USB disconnect, device number 98
10:03:03 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNGETDEVNETNS(r0, 0x89a0, 0x0)

10:03:03 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7e40, 0x0)

10:03:03 executing program 1:
r0 = socket$kcm(0x29, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000580)={r1})

10:03:03 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000440)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

10:03:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:03 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = dup2(r0, r0)
sendmsg$inet_sctp(r1, &(0x7f0000001300)={&(0x7f0000000100)=@in={0x10}, 0x10, 0x0, 0x0, 0x0, 0x4c}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x10)

[  669.323082][ T3141] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[  669.697687][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  669.883009][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  669.892255][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.902643][ T3141] usb 1-1: Product: syz
[  669.906945][ T3141] usb 1-1: Manufacturer: syz
[  669.911662][ T3141] usb 1-1: SerialNumber: syz
[  670.602876][ T3141] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  670.609026][ T3141] cdc_ncm 1-1:1.0: bind() failure
10:03:06 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:03:06 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

10:03:06 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@cb_func={0x18, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000440)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

10:03:06 executing program 1:
r0 = socket$kcm(0x29, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x40086602, &(0x7f0000000580)={r1})

10:03:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:06 executing program 2:
socketpair(0x2, 0x0, 0x4c000000, &(0x7f0000000080))

[  671.907095][ T3141] usb 1-1: USB disconnect, device number 99
10:03:06 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}}, &(0x7f0000000200)=""/194, 0x32, 0xc2, 0x1}, 0x20)

10:03:06 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x2}, 0xc, 0x0, 0x0, &(0x7f0000000440)=[{0x808, 0x0, 0x0, "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"}], 0x808}, 0x0)

10:03:06 executing program 2:
munmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000)
r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff})
shmat(r0, &(0x7f0000ff7000/0x1000)=nil, 0x0)

10:03:06 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000540))

10:03:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:06 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/udplite\x00')
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

[  672.492897][ T3141] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[  672.903119][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  673.073046][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  673.082292][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.090700][ T3141] usb 1-1: Product: syz
[  673.095123][ T3141] usb 1-1: Manufacturer: syz
[  673.099846][ T3141] usb 1-1: SerialNumber: syz
[  673.802925][ T3141] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  673.809102][ T3141] cdc_ncm 1-1:1.0: bind() failure
10:03:09 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:03:09 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000100)=@ethtool_cmd={0x26}})

10:03:09 executing program 2:
syz_emit_ethernet(0x22, &(0x7f0000000180)={@broadcast, @remote, @val, {@ipv4}}, 0x0)

10:03:09 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8980, 0x0)

10:03:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

[  675.107284][ T3141] usb 1-1: USB disconnect, device number 100
10:03:09 executing program 1:
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1104c0, 0x0)

10:03:09 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = dup2(r0, r0)
sendmsg$inet_sctp(r1, &(0x7f0000001300)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x4c}, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x8)

10:03:09 executing program 2:
syz_emit_ethernet(0x311, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffffffffffffff91"], 0x0)

10:03:09 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0})
setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={r1}, 0x10)

10:03:09 executing program 5:
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)

10:03:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:09 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00')
readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x31)

[  675.742927][ T3141] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[  676.103696][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  676.283110][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  676.292398][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.300922][ T3141] usb 1-1: Product: syz
[  676.305443][ T3141] usb 1-1: Manufacturer: syz
[  676.310163][ T3141] usb 1-1: SerialNumber: syz
[  677.013075][ T3141] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  677.019271][ T3141] cdc_ncm 1-1:1.0: bind() failure
10:03:12 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:03:12 executing program 2:
memfd_create(&(0x7f0000000280)='@[\'%!\x00', 0x7)

10:03:12 executing program 5:
io_setup(0x8000, &(0x7f0000000000))
io_setup(0x3, &(0x7f0000000040))

10:03:12 executing program 3:
r0 = socket(0x11, 0x3, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8901, &(0x7f00000001c0))

10:03:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:12 executing program 1:
syz_io_uring_setup(0x4ded, &(0x7f0000000300), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff)

[  678.318480][ T3141] usb 1-1: USB disconnect, device number 101
10:03:12 executing program 3:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)

10:03:12 executing program 1:
io_setup(0xaf, &(0x7f0000000540)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000000ec0)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])

10:03:12 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x10000000, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0xa, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000001680))
socket$packet(0x11, 0x2, 0x300)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000080)=0x3467, 0x4)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2)
ioctl$BLKTRACESTOP(r2, 0x1275, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x9, 0x8800003f, 0x5, 0x800000000000000})
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)
r3 = socket(0x11, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r4 = socket(0xf, 0xa, 0x91)
ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000001640))
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000140)={0x1478, 0x0, 0x310, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e15}]}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @private0}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b3b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}}}}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x1280, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ID={0x82, 0x3, "b359797cffcdab9b388f47c97028b268c21e3ec32f3ed5f5ad354cc5d7d42ee3b6e248b5cf5d906868a7357a7f5968dd683fae8e5964e107ac865b4731e3419dcb821f6d5f9af97ae55cce064722ffbc17fc86c2e982818b171c849cc1746cfc08e360e97a464860c9f3f417e953cbd91ce742ebb249db9cb687788cf3b7"}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "8d37d9da3dbfec69726e8d7d9ddabd1744b4d208c3fd2428be6b98d556f1bd9b48053752196298de95ea5dfed3033b47bcd58462a33a58fb5be0dec9ca18d4b5f0609b97e34d714f34bbc0804949132c65487d5372b7a6f848de25213fdcd250aba654af94b2c7402868a3c2c79b5252104a082e8769983463807eea67e6257c28a054bfcec190092e0010b48b36eb83be927137ff142a98f82dd3db224eb783c6d155095986b51bedbf5c1a608cdac29dfffb7f33ae8650ed69303926ef94fee99dc6c71da13a4f751261a4531f4f44b1e7464f622da36255291ac927"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_ID={0xf8, 0x3, "dab7078a566c88a27a1702f26dc71554affad069fc78115a7150b5fe3736e4c7d6d0eca643d0b7734b14230eed035281927399601c38ac5e053f624f2020e7c1164f288f5b5c040b63cc21281223876ff22aee4c2e969c94f3d2c0223926303e71e49e74fb1333323e8083b8e21382332a0a74a6ab36e6bec09047f36fef881cfc584f2ba1e225ee6390ab6bcea87cc4e6257fe71bc9cedaf63473781af5acc5e09afb3b082a5fb97eb02190c9627e89a1c9b527e0656b92b6bd6e2461c52a6a986a6c37eb73e85c5b6ece241d9c79e2b10e11491e79b0ece0ccc8fd25edd03d78e3607b92d58e06df11d030ed77b039098ff168"}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x49}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2d1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x1478}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000080)

10:03:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="040026bd7000fbdbdf25010000000401028014000180080001000500000008000100040000001c000180080001003e3a2c5a080001000200000008000100000000001c00018008000100020000000800010027f3b359755672d1050000001400018008ff00000100000008000100000000001c0001800800010001000000080001000300000008000100020000001c0001800800010004000000080001000300000008000100040000002400018008000100030000000800010003000000080001000500000008000100060000004400018008000100d6acaf3c08000100000000000800010000000000080001000800000008000100020000000800010007000000080001000100000008000100010000000300028054000180080001000000000008000100060000000800080001000400000008000100060000000800010007000000080001000000000008000100070000000800010004000000080001000000000004000300"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:12 executing program 5:
io_setup(0xaf, &(0x7f0000000540)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000000ec0)=[0x0])

[  678.713575][   T24] audit: type=1326 audit(1650535392.776:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11139 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faefecf50e9 code=0x0
10:03:12 executing program 1:
io_setup(0x3, &(0x7f0000000040)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0)

[  678.973106][ T3141] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[  679.333373][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  679.503212][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  679.512421][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.523211][ T3141] usb 1-1: Product: syz
[  679.527505][ T3141] usb 1-1: Manufacturer: syz
[  679.532238][ T3141] usb 1-1: SerialNumber: syz
[  680.232901][ T3141] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  680.241709][ T3141] cdc_ncm 1-1:1.0: bind() failure
10:03:15 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:03:15 executing program 2:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)

10:03:15 executing program 5:
r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab05, 0xffffffffffffffff)

10:03:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:15 executing program 1:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x541b, 0x0)

10:03:15 executing program 3:
syz_io_uring_setup(0x4ded, &(0x7f0000000300)={0x0, 0x0, 0x7, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))

[  681.496460][ T3141] usb 1-1: USB disconnect, device number 102
10:03:15 executing program 2:
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0x8})

10:03:15 executing program 5:
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101a40, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0))

10:03:15 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0)
write$khugepaged_scan(r0, 0x0, 0x0)

10:03:15 executing program 1:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x40049409, &(0x7f00000000c0))

10:03:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:16 executing program 2:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000200)='\x00', &(0x7f0000000240)="d7", 0x1)

[  682.113389][ T3141] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[  682.494225][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  682.673073][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  682.682300][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.690556][ T3141] usb 1-1: Product: syz
[  682.696813][ T3141] usb 1-1: Manufacturer: syz
[  682.701544][ T3141] usb 1-1: SerialNumber: syz
[  683.392901][ T3141] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  683.399141][ T3141] cdc_ncm 1-1:1.0: bind() failure
10:03:18 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:03:18 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$link(0x2, r0, 0x0)

10:03:18 executing program 1:
mq_notify(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x4, @thr={0x0, 0x0}})

10:03:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:18 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040))

10:03:18 executing program 2:
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0)

[  684.673928][ T3141] usb 1-1: USB disconnect, device number 103
10:03:18 executing program 3:
io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0)

10:03:18 executing program 2:
r0 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='mqueue\x00', 0x0, r0)

10:03:19 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab04, 0xffffffffffffffff)

10:03:19 executing program 5:
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101a40, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101a40, 0x0)

10:03:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:19 executing program 3:
socket$key(0xf, 0x3, 0x2)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="0213000007"], 0x38}}, 0x0)

[  685.283061][ T3141] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[  685.653399][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  685.843183][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  685.852415][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.860752][ T3141] usb 1-1: Product: syz
[  685.865191][ T3141] usb 1-1: Manufacturer: syz
[  685.871842][ T3141] usb 1-1: SerialNumber: syz
[  686.552939][ T3141] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  686.559225][ T3141] cdc_ncm 1-1:1.0: bind() failure
10:03:21 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:03:21 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)

10:03:21 executing program 1:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={0x0}}, 0x20000054)

10:03:21 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x4}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

10:03:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:21 executing program 3:
io_setup(0x8000, &(0x7f0000000000))
io_setup(0x3, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0)

[  687.840116][ T3141] usb 1-1: USB disconnect, device number 104
10:03:22 executing program 1:
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff})

10:03:22 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x894c, 0x0)

10:03:22 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab08, 0xffffffffffffffff)

10:03:22 executing program 3:
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0xb1c80b9f840f2e7d, 0xffffffffffffffff, 0x10000000)

10:03:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:22 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
accept4$inet(r0, 0x0, 0x0, 0x4)

[  688.404608][ T3141] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[  688.823842][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  689.003220][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  689.012690][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.020827][ T3141] usb 1-1: Product: syz
[  689.025261][ T3141] usb 1-1: Manufacturer: syz
[  689.029990][ T3141] usb 1-1: SerialNumber: syz
[  690.192966][ T3141] cdc_ncm 1-1:1.0: failed to get mac address
[  690.213069][ T3141] cdc_ncm 1-1:1.0: bind() failure
[  690.242966][ T3141] cdc_ncm: probe of 1-1:1.1 failed with error -71
[  690.262858][ T3141] cdc_mbim: probe of 1-1:1.1 failed with error -71
[  690.302987][ T3141] usbtest: probe of 1-1:1.1 failed with error -71
[  690.323672][ T3141] usb 1-1: USB disconnect, device number 105
10:03:24 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000000000905810300020000000904010000120d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20215e0000005e11a8a38931166120a025959ffbd519c9d0676c2f5e935ba680190111138a55db4f910f92b18de9845fcbd67e4e1f4f1c9ad466fca8c4f1842e685c38c920070c43e1eec5aff8b2b19bd4d9f93e75dcd6626a208fb587a93161a214bccd"], &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3f, 0x5, 0x7, 0x6, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0xaa, "656a1af46f504ec3bf94accef1b1b501dfe116a81d76dd9b56db2bf61bbc652fd470acf757b6f7506a86301dfeebea243fe69a81e07be87ac120c09d604473ba428afe0bc591d7e176be0855cf13a6ff6209cfba5f125e90180924e2164a3038b28a3f886f5de8c0741d62705b1a381a5f7bf4b39248f2c5fa22498472d8d2786911a6389a8cf92ce62e47cf52689924865cf8b6ed3f7a60cf7a59b36f9641770d0d27a5a6ec58cbf5b5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x10, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffc1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6aea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xffc0}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5eb2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, 0xfffffffffffffffe, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}})

10:03:24 executing program 2:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x82, 0x0)

10:03:24 executing program 1:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION(r0, 0x801c581f, 0x0)

10:03:24 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0)

10:03:24 executing program 5:
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
socketpair(0x0, 0x0, 0x0, 0x0)

10:03:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:24 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000080)={@rand_addr, @empty, @dev}, 0xc)

10:03:24 executing program 1:
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

10:03:24 executing program 2:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "a39b8089"})

10:03:25 executing program 5:
r0 = syz_io_uring_setup(0x23fe, &(0x7f0000000100), &(0x7f00007ff000/0x800000)=nil, &(0x7f0000c14000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000200), 0x1)

10:03:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xf999005a613c22b5}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="74010000", @ANYRESOCT=r7, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f06a55fbd9e38a6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ed725c67a910276b2f2472102d05f14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02704ccf3aa345f2d444e3960229e5f80bfc2d13cec00e01"}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r4, 0x509, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r4, 0x400, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x1, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7e8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xfffffffffffffc54, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)

10:03:25 executing program 3:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0x8008700d, 0x0)

[  691.122744][ T3141] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  691.393646][ T9361] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  691.493473][ T3141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  691.684020][ T3141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  691.693745][ T3141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.701889][ T3141] usb 1-1: Product: syz
[  691.706287][ T3141] usb 1-1: Manufacturer: syz
[  691.711005][ T3141] usb 1-1: SerialNumber: syz
[  691.993712][ T9361] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  692.003081][ T9361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.011229][ T9361] usb 3-1: Product: syz
[  692.017771][ T9361] usb 3-1: Manufacturer: syz
[  692.022898][ T9361] usb 3-1: SerialNumber: syz
[  692.064593][ T9361] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  692.712974][   T19] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  692.863353][ T3141] cdc_ncm 1-1:1.0: failed to get mac address
[  692.894416][ T3141] cdc_ncm 1-1:1.0: bind() failure
[  692.923008][ T3141] cdc_ncm: probe of 1-1:1.1 failed with error -71
[  692.933542][   T19] =====================================================
[  692.940623][   T19] BUG: KMSAN: kernel-usb-infoleak in usb_submit_urb+0x6c1/0x2aa0
[  692.948400][   T19]  usb_submit_urb+0x6c1/0x2aa0
[  692.953220][   T19]  hif_usb_send+0x5f0/0x16f0
[  692.957891][   T19]  htc_connect_service+0x143e/0x1970
[  692.963194][   T19]  ath9k_wmi_connect+0x177/0x2c0
[  692.968172][   T19]  ath9k_init_htc_services+0xf6/0xee0
[  692.973589][   T19]  ath9k_htc_probe_device+0x4f5/0x3db0
[  692.979100][   T19]  ath9k_htc_hw_init+0xdd/0x190
[  692.983984][   T19]  ath9k_hif_usb_firmware_cb+0x42e/0xaa0
[  692.989662][   T19]  request_firmware_work_func+0x1b9/0x2e0
[  692.995470][   T19]  process_one_work+0xdb6/0x1820
[  693.000476][   T19]  worker_thread+0x10b3/0x21e0
[  693.005260][   T19]  kthread+0x3c7/0x500
[  693.009404][   T19]  ret_from_fork+0x1f/0x30
[  693.013885][   T19] 
[  693.016215][   T19] Uninit was created at:
[  693.020523][   T19]  __kmalloc_node_track_caller+0xde3/0x14f0
[  693.026442][   T19]  __alloc_skb+0x545/0xf90
[  693.030951][   T19]  htc_connect_service+0x1029/0x1970
[  693.036271][   T19]  ath9k_wmi_connect+0x177/0x2c0
[  693.041241][   T19]  ath9k_init_htc_services+0xf6/0xee0
[  693.046645][   T19]  ath9k_htc_probe_device+0x4f5/0x3db0
[  693.052161][   T19]  ath9k_htc_hw_init+0xdd/0x190
[  693.057035][   T19]  ath9k_hif_usb_firmware_cb+0x42e/0xaa0
[  693.062713][   T19]  request_firmware_work_func+0x1b9/0x2e0
[  693.068477][   T19]  process_one_work+0xdb6/0x1820
[  693.073450][   T19]  worker_thread+0x10b3/0x21e0
[  693.078259][   T19]  kthread+0x3c7/0x500
[  693.082379][   T19]  ret_from_fork+0x1f/0x30
[  693.086833][   T19] 
[  693.089162][   T19] Bytes 4-7 of 18 are uninitialized
[  693.094366][   T19] Memory access of size 18 starts at ffff8880850d0200
[  693.101139][   T19] 
[  693.103469][   T19] CPU: 1 PID: 19 Comm: kworker/1:0 Not tainted 5.17.0-syzkaller #0
[  693.111394][   T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  693.121473][   T19] Workqueue: events request_firmware_work_func
[  693.127658][   T19] =====================================================
[  693.134609][   T19] Disabling lock debugging due to kernel taint
[  693.144333][   T19] Kernel panic - not syncing: kmsan.panic set ...
[  693.150772][   T19] CPU: 1 PID: 19 Comm: kworker/1:0 Tainted: G    B             5.17.0-syzkaller #0
[  693.160091][   T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  693.170170][   T19] Workqueue: events request_firmware_work_func
[  693.176370][   T19] Call Trace:
[  693.179660][   T19]  <TASK>
[  693.181419][ T3546] usb 3-1: USB disconnect, device number 60
[  693.182602][   T19]  dump_stack_lvl+0x1ff/0x28e
[  693.182663][   T19]  dump_stack+0x25/0x28
[  693.182712][   T19]  panic+0x487/0xe1f
[  693.182805][   T19]  ? add_taint+0x181/0x210
[  693.182864][   T19]  ? _raw_spin_unlock_irqrestore+0x78/0xb0
[  693.182931][   T19]  kmsan_report+0x2e6/0x2f0
[  693.183004][   T19]  ? kmsan_internal_check_memory+0x1ab/0x540
[  693.183067][   T19]  ? kmsan_handle_urb+0x28/0x40
[  693.183127][   T19]  ? usb_submit_urb+0x6c1/0x2aa0
[  693.183189][   T19]  ? hif_usb_send+0x5f0/0x16f0
[  693.236903][   T19]  ? htc_connect_service+0x143e/0x1970
[  693.242409][   T19]  ? ath9k_wmi_connect+0x177/0x2c0
[  693.247558][   T19]  ? ath9k_init_htc_services+0xf6/0xee0
[  693.253139][   T19]  ? ath9k_htc_probe_device+0x4f5/0x3db0
[  693.258830][   T19]  ? ath9k_htc_hw_init+0xdd/0x190
[  693.263890][   T19]  ? ath9k_hif_usb_firmware_cb+0x42e/0xaa0
[  693.269740][   T19]  ? request_firmware_work_func+0x1b9/0x2e0
[  693.275662][   T19]  ? process_one_work+0xdb6/0x1820
[  693.280816][   T19]  ? worker_thread+0x10b3/0x21e0
[  693.285790][   T19]  ? kthread+0x3c7/0x500
[  693.290077][   T19]  ? ret_from_fork+0x1f/0x30
[  693.294733][   T19]  ? kmsan_internal_poison_memory+0x45/0x90
[  693.300689][   T19]  ? kmsan_slab_alloc+0xe1/0x150
[  693.305685][   T19]  ? __kmalloc+0xc13/0x12a0
[  693.310223][   T19]  ? usb_alloc_urb+0x9b/0x2f0
[  693.314950][   T19]  ? hif_usb_send+0x22d/0x16f0
[  693.319748][   T19]  ? htc_connect_service+0x143e/0x1970
[  693.325242][   T19]  ? ath9k_wmi_connect+0x177/0x2c0
[  693.330392][   T19]  ? ath9k_init_htc_services+0xf6/0xee0
[  693.335988][   T19]  ? ath9k_htc_probe_device+0x4f5/0x3db0
[  693.341673][   T19]  ? ath9k_htc_hw_init+0xdd/0x190
[  693.346727][   T19]  ? ath9k_hif_usb_firmware_cb+0x42e/0xaa0
[  693.352578][   T19]  ? request_firmware_work_func+0x1b9/0x2e0
[  693.358517][   T19]  ? process_one_work+0xdb6/0x1820
[  693.363671][   T19]  ? worker_thread+0x10b3/0x21e0
[  693.368643][   T19]  ? kthread+0x3c7/0x500
[  693.372935][   T19]  ? ret_from_fork+0x1f/0x30
[  693.377564][   T19]  ? ath9k_init_htc_services+0xf6/0xee0
[  693.383139][   T19]  ? ath9k_htc_probe_device+0x4f5/0x3db0
[  693.388821][   T19]  ? ath9k_htc_hw_init+0xdd/0x190
[  693.393885][   T19]  ? ath9k_hif_usb_firmware_cb+0x42e/0xaa0
[  693.399735][   T19]  ? request_firmware_work_func+0x1b9/0x2e0
[  693.405652][   T19]  ? process_one_work+0xdb6/0x1820
[  693.410809][   T19]  ? kmsan_get_metadata+0x33/0x220
[  693.415955][   T19]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  693.421819][   T19]  ? _raw_spin_lock_irqsave+0x4d/0x120
[  693.427316][   T19]  ? filter_irq_stacks+0xb5/0x230
[  693.432452][   T19]  kmsan_internal_check_memory+0x1ab/0x540
[  693.438318][   T19]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  693.444187][   T19]  kmsan_handle_urb+0x28/0x40
[  693.448915][   T19]  usb_submit_urb+0x6c1/0x2aa0
[  693.453738][   T19]  ? preempt_count_sub+0xf8/0x330
[  693.458872][   T19]  hif_usb_send+0x5f0/0x16f0
[  693.463500][   T19]  ? kmsan_get_metadata+0x33/0x220
[  693.468681][   T19]  htc_connect_service+0x143e/0x1970
[  693.474015][   T19]  ? hif_usb_sta_drain+0x6d0/0x6d0
[  693.479176][   T19]  ath9k_wmi_connect+0x177/0x2c0
[  693.484157][   T19]  ? ath9k_wmi_connect+0x2c0/0x2c0
[  693.489308][   T19]  ? ath9k_wmi_ctrl_tx+0x50/0x50
[  693.494288][   T19]  ath9k_init_htc_services+0xf6/0xee0
[  693.499714][   T19]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  693.505583][   T19]  ath9k_htc_probe_device+0x4f5/0x3db0
[  693.511110][   T19]  ? ath9k_hif_usb_alloc_urbs+0x1b1e/0x1e50
[  693.517032][   T19]  ath9k_htc_hw_init+0xdd/0x190
[  693.521943][   T19]  ath9k_hif_usb_firmware_cb+0x42e/0xaa0
[  693.527621][   T19]  request_firmware_work_func+0x1b9/0x2e0
[  693.533393][   T19]  ? ath9k_hif_request_firmware+0x920/0x920
[  693.539338][   T19]  ? request_firmware_nowait+0x930/0x930
[  693.545007][   T19]  process_one_work+0xdb6/0x1820
[  693.550008][   T19]  worker_thread+0x10b3/0x21e0
[  693.554830][   T19]  kthread+0x3c7/0x500
[  693.558949][   T19]  ? worker_clr_flags+0x370/0x370
[  693.564106][   T19]  ? kthread_blkcg+0x120/0x120
[  693.568921][   T19]  ret_from_fork+0x1f/0x30
[  693.573390][   T19]  </TASK>
[  693.576580][   T19] Kernel Offset: disabled
[  693.580907][   T19] Rebooting in 86400 seconds..