e}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2341}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x9b4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2fc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x138, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f82}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x66}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc589}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x57768fb6c3a7133a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xac}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd05}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x104}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ebdd5e4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x61}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x110, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x360, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x270, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x876}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x98db}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x196}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2c04}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x15}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf0}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x125}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x217}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x23d0}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4f0, 0x5, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}]}]}, {0x468, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dd}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x160}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x184}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc2ce}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe3a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7c1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc0}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xed}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x520, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x500, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x91}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x35f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x27}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5c8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb3e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}]}, 0x4280}, 0x1, 0x0, 0x0, 0x48000}, 0x20000081) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1036.634531][T18400] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:08 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000340)) 09:48:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) 09:48:08 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0xa0, 0x6}, {0x3b4, 0x8, 0x6, 0x80}, {0x80, 0x9, 0x80, 0x9}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x58}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) 09:48:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x3b, 0x0, 0x60}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0xc8a540, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000a2f4bcdf0cf3edf8e4473848ae1ddf5578c4cb14db3287d25df689d23a02772370509a725529dcaeb88aa3c9e81931fad7a5af253f9f472b3ea377cc23f8788899beba4ba1d9efe06873b4249580a5268fa0ee84a509c7f9489d05e6e9e8d00b4995c3edf0a1", @ANYRES16=r1, @ANYBLOB="1f0000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="4400330030800000080211000000080211000001bdd65ff8077c00ffffff000001002d1a000000001b0000000000fcffffffffffffff00"/68], 0x60}}, 0x0) 09:48:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) 09:48:09 executing program 2: bpf$MAP_CREATE(0x11, &(0x7f0000000040), 0x48) [ 1037.037174][T18426] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1037.053021][ T3570] usb 6-1: new high-speed USB device number 25 using dummy_hcd 09:48:09 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0xa0, 0x6}, {0x3b4, 0x8, 0x6, 0x80}, {0x80, 0x9, 0x80, 0x9}]}) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x58}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) [ 1037.293076][ T3570] usb 6-1: Using ep0 maxpacket: 32 [ 1037.413255][ T3570] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1037.422698][ T3570] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.445172][ T3570] usb 6-1: config 0 descriptor?? [ 1037.489156][ T3570] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1038.037001][T18406] UDC core: couldn't find an available UDC or it's busy: -16 [ 1038.047515][T18406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 09:48:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000001100)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f00000003c0)={0x20, 0x21, 0xbd, {0xbd, 0x6, "313ff2a15ecb22b8646f2d6df2c751ebb2f44fa8a21d84b23beb42d103fcb8e373094a8a4cdc987f87e02674581846a58647af445b69d4642ae90d2cc71ac61fc3bad1895dc69fb48a9a8aa41b86c44247aed6fe7f4306f3424cfc9dbb0b8a3c13ad362dd9dd6b93a30e783965cd292ae932cfe9728f5ab32280bf2fe09c45072a8f1b956a7b944168f32c6a0a6dbca82fbb2872f445459e124811018e57aa8ce552a4fb681277bc583384f8742f0f99d7bc4e178def7358bdf642"}}, &(0x7f00000002c0)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "d269c7ed7e4663beba9de8072d02fb1c21575eb3a7ef886eb8c45649367e2e4faa0956382a155a979af3e93489d20dbc57ba912262572b61ce6f43767053cf7c3085aef5a9d96c8686adf2cd58ae6429c41b77d6747870b51f19c81881d799f8e770ae374c22bbae84567f41ddcb3c594c8c870d2968c64d6155376a710e34363ef8a3bab16bab53cd245775de921b0fd4952c1f1d8e87ac5f82b2e039d327c1f525e00f279b9d"}}, &(0x7f0000000600)={0x0, 0xf, 0x182, {0x5, 0xf, 0x182, 0x5, [@generic={0xd6, 0x10, 0x4, "ea63c02a16250fe90445afe588e90e5a1aa1f1ed6ac5444367c1c03497794f8b45d37c7e9b4c25583ddbf334e185841737ea303cc4bce1d2b4c4efcc13761850997fed2f422f872e85e4ad4c4be091da4856d171ce30795c1cb718dc578bd15fcff5c4093941762da2c29eecd1dc58a561302895d94f7f133d61381144d03e6e04c886464690b735d3cff5c40355351d365d970b67bb3813b8f9898cf133153c5eead770520ffad010949e52199b96b3dba0fb8c18a17fa3c1ef8538202bdaa045da0f4f1aa179998aa82feb8a3cc11b4dd2c9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x1, 0x58, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "2cac4ed89aa139bcb436f31fcf51e45a"}, @generic={0x7d, 0x10, 0xa, "014aeb352d372d69c3ee051cd777f10c5d2de184ee6802ac52e487061926f140de021d3ae3b784045b3ede7389c1599cdd3e00027a49a4f22d0412903dbb69ecfbaf0e977e1bc90469a30af3f18d6059f962be426c72213cdb64372cfd66ab819a5e6bcda7f94e4deaa7cf3bdeea500e6be7ed1d64e8cca7817b"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x8, 0xf00f, 0x8}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0x0, 0xff, "3da3640f", "eab621ef"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x3, 0x9, 0x5, 0x0, 0xffff, 0x5}}}, &(0x7f0000000c40)={0x84, &(0x7f00000007c0)={0x20, 0x30, 0x95, "247868c69cab035af56505e4a4717d4182a64b647c1aa4e85bd22f1ae31688f1903fac575e0dc206d0459d42a70c7535812a2ed1f1dfd46f41d2402eedd09e783db5191b87203ad991e689cc062a1406c4135fc3c6aba0f8ed3ddb4379d8ac8905075c89ac8e55ee2f28b64ca46d32ab9596808c75e4a55b9074b836d0c71bb99655bbbbfd660f57e3d27923bee95c8e934c522c11"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x8, {0x320, 0x40, [0xf00f]}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0xfff}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x76}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "175a"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0xac}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "06ec"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x18a}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x3f}}) (async, rerun: 64) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x3, 0x96, &(0x7f0000000d00)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0x6, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xf403}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x101, 0xffff, 0x6}, {0x6, 0x24, 0x1a, 0x9, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x1bdd}, @mbim={0xc, 0x24, 0x1b, 0xe83, 0x6, 0x7, 0x8, 0xb6, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x8a, 0x4, 0x7f}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x8c, 0x7f, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x9, 0x7f, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0x2, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x2, 0xc5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x81, 0x1}}}}}}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x201, 0x40, 0x4, 0x1, 0x40, 0x20}, 0x5, &(0x7f0000000e00)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x419}}, {0x91, &(0x7f0000000e80)=@string={0x91, 0x3, "efca2d5319fcaacc56e6cb9117eaeef0387a2bded548e9dcb3c000a1c22b881f9ede552cb64da7f2e07ed37c0c5d2adb39481093bf8dcaa8147eb896da7ae1a733b257a145dea229db7de7c8009578a3b08d2739ca82d065b2536ab0cf29082349d9bab9f7c6c5559961b63427e621a052b62a39445cbcf2e9988a43e3adf0b93a31d2aec06e144a3994eeec076762"}}, {0xcd, &(0x7f0000000f40)=@string={0xcd, 0x3, "8d7187233bd1fe979058b048c3050be3a6324dd58e192b627bd136b2bbeddeefe700b7245cbbe4004cb8d026e59d4f0dc2d8cc55a2f3f574c1338b690f326298d214a9e8d644b508ff1953035725333bfe9ff7f84a1f9974b4f37e81618b1d5d707012f1a8af770b25773affad80308ef9b7e7f8470d58331a0abc58aa2ddd2bcd9249a9b364ed50197d4bf16adb4c51e4973d9d132a34a95530e940fbb95ac39f622e329dee485ceda7ec02245a331244b5b16ce7b77f0a7ffd45346dbf2ea848b74023ef89f0603aaf4a"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x441}}]}) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x6, 0xe3, {0xe3, 0xc, "d8b1769cad51eaedb8f97cbd991c7fe024b8e0316a6edc2cb3824234a8f3c7d0a284e1fc6a2ef4c0224c0aac5f7d1767b8c4f0f30b60312dc3eab76d925354da5b466adca64572ce9e22f22588e46c6a4aa40da4e937e3d319a59266b558ea14e4d1a6fcbebae8a3809e29d21b94ff0cc83fa168197ec29e1ceab5e1cd5644fcb51cef98725b0a6c10417e68fa6d68b2ca0049b4d1724e9330c00caaf7185594b8a1fdb3de3139281c59a86b256cbae054a03cca46602cbc89e3be83820070cae0e1bc5dffdb8a312f6292b6a2c48338e123ee8f4ebf70af6800e95ae4322bd3d0"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0xfffffed7, &(0x7f00000001c0)={0x40, 0x3, 0x6d, "b23597228791c5ab9d16dab785d754a98d6f7d3cb209d58c30c9e2fd7573831ab4896fea57b86797e2777ea67b86d8459a949bf0b4ba0147ae89390d6a97babcf42bbae3f4253518cb9e71ebaef5c44c9e4523b647fe7b8c14fb3fe006ecc8cf418836bc7503908d6941fd04cc"}, 0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xfc}}) (rerun: 64) 09:48:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x3b, 0x0, 0x88}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0xc8a540, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000a2f4bcdf0cf3edf8e4473848ae1ddf5578c4cb14db3287d25df689d23a02772370509a725529dcaeb88aa3c9e81931fad7a5af253f9f472b3ea377cc23f8788899beba4ba1d9efe06873b4249580a5268fa0ee84a509c7f9489d05e6e9e8d00b4995c3edf0a1", @ANYRES16=r1, @ANYBLOB="1f0000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="4400330030800000080211000000080211000001bdd65ff8077c00ffffff000001002d1a000000001b0000000000fcffffffffffffff00"/68], 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0xc8a540, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000a2f4bcdf0cf3edf8e4473848ae1ddf5578c4cb14db3287d25df689d23a02772370509a725529dcaeb88aa3c9e81931fad7a5af253f9f472b3ea377cc23f8788899beba4ba1d9efe06873b4249580a5268fa0ee84a509c7f9489d05e6e9e8d00b4995c3edf0a1", @ANYRES16=r1, @ANYBLOB="1f0000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="4400330030800000080211000000080211000001bdd65ff8077c00ffffff000001002d1a000000001b0000000000fcffffffffffffff00"/68], 0x60}}, 0x0) (async) 09:48:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x80086601, 0x0) [ 1039.649673][ T3563] usb 6-1: USB disconnect, device number 25 09:48:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8937, &(0x7f0000000000)={'batadv_slave_1\x00'}) 09:48:11 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0xa0, 0x6}, {0x3b4, 0x8, 0x6, 0x80}, {0x80, 0x9, 0x80, 0x9}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x58}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0xa0, 0x6}, {0x3b4, 0x8, 0x6, 0x80}, {0x80, 0x9, 0x80, 0x9}]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x58}}, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) (async) 09:48:11 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x8) [ 1039.827409][T18447] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:11 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "e6c96127ae1c6acea5debbde27c3d50a38bfd7c3d3edca876b1e8325ff3809ce22ca7a237bd1751732eee319c2bd85d73baa6f00e6ef9f27c26ba6bef2a03b76"}, 0x48, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x0) 09:48:11 executing program 0: syz_emit_ethernet(0x2f, &(0x7f0000000000)={@empty, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@arp={0x806, @generic={0x30c, 0x8035, 0x6, 0x1, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, '\n', @local, "7f617a87693c045d"}}}}, &(0x7f0000000040)={0x1, 0x4, [0x1c8, 0x326, 0xbe7, 0x87]}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 09:48:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000180)=""/245, &(0x7f0000000000)=0xf5) 09:48:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0xc8a540, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000a2f4bcdf0cf3edf8e4473848ae1ddf5578c4cb14db3287d25df689d23a02772370509a725529dcaeb88aa3c9e81931fad7a5af253f9f472b3ea377cc23f8788899beba4ba1d9efe06873b4249580a5268fa0ee84a509c7f9489d05e6e9e8d00b4995c3edf0a1", @ANYRES16=r1, @ANYBLOB="1f0000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="4400330030800000080211000000080211000001bdd65ff8077c00ffffff000001002d1a000000001b0000000000fcffffffffffffff00"/68], 0x60}}, 0x0) 09:48:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x3b, 0x0, 0x300}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1040.254850][ T3563] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1040.318322][T18475] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1040.511943][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1040.642438][ T3563] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1040.651827][ T3563] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.663300][ T3563] usb 6-1: config 0 descriptor?? [ 1040.713227][ T3563] gspca_main: sonixb-2.14.0 probing 0c45:60b0 09:48:13 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000277f3120450cb06007180000889f4f45000000000000000904000000c03aca00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x3, 0x72, @string={0x72, 0x3, "22fcef1e5606ec8926d7b51db1535d9c8503b7a50777ce44be8cd2836668adf37f5816cb66cd6e0e3c2daa8a6e28b88de2541d5cc5e169ea516e0d94abff1a0cdf3fa7f50129aa3b01cd541ed5e0a13c60b1f5c90d3cd12d4c7062ea1c19417683830c0296576e30c646407eb374d6bb"}}, &(0x7f0000000180)={0x0, 0xf, 0x54, {0x5, 0xf, 0x54, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "77b43e544d0340560de1fdd084db2a53"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "d914df4bfadb088d12b970645539841f"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x1f, 0x8, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x7, 0xb1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x70, 0xf7, 0xfff7, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x3, 0x800}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x2, 0x81, "d8eb589d", "a6b75e61"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x18, 0x5, 0x2, 0xff, 0x9, 0x7}}}, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x40, 0x31, 0xbe, "20aaea9becfca77d817cdf06ee81bc27c6109d691d7f777b200d97f16ba59f59c3cf394f870fb2c042f48778851fd4933df3ac418e991bd669a34bdecdbc8d41c0bd03263838dc686c708de352ce747dae8cbfef7600352e3541ffe98811cf4e95aee673068c2d1e64a5e164da6c9f1d60cad95b0b2093b9b78762a00234599ba326dcf899498375052a3a44380da2331dc3ffcacdc99ec8507084666c2d5984d621982ea940cd466c40a46c83fbf022b6e2723633fa9ad4ee5627a2bc00"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x6}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x8}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000600)={0x40, 0xb, 0x2, "7ff2"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x19, 0x2, "1383"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x54}, &(0x7f0000000800)={0x40, 0x21, 0x1}}) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2, 0x4}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x5fb8, 0x200, 0x7}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x8, 0x1, 0x80}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000021c0)={0x8001, 0x9, 0x58f6}) dup2(r2, r3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x4, 0x8, 0x2}) dup2(r2, r1) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:48:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001040)={0x14, 0xa, 0xa, 0x401}, 0x14}}, 0x0) 09:48:13 executing program 0: syz_emit_ethernet(0x2f, &(0x7f0000000000)={@empty, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@arp={0x806, @generic={0x30c, 0x8035, 0x6, 0x1, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, '\n', @local, "7f617a87693c045d"}}}}, &(0x7f0000000040)={0x1, 0x4, [0x1c8, 0x326, 0xbe7, 0x87]}) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 09:48:13 executing program 2: keyctl$instantiate_iov(0x12, 0x0, 0x0, 0x0, 0x0) 09:48:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1f0000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="4400330030800000110211000000080211000001bdd65ff87b077c00000000f4ffffff0000100001002d1a00000000000000000000e5ff00000000e1ffffff000000000000d757b958f4b56085d756176963405d4cceab44a287d00d0e2b66bb7977023d70ad4a433a3cf884c17aed0ae50b9a3dcebd882f72e975fb5c"], 0x60}}, 0x0) 09:48:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x3b, 0x0, 0x500}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1040.906302][T18464] UDC core: couldn't find an available UDC or it's busy: -16 [ 1040.916650][T18464] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1040.978979][ T3563] sonixb 6-1:0.0: Error reading register 00: -71 [ 1041.008037][ T3563] usb 6-1: USB disconnect, device number 26 09:48:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x200, 0x0, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000500)=['\xd8\nP\xd1e\xff8\'(k3\x94XcH'], 0xf}) [ 1041.070026][T18486] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:13 executing program 0: syz_emit_ethernet(0x2f, &(0x7f0000000000)={@empty, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@arp={0x806, @generic={0x30c, 0x8035, 0x6, 0x1, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, '\n', @local, "7f617a87693c045d"}}}}, &(0x7f0000000040)={0x1, 0x4, [0x1c8, 0x326, 0xbe7, 0x87]}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) syz_emit_ethernet(0x2f, &(0x7f0000000000)={@empty, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@arp={0x806, @generic={0x30c, 0x8035, 0x6, 0x1, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, '\n', @local, "7f617a87693c045d"}}}}, &(0x7f0000000040)={0x1, 0x4, [0x1c8, 0x326, 0xbe7, 0x87]}) (async) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (async) 09:48:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1f0000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="4400330030800000110211000000080211000001bdd65ff87b077c00000000f4ffffff0000100001002d1a00000000000000000000e5ff00000000e1ffffff000000000000d757b958f4b56085d756176963405d4cceab44a287d00d0e2b66bb7977023d70ad4a433a3cf884c17aed0ae50b9a3dcebd882f72e975fb5c"], 0x60}}, 0x0) 09:48:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000140)=0x2, 0x4) 09:48:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x3b, 0x0, 0x600}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:13 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$link(0x8, r1, r0) [ 1041.493991][T18505] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1041.542016][ T3563] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1041.783137][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1041.832335][ T3563] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1041.992235][ T3563] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1041.999991][ T3563] usb 6-1: can't read configurations, error -61 [ 1042.154385][ T3563] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1042.431962][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1042.472631][ T3563] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1042.602647][ T3563] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1042.610489][ T3563] usb 6-1: can't read configurations, error -61 [ 1042.619498][ T3563] usb usb6-port1: attempt power cycle [ 1043.041946][ T3563] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1043.132156][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1043.172259][ T3563] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1043.292151][ T3563] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1043.299989][ T3563] usb 6-1: can't read configurations, error -61 [ 1043.452218][ T3563] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1043.542371][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1043.582245][ T3563] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1043.702197][ T3563] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1043.709974][ T3563] usb 6-1: can't read configurations, error -61 [ 1043.718949][ T3563] usb usb6-port1: unable to enumerate USB device 09:48:16 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000277f3120450cb06007180000889f4f45000000000000000904000000c03aca00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x3, 0x72, @string={0x72, 0x3, "22fcef1e5606ec8926d7b51db1535d9c8503b7a50777ce44be8cd2836668adf37f5816cb66cd6e0e3c2daa8a6e28b88de2541d5cc5e169ea516e0d94abff1a0cdf3fa7f50129aa3b01cd541ed5e0a13c60b1f5c90d3cd12d4c7062ea1c19417683830c0296576e30c646407eb374d6bb"}}, &(0x7f0000000180)={0x0, 0xf, 0x54, {0x5, 0xf, 0x54, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "77b43e544d0340560de1fdd084db2a53"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "d914df4bfadb088d12b970645539841f"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x1f, 0x8, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x7, 0xb1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x70, 0xf7, 0xfff7, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x3, 0x800}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x2, 0x81, "d8eb589d", "a6b75e61"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x18, 0x5, 0x2, 0xff, 0x9, 0x7}}}, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x40, 0x31, 0xbe, "20aaea9becfca77d817cdf06ee81bc27c6109d691d7f777b200d97f16ba59f59c3cf394f870fb2c042f48778851fd4933df3ac418e991bd669a34bdecdbc8d41c0bd03263838dc686c708de352ce747dae8cbfef7600352e3541ffe98811cf4e95aee673068c2d1e64a5e164da6c9f1d60cad95b0b2093b9b78762a00234599ba326dcf899498375052a3a44380da2331dc3ffcacdc99ec8507084666c2d5984d621982ea940cd466c40a46c83fbf022b6e2723633fa9ad4ee5627a2bc00"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x6}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x8}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000600)={0x40, 0xb, 0x2, "7ff2"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x19, 0x2, "1383"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x54}, &(0x7f0000000800)={0x40, 0x21, 0x1}}) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2, 0x4}) (async) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x5fb8, 0x200, 0x7}) (async) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x8, 0x1, 0x80}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000021c0)={0x8001, 0x9, 0x58f6}) dup2(r2, r3) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x4, 0x8, 0x2}) (async) dup2(r2, r1) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:48:16 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x20010, r1, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000140)={0x9, 0x1, &(0x7f0000000000)=[0x6], &(0x7f0000000040)=[0x9, 0x7, 0x5, 0xfffe, 0x800], &(0x7f0000000080)=[0x7ff], &(0x7f0000000100)=[0x8, 0x7ff]}) 09:48:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0) 09:48:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13}, 0x48) 09:48:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x3b, 0x0, 0x700}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1f0000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="4400330030800000110211000000080211000001bdd65ff87b077c00000000f4ffffff0000100001002d1a00000000000000000000e5ff00000000e1ffffff000000000000d757b958f4b56085d756176963405d4cceab44a287d00d0e2b66bb7977023d70ad4a433a3cf884c17aed0ae50b9a3dcebd882f72e975fb5c"], 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1f0000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="4400330030800000110211000000080211000001bdd65ff87b077c00000000f4ffffff0000100001002d1a00000000000000000000e5ff00000000e1ffffff000000000000d757b958f4b56085d756176963405d4cceab44a287d00d0e2b66bb7977023d70ad4a433a3cf884c17aed0ae50b9a3dcebd882f72e975fb5c"], 0x60}}, 0x0) (async) [ 1044.252712][T18519] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b00)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='D'}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 09:48:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000056c0)={&(0x7f0000000500)=@newchain={0x1ec4, 0x64, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x1e8c, 0x2, [@TCA_BASIC_ACT={0x4f4, 0x3, [@m_connmark={0x7c, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x11, 0x6, "6d937f9f3185261a97832d3eb2"}, {0xc}, {0xc}}}, @m_skbmod={0x6c, 0x0, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}]}, {0x31, 0x6, "22bac744e62fab152a1675f998e3f3b3257777c607add62689eb5ff0c0294b4aedde4aa3fc964b0c917d991b6a"}, {0xc}, {0xc}}}, @m_vlan={0xa4, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}]}, {0x59, 0x6, "b56512f67646e3234dc8cd86403b4be3fb55c5e7fa53faeef3297fbf69a096be25341ca73f8cde1fb706426a97d058d2de6d8625979a42d673391ea0d3ca60e55c6abd9e082620b87167c3bd43fe7059a912717078"}, {0xc}, {0xc}}}, @m_xt={0x364, 0x0, 0x0, 0x0, {{0x7}, {0x25c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xfd, 0x6, {0x0, 'nat\x00', 0x0, 0x0, "5d586448cde5643828ab2bec50690765b03b1ca24918112e5b0c9edc15182b2c8d6e59d2b9ef9669a159f4bed44f8c987ee6caf39cd5a21199f09be5ec6970f1fae585835d232c0e6e009d7ef59e41619ddc311718f2d119ff3818eb721033d296cfacb05176daafbcbd6daebc77770304c99fc51b48898c4d03d4410449c7f2a1914b220b488b35b490b847e5d1cde7a7d8406d7963fbc591630f211c973a5efb775eb9aa733f0920837fecbd78ce58ca84cb7fad47f7189c4b15f76bec9cd29ed28d9728a4e2a4a0c60ac0c3084049abcf87"}}, @TCA_IPT_TARG={0x61, 0x6, {0x0, 'security\x00', 0x0, 0x0, "1f3860ad747c489a857c5f66606663f7b9e37ee005dbf471f617682ee9999513d38a8da4bedc2841bed052c9642a7521c33d9c56a54453"}}, @TCA_IPT_TARG={0xbd, 0x6, {0x0, 'nat\x00', 0x0, 0x0, "d04a80f64340c8e2e01ec40fb6e4c9d3a83d40d2395da681197f07d3a06dae2a6560fa99eaf27b4e4b6532da3bf415e9c5929f6a1c0f2d2cd6ef9367950efddd683344723476ad227d54828b99709705ff8d282fd10c9ce8c220a7d82833111706c30b828dcac62b3d0fe63d0e4f33f008c54749e9cabae6ad5a898bc1db36cf0b5cd48da0e9bb68a073d428240e2f96c1f6f4"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xe1, 0x6, "eb2f30ebc7c552c62254f54e6357a7cde90cbab5142f1f713ed83378d461a404431b688d811ed45f7ca0c2de75359e836887e06b9484b6c429ff4d4e38258a178635cb2672050280d0775463dd19bd28d198bcfd4f2bee4b8a1dde1e4c9440f4b6bfb0602ed36fbc16b4c17a60bf61e43fa3175c4e08ae0c58a5bd97db31f8d2f6f84bc432c2961e689eb46d978a7611b832dea4cdc528ad0a42ef1abff40368cf9657c9ae138e6a6cf6cce01a0a7f3a8aa2d52f39c9c2a782d42c9099d30db895752aef1af18d684421dc5148daeb804a08fb97614821e2a559bd8d5c"}, {0xc}, {0xc}}}]}, @TCA_BASIC_ACT={0x1994, 0x3, [@m_gact={0x10b4, 0x0, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PARMS={0x18}]}, {0x1001, 0x6, "e3c8e2a769976f43c101db00300782381ef56fc3da0d6cdcb3aa53b68c3cf0d445dca866b370764eb994ec25236a1f6ef01a65f46cfaf780d4bda7a48548c4f2ad82db3a518d1606fdc7c5bd27ceeb291fd9ad40aa7c1a8d8e1f12d8069a7ac8b812acdc157c13100f42c978f088959d11e3670e9ba7f01b40d1d07926dfce7d327ae58e7a0c8382868e90c6df7e089ea1ac0dca93a8fe918aae50a78d06c3e14138d1e53714f90840d39be631d40a64b005a27d45c9f989ffdfaf66bd0aeb5dd9bcaaa03598850af3fdd62fd20c551eff2cd92234a8260537e84a9dbf4a3575fef0e7cf7a3cd4564c0f2221127da83d6ca51f1008d3f2c07d417a9d3568d2eb56e97a45217cabf3250c041b9bf8e313f7fa2531af17a4c7e87e99b73129da783069baa286702bd47a6817ea40034ea8072380752bdc1e8090a8afac1a26d3ef0547e41407fa656377a09ec1ae05834e9482b21504133598db29585f913587819e4ac9c83138e55fae6a715bb3f11ac5d0b3aa0e25375eb969cccf259a81107dbe931aeb58f9ff5a4058bda8a5138dc3303cfa670899472aa06b8e2b9ff1981f415fc9c01ef5fa0ebd26a59bee65b51146d464823f6076e0482d034845ffda91f831ff61b3f968568550e18005a37b6f4e3c1c51be9f82dcf2815c8744d93870af2befea577f69abf13f76e181b45c3d5b1c62a9016029b2a4cfe94e5f8d22f42ad6bbc99854fa9ff8109ce1844f26260875003d6baecfe6eadfaa73ed5170308185aa17938b503ec44d1859d420f2ff398ddff5f60b44e592be61d76aacd736cac801661c613c81dce149d78b4fbe0b091c96f103e46bb0ed327c35c182596717772a1bac7356f699b6298867136da5760d0da3d59d1499090121fd98a3c560a2781a5e7e9b86184e56f1f290baef0097248787e54f7ad317e7fd42f069063a450b774bf41ea044f26629b5f98b1ab7f9ee9f743c3882882ed0ffac35692d6d24f3b07afe5270852311a5f4d0da9deb755f3f9b09a314a82855c9085fd421adea34cb965d4122086a83473c054d78d91dbdf683925511f35a41e704e844969d752c0299befb6869863fb51a2269f2d3f9cc54019291defa7ea77759eb6fadffe3b31535d6f1b9c3e3c00f7d7f4270705d5ba8dfbfb99087260eead7a40996f0f0205c5932cb6190f5b5e0735513e944dbead90a3a0f22bac2567e7e405e3b14f58361b76eaed791bdf24e182da59550613ca8da32503b3f75336e5bb1418c9e0f31b0941400728f0120ec6201e64ccd8323ee453b9d1b16c0fd020c1963aaf4487c388f814ab2f173b6a9ab4774b89bbdf8207b5f2ab67b6e4ac5baeb800cb801c3b6d0ad229830f39f2cb29d4f2ffe21ce01d6b25d0cda52f2374075e0585c7f8f4b979408fd5501e5fd6f1bec9751eae59bd32fa46cc374f8aee72d9e6db938e77d15788c64ce1a00dcd5699e56dc71daae41f935dcb1978988fa1afcfbea04f92d07fafbe8634b60287cfd67dffc3bff04d3d559cdab453f485356b7b31f9c4c45ff5f286582c79df06b8c0046f10c53c95eba5b7e055fdf033f017707141b97b3715e34ae1aca5f3702ce66854489f5c1cd663e94c17167653b699ed517d60c533b66838e008c8d8d427ba341c52bee26a79f58e6054e62f8560ed91d169585890ba7771ef8f809d48d5bd76fb311de6e3c73edfba023f0eb6b2ea0dbcf12e713cceeb620503298d22cce592682c60f678c6dc1bba132149dc45663afd1773b2d807138755a3144e5c7fb65e1f081061731e60edb153cff28eed92227dd5c613090f1cfe95e299daea772475566a8d75bba4dfa15929f19ac123f960c7ad02255ad946abaffc23c7d58d5b7e8704a439437ab0ea410b8156887501e14ca3006956215f862372f8d7c4ea1cf91d0dd92cfd855701cc0c4aea1d9b0229dbc1d0fec885923c5054515fa26a9f44a01e0709845023c2f2dc241b923727b6568f89f2a97be1f01778280e4e57ed90e32727feb13f5f60ab50e7765314c129432e68848587201e8dcba2ed54d6af81ef9006f8fc31aca32e14f768815ec97ec64367396dcea4a7fb89272091810c3f13d0cbbc2461d2af69584a0f3846e5af735b476a37b8ce051bcc21e769faba23033f56581681e8d4f36573350ff2ba55a296cb996987c99004fcbe6aa6f6291bde5d57cdc90baa84b58a9ef589a287f00572a5fa708dce62b0932cbcc49616e952d49d2f8070aa0450df2f97df3392d14670096db293fa964a5f6b6848474e870feafccdac50782bbd630dd74a9ec0e88c9b75aa74865ba3f36c0a1840b7706ff0f97cc50e6bd35d45c8ece101423a4df4efb0e789241eaa07a8eeabeb78a5177a167fc7300f08bcb46b7cbd43b9c31f9aa7fb87f4b3b5b79d252ffe2f1319303a185b0e602b4f10748bbbd6dd7c4720c3990b4e0eef8c9e4fd418779567b71db7659f840fd1a7f0cf01ff8ad72b7e6dbc8495ff728c9ac2a832311e26f28af202324da1e43d372e59f1fba758578c8b9c6b87e7029df3c8547402cc1acd79a596b08daf5098677392340b751d90f3e61cfcce949ca46dbf87df07b1c26f34e02c76791eb15ca98875d1ed09022ac11400c6976536a3f80fa7651d7c178591a1d956e17c7c2371abfa1a41ea45da69cc6cc5fe05dcc95f1e1e573df85e7f1427531a11315f5437b4ddf506cb3c3a18380d031ec7ae451783597990c26e6cc0b142a92904523a1e5fb588ff7720fd69f1ba8a8fd5f89f852c3fad33319750a2e01d63d4f91d4bb581b3d80f4d89314ce4f21b07138402579f64d5db6e316cb0f74edaa28fae32a28f6a73efaabebd1e1d9d316848fff1c1cf68f7004dd2b4cc5184e473573ed1fd46139fa88422f81bce206ab6c339145bc4e9fcdf507e07e96c1b93548428bf3121ed4bec841ae43c3ff8fdf9eb7e054052fcb9549d0619d017b6e8b8e3066f53c717d1de4008b81eb84b63d0b0c77f51b544a7c956f3bc4dd453571ebde71f78fb752aaa2d7ec1db3448a4f04b0445b376a8a874f8e07ef63819c493b701774e0498ad4cc79ad66f2999f90491cf1db6e847faa1cb6153236b1c9a32af385859685279016006013e17315c06db984cd058af10e147be7f8469dcb7582c2660bb329f3d848dd058493f7b931e597f68ffa8fdbde05ff4f9914dde7ed0158f576f9d5851b6eca06bbaa5d6ffb22bb3bcdcaa28492fdb2353d498240d08985808ae863ae5a453f795d46709806c680ae4898a6b439dd7a73c2845d67b7926fe7824c050a5d3acccc528bd0526e16363b54d80f5f5b381fbd1f1e3a59881f9bd15f61f54fc343bc874878c9c5ce82b7f91220c0948e0053293ba10ea8915c4fe0e9dbba7404f11ae8037da3feb4e214beae7cd7f77e6c4eaf87761f4c64450e36bb945baa42d8289e4551334e859306b7f36d5d3906f1f26dfb68b901307b5fe78a63cca3503a3e622772431b40f69433057f0dd7ff528e597b3176e22c8830f19f8ca62f10b3722284be13fdabd24f5857ed999dd35e2fcf47f9c499cd46dada71dcd9df4892c8a1d31ae50fd368e6a96eab906e9242549712cfd4f00040465c20c923327b040d88d559f22b3d2f137dd34ee336e273bb4aa75e1dade7989a3c0763d627a811708f4212a60ed9efd29460799963c0415197dbc6787a7a68f961634b804e5a0624f19ef8f250de171eb8ee56f06653a06f084d61c710fa416fd6ce745aba1dd02fd4e51da8ba15c4ed949d387b88690cd1997ec537d946f76e08d0cc5096c0c01a91738706feeb1c25633beb60f1f3123ac69fc0bfbeddb5f9fcf464ea7b1e067c7358801ef70d3df35402dfad4838bf76033f6ca7b5061e678bc3bdd2b779d63fac0dc0bcc6e6dccc8b2909172d7f9eba6185055a5c381be9c338a1776e694c0b96c1e19955e2e938b649f65c84fcfea7fbd884e4883ac7ed6b3ff3d2218492a2687886e5955ebac51462abbb3246f7ec05ce722467ae00961e31fc41bc7fbf7940de9f184e937f8e2a37963fb42ca76109a320f9940f31e5498e36feb5d18b480c423935739d35a3c72b06d0124b0c3c613a2139c2d96398a9a051044bac931acc4fbdf9cdd67befb86e752893979744f15943845f4d84ac70e0a242d8c235d924244f17a5ef7c32c3e1df2baccedf7d39b0ade18f1e87ee85c4313a2435af99823e69858d4194af0c1cb4f9797b7130b7156728b0535c1edd30bd53b23a53a77981e36a5c971bdc16079ab45024c785c6232d0d200bf513871f85b35906a83d00b3b954dfef3fd3dd3196da7d5f5bba07ff7ae3cad041d0c2191599acbf3a61ce6d1b9f247ecefbf2eb4dcad17313eb1e9aef68121d8eac64a008dacbe5b81970c3e270cf39fd58ed0cca99151aaf8ec03aa338e5956d5a000611768746f54935248830cdfcf5da54f41ea490f726225bdc172936b4e492c3904f384c17599411bb2d4d77f2ece16bf78488e6bf67dec22b6c6be16571b7f71c449cd0a507268604ff515d4f20190de97a05021a14cdb5ea9cca920ee8dd950f612d85b2f3d11c32a2fdbfa63d3fdcdbb5988ec4a4b8e6e3057980ceb16b7d80766e1649aa4515d4bd223e7440f0bb15ab45bcbf0bec263fb9bcb0530624ade2583075113e59f84e2a2bf83d31584e728077a76c416edcc172783295e93bc8411c11f984dccf13871e72f008c496d3a2c75ed26c353ea13b15d0a642e659beb0bd0544a8b3c0f9de56b64eeeea19d56eb8365a6aa01a9f761e3fa8eb23c1918e83380262264550a2d3f81bcfce24a4f662957386eef021b908116a95e9601a47c74029239a8e9be1c1ac88f079f8f46e4b817f44035e6384df94fb77880b1367394007a638a7bd6243bbfe60f49bee8e5bf9c9780711caa7fe93618e3569a743e72fd68d622110ee201067c7b1b0099cdf737992ef540b3d6b65d7233fe6e02de0014421df7007a4ddd350fcbe69d9f2a80a06ad8e9c9f59591d70c221b0d15d578408f2982f1075565fac2d85c9058c0e04ff558e7809a62fb94a7f2bb61d80ada4ac5606c4ad454700b9c744f5587c3a958c6ab493e47bb0cec54c26a1c691f57a982514afc084a57168c11ffc6159650e290c2e7ae326ec77c2440271395b21123d02a7a1cd59cbfe2ee7bf00f3276900985d1c2d45cb859ec95ca0913eb9900e55ade7bd5e3c592c8f3890dc4b671299b43d0fb8288b49d4ca169cde99fd491767375d732245f4afcef9d07617dd004e5ab635f9e2609a29516cbbf4a1ff04e340bec13c3553d7cb8f5669895ec6e87826fcb0bdfd271856c44b5a744059d42c8ad2260010398ae257c404aade64b5c7c0ac00a29c7310be39c1b4b5851e8f78b00ed415a19fabb76d90db2e994b635a9e1cbf4d1aad3fe86d940b1bd866ba94b7f226aaaaaca3ef6087bf0792d2183b69510eeca8b3bfc8ce6a32c276ceeb50df37b0ca68a29dee43063ce1b672d6b139a4123aef794156c56ee5ccdfba8ada1f686527c80e52e4b4f39d50e4b9d2c87e7f71846240d1fd93182387410f396385742d2fb5633d75a68df274330518627a8bec88f8730dff6f75924f8c096c564167fd08977f4198c3b430724c5134a3820852fdea40849d9bf2ba62059b1603b080fc859bb559b6f91f905feb049577692fafe2f63d64416078b783d12506119bc18b4b9ebfd4a0473e444fe38cdb53708e318a85efce865adfd0171118a5bc6df854bd04df2e0f1f2e5da343e01858f1b71f9ebc9f320c46a3f98372817b3ae7003dd03c3a"}, {0xc}, {0xc}}}, @m_ipt={0x8dc, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x8b1, 0x6, "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"}, {0xc}, {0xc}}}]}]}}]}, 0x1ec4}}, 0x0) 09:48:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x74, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xcee]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x535}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4811) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc20800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xac, 0x0, 0xa00, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xac}}, 0x20000040) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000826bd7000fbdbdf25440000000c009900010000003b0000000400080108000c00640000000a001800030303030303f9ffffffffffffff03030303000008000d00920c0000f87f12c2a775e20fb3966ddeec5a4e8375ec114e49279ba3e10dd05c65b00df8e3d2ef0914ee27997fb6038e1bc47ee795080b97d051405a96b3fdc18a8fc610f4acfcd17dc93cbaf3719beeebad84e963f94acf086a0f0e35939e8eb8f744c1"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) 09:48:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x3b, 0x0, 0x900}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1044.502466][T18528] binder: 18527:18528 ioctl 400c620e 0 returned -14 [ 1044.552172][ T3563] usb 6-1: new high-speed USB device number 31 using dummy_hcd 09:48:16 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1d, r2, 0x0, 0x0, 0x0) 09:48:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x74, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xcee]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x535}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4811) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc20800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xac, 0x0, 0xa00, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xac}}, 0x20000040) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000826bd7000fbdbdf25440000000c009900010000003b0000000400080108000c00640000000a001800030303030303f9ffffffffffffff03030303000008000d00920c0000f87f12c2a775e20fb3966ddeec5a4e8375ec114e49279ba3e10dd05c65b00df8e3d2ef0914ee27997fb6038e1bc47ee795080b97d051405a96b3fdc18a8fc610f4acfcd17dc93cbaf3719beeebad84e963f94acf086a0f0e35939e8eb8f744c1"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x74, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xcee]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x535}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4811) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)}, 0x10) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc20800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xac, 0x0, 0xa00, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xac}}, 0x20000040) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000826bd7000fbdbdf25440000000c009900010000003b0000000400080108000c00640000000a001800030303030303f9ffffffffffffff03030303000008000d00920c0000f87f12c2a775e20fb3966ddeec5a4e8375ec114e49279ba3e10dd05c65b00df8e3d2ef0914ee27997fb6038e1bc47ee795080b97d051405a96b3fdc18a8fc610f4acfcd17dc93cbaf3719beeebad84e963f94acf086a0f0e35939e8eb8f744c1"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) (async) [ 1044.681564][T18535] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1044.792637][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1044.833109][ T3563] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1044.958203][ T3563] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1044.966686][ T3563] usb 6-1: can't read configurations, error -61 [ 1045.182010][ T3563] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1045.431970][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1045.482130][ T3563] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1045.624638][ T3563] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1045.632540][ T3563] usb 6-1: can't read configurations, error -61 [ 1045.639332][ T3563] usb usb6-port1: attempt power cycle [ 1046.071924][ T3563] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1046.172330][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1046.212389][ T3563] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1046.342595][ T3563] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1046.350494][ T3563] usb 6-1: can't read configurations, error -61 [ 1046.505618][ T3563] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1046.622365][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1046.685495][ T3563] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1046.812373][ T3563] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1046.820166][ T3563] usb 6-1: can't read configurations, error -61 [ 1046.828488][ T3563] usb usb6-port1: unable to enumerate USB device 09:48:19 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000277f3120450cb06007180000889f4f45000000000000000904000000c03aca00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x3, 0x72, @string={0x72, 0x3, "22fcef1e5606ec8926d7b51db1535d9c8503b7a50777ce44be8cd2836668adf37f5816cb66cd6e0e3c2daa8a6e28b88de2541d5cc5e169ea516e0d94abff1a0cdf3fa7f50129aa3b01cd541ed5e0a13c60b1f5c90d3cd12d4c7062ea1c19417683830c0296576e30c646407eb374d6bb"}}, &(0x7f0000000180)={0x0, 0xf, 0x54, {0x5, 0xf, 0x54, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "77b43e544d0340560de1fdd084db2a53"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "d914df4bfadb088d12b970645539841f"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x1f, 0x8, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x7, 0xb1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x70, 0xf7, 0xfff7, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x3, 0x800}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x2, 0x81, "d8eb589d", "a6b75e61"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x18, 0x5, 0x2, 0xff, 0x9, 0x7}}}, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x40, 0x31, 0xbe, "20aaea9becfca77d817cdf06ee81bc27c6109d691d7f777b200d97f16ba59f59c3cf394f870fb2c042f48778851fd4933df3ac418e991bd669a34bdecdbc8d41c0bd03263838dc686c708de352ce747dae8cbfef7600352e3541ffe98811cf4e95aee673068c2d1e64a5e164da6c9f1d60cad95b0b2093b9b78762a00234599ba326dcf899498375052a3a44380da2331dc3ffcacdc99ec8507084666c2d5984d621982ea940cd466c40a46c83fbf022b6e2723633fa9ad4ee5627a2bc00"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x6}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x8}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000600)={0x40, 0xb, 0x2, "7ff2"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x19, 0x2, "1383"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x54}, &(0x7f0000000800)={0x40, 0x21, 0x1}}) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2, 0x4}) (async) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x5fb8, 0x200, 0x7}) (async) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x8, 0x1, 0x80}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000021c0)={0x8001, 0x9, 0x58f6}) dup2(r2, r3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x4, 0x8, 0x2}) (async) dup2(r2, r1) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:48:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x3b, 0x0, 0xc00}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:19 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x8, 0x2300, 0x0, 0x4}, 0x48) 09:48:19 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x20010, r1, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000140)={0x9, 0x1, &(0x7f0000000000)=[0x6], &(0x7f0000000040)=[0x9, 0x7, 0x5, 0xfffe, 0x800], &(0x7f0000000080)=[0x7ff], &(0x7f0000000100)=[0x8, 0x7ff]}) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x20010, r1, 0x0) (async) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000140)={0x9, 0x1, &(0x7f0000000000)=[0x6], &(0x7f0000000040)=[0x9, 0x7, 0x5, 0xfffe, 0x800], &(0x7f0000000080)=[0x7ff], &(0x7f0000000100)=[0x8, 0x7ff]}) (async) 09:48:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x74, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xcee]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x535}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4811) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc20800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xac, 0x0, 0xa00, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xac}}, 0x20000040) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) (rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000826bd7000fbdbdf25440000000c009900010000003b0000000400080108000c00640000000a001800030303030303f9ffffffffffffff03030303000008000d00920c0000f87f12c2a775e20fb3966ddeec5a4e8375ec114e49279ba3e10dd05c65b00df8e3d2ef0914ee27997fb6038e1bc47ee795080b97d051405a96b3fdc18a8fc610f4acfcd17dc93cbaf3719beeebad84e963f94acf086a0f0e35939e8eb8f744c1"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) 09:48:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b00)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) [ 1047.308563][T18549] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:19 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) 09:48:19 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x15, r2, 0x0, 0x0, 0x0) request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, r2) 09:48:19 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x20010, r1, 0x0) (async) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000140)={0x9, 0x1, &(0x7f0000000000)=[0x6], &(0x7f0000000040)=[0x9, 0x7, 0x5, 0xfffe, 0x800], &(0x7f0000000080)=[0x7ff], &(0x7f0000000100)=[0x8, 0x7ff]}) 09:48:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x3b, 0x0, 0xe00}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0) [ 1047.692155][ T3563] usb 6-1: new high-speed USB device number 35 using dummy_hcd 09:48:19 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0xb, r0, r1, r0, 0x0) [ 1047.805237][T18573] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1047.932113][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1047.972626][ T3563] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1048.102920][ T3563] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1048.110714][ T3563] usb 6-1: can't read configurations, error -61 [ 1048.312165][ T3563] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1048.552285][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1048.594994][ T3563] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1048.722545][ T3563] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1048.730345][ T3563] usb 6-1: can't read configurations, error -61 [ 1048.752691][ T3563] usb usb6-port1: attempt power cycle [ 1049.162019][ T3563] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1049.252693][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1049.292365][ T3563] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1049.412825][ T3563] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1049.420857][ T3563] usb 6-1: can't read configurations, error -61 [ 1049.572154][ T3563] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1049.664870][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1049.712531][ T3563] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1049.852321][ T3563] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1049.860109][ T3563] usb 6-1: can't read configurations, error -61 [ 1049.869471][ T3563] usb usb6-port1: unable to enumerate USB device 09:48:22 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000054b6d107e0a8b2bb2bfa86b54432fa2f1fa827e5fe7f942d7e8ff9eb9f386be81a5b936af9bb6925e68b61d2c46a6be602d472a033f26ac4b2b9be08b0253c6666c1ee6496a7d37dbe10e72f9b5e8c147b3889029a010700a21434ae793890ab031679a02795e6f9e6700249b5c3ad10d5a010edb748e4e1bfd77cdc182fd2d9681bea9573d41d134a886c2b8f1d38c518ffdbae6ca0b8338e4a281af71fdade937434f1bd00007d2a6be6ee484f37b0a469f6a784f0397c3e1b44a09edeccb81f7024ab12caff501bf7d39ad56b064e0eb4879202bcbb30d963952725286af92607b85a987b605038f3ddd94c84f53972918938d9ed09888adf0b98433e13a24c901950ae570032"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$uac1(0x3, 0xad, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001ecfe6d696864f504a5dad97cbb000000406b1d010140000102030109029b0003011f20090904000000010100000a240106009d02010209240304ff010202200904010000010200000904010101010200000724017f890110102402020000060001f2b7c909e6fd11092402010044012a13072401010400000905010908003fda01072501800500020904020000010200000904020101010200000c2402013f045d563ca69faf090582"], &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x2, 0x1f, 0xfa, 0xff, 0x3}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000400)={0x14, &(0x7f0000000340)={0x20, 0x33, 0x53, {0x53, 0xb, "76774290408aac196f1b50926eff92723d3b9bf3dc6ba8b7f3c3e38a3ec388613f2264d4851a099dce73bc9ab9ef33e4776edcc0e6fad0289b675bee532d537136e744559b0c9f9c0a163e7c137948eea4"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'/10]}, &(0x7f0000000740)={0x44, &(0x7f00000007c0)=ANY=[@ANYBLOB="4080b042fa0e8800000067b8eac581a53da6353516f2864d7f1161b87d8dad0918e757b813eee7972cd030070d62088d019d7ec10f4ce5b49f656c88b0928debacbb68aed16b4d598a520e983fdbdee881245baded920d5dcffd71ed49d6c6e49fb08969d9d89ea72a9e29d08c00000000000000006687ffc96a7c34df4d6b092d91f5e06a51444f12f58fdb42bbf3dd44525c3dc2319e4ec6367fd2e52edcfd8ea7f7a27b6dcf557a5bc3ff0b1bd747aa3b860d66248b9205ada637c092ace7e0cd9960"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000600)={0x20, 0x81, 0x1, "b5"}, &(0x7f0000000640)={0x20, 0x82, 0x3, "07dc39"}, &(0x7f0000000680)={0x20, 0x83, 0x2, 'FF'}, &(0x7f00000006c0)={0x20, 0x84, 0x1, "b5"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "9fe705"}}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1e7d, 0x3264, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0xc6, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0x91a}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x9, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x75, 0x66}}]}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x310, 0x1, 0x0, 0x9, 0x20, 0x8}, 0x25, &(0x7f0000000cc0)={0x5, 0xf, 0x25, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x32, 0x81, 0xff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x10, 0x5, 0x7f, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x7a, 0x5c, 0x3f, 0x3f}]}, 0x3, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x2409}}, {0x69, &(0x7f0000000d40)=@string={0x69, 0x3, "485ca925a29f21e60982c2398df589e0d99df28e11d34a49cb44b7c122cc8ab0b5cb71d9f756dddad3e4d899f3ec37b605cf197ca25113770e7970e8b80f92739bbf09d041b3fd4079d2e43c68237de5cfd9f380727197683fa967d999a50c60b28da9b4901306"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x82c}}]}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x24, &(0x7f0000000440)={0x20, 0x31, 0x89, {0x89, 0x9, "bd5296435f6729093ddd4adaba8ae23b9e85c84c2ad96201ae41d8ad2dff4325ad4a65235c4c2b34125d612147185add811942491d2cda3b6d538aa3c4a0732e4286b81cf6acf3b129a344ef44bbe3a02a58d9b76f9111c7369c446e8f026f24e6def3bcb87dbf6f059e6eb835c6051950ff5200c6a387763ea52b0664fadd93e01a9c997ae618"}}, &(0x7f00000008c0)={0x0, 0x3, 0x68, @string={0x68, 0x3, "d46395bbbdfe4a2936f94c2bc68548e1451abdd47e95dbd226a7f099452e20e51f1d7f86c957640c49c11e8ec03f6563e33367f16ccb5913c30d4d58a8bd0d8121b968375eeb665ef70d1902bc022270ef5c62b4d8558023bf458138921da69d5392e2b1f635"}}, &(0x7f0000000940)={0x0, 0x22, 0xe, {[@local=@item_012={0x2, 0x2, 0x0, '.5'}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "bb27c9d3"}, @global=@item_4={0x3, 0x1, 0xb, "42cd001f"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xb1, 0x1, {0x22, 0xd23}}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000a00)={0x0, 0x5, 0x60, "8aa643e69cede98853072a09312924c1cf7164d75e5bc51c77fdcf415254237c08415bdccb3efb5a44f9146c00efb8faadc3926d42e79947a34598565e97928d46545eab24f7b4ddc5a5f570e02fbce04c23ca2b6fc78268b338c9ed633fd862"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000b00)={0x20, 0x1, 0x87, "71804f9e915c9ee0cba0226711a662d0c5cca476e990feff5b48d5de4c685bed7dc47b783effc27bb6c10db21227fc92e5f26074ad8c655b30f6130b55f23ab9393b940b576411b6f480eae87ef4401aaf324a02487d7b763832a5b42945018092607405f34b09147eedb53a823236b8afa06128f71f4d937ac0dc102a6a385dc9db6744b698f8"}, &(0x7f0000000bc0)={0x20, 0x3, 0x1, 0x3e}}) 09:48:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x3b, 0x0, 0xf00}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:22 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0xf00, 0x20}) 09:48:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 09:48:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x33c, r1, 0xd01, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1e}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x101, 0x3ff, 0x9125, 0x7]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x95, 0x1, 0xffff, 0x9, 0x20]}, @NL80211_ATTR_FRAME={0x155, 0x33, @action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7b0}, @broadcast, @broadcast, @initial, {0x0, 0xff}}, @ver_80211n={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, @tdls_teardown={0xc, 0x3, {0x1d, {0x37, 0x11b, {0x8, 0xa, "782195e48cb86122b24b9a0a3887860c", "080d2352ae64aa81f1a91af06e1c9068b4f4c495024a6c4ec8bbfd78699f271e", "4a3538f6189d2148d446676516c0b502a0f0a86d68948fd4b4b71a939dfefd8b", [{0x1, 0x10, "f9dedea60054e18ffdc55303c00785e4"}, {0x3, 0x12, "6bbec3fd1634c3742dd051bbcbfd9952a840"}, {0x4, 0x22, "eba8048a8370dd4dded3f2ac9bc5283dcdc28e326e1eee9f9d95808f1c08da5ef80d"}, {0x1, 0x3, "0ad6b2"}, {0x1, 0x10, "a368758b152efc74099963bc5fbb4aaf"}, {0x1, 0x3, "c3b79b"}, {0x2, 0x24, "e81cc9094a04b88d00822b48cfb1a1dcfa40525fc1fc4e024d43e64b83b617bfe6da5115"}, {0x4, 0x8, "d9549f6a7be5f90d"}, {0x4, 0x21, "2968905886074138af5d5124b78be4f7095d529837e3f1afaea95b82aff9cb3282"}, {0x4, 0xe, "c0b18d3b1b8a9bc2cac6d8772d41"}]}}, {0x65, 0x12, {@random="90088a936850", @device_b, @device_b}}}}}}, @NL80211_ATTR_FRAME={0x1a5, 0x33, @reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3f}, @device_b, @broadcast, @from_mac=@broadcast, {0x8, 0x9}}, 0x1200, 0x52, @default, @val={0x1, 0x2, [{0x30, 0x1}, {0x31, 0x1}]}, @val={0x2d, 0x1a, {0x4000, 0x2, 0x3, 0x0, {0xfff, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x1, 0x3}}, [{0xdd, 0x43, "0d6f99b6363f26c80653a434c3b5a3af8314fb43e6f0bb97dd3ea44047556adb2475ccafe4c3df1d03258ce7ff83563c5acfd9ac347f761e587baf0487943b61bda561"}, {0xdd, 0x6e, "bb9dd0a20e5744d3caed135ff2e59d7c44dcba35f50896f6f0815c58db75d95c234eb6d073e1ec42bda9af01f2f97933580149aa02f71db6f24a6a51e5e45ce14c6012ca6021ff108ceb40acfad889e60969943bb17e7ed3927ea7bbbc882dbc355b139e23001446531c46f05f4b"}, {0xdd, 0x6f, "011d8807d6417fa4ffd86edf9cb0371fe260c9f76482fe2bdf8303bbbe197c80beacbc1e20dbd8cf5e7d4f24d03f7964ab8d6c6074558ea73c91385e4c35edc1e083fa00435510dac282680289034a8bcd0ee5f1965e082acc9581783319f29ee112b576742e8366d6211daab56974"}, {0xdd, 0x3b, "79cebbf0ee0569f9be55b5cbadcd2921bcb28c692acb26edfbacd4ed86df371aa77dfc486ddfbf17d464481eb752f046f2f10934e88a7da3edb391"}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20048000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x60}}, 0x20048044) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x2cc, r1, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xfc, 0x5b, "cee5f1bafa4c47d41b44d76f2f97eec17c87b1ada1952b66b99d011039b963b2d6d9dc121e57dbd49f58f895cbe8a538be3905f07ed0a2d5c1816095571cf9bc01196cc59a538c3577faf81fd6a417caf04e517ad87de1c13fd164b014b8afb725b49981c64944e83e8fd754c83aa7f3998822665985c84a05da370618f7b681a9450b10bbadfd83db0e4adc0dfe2aa1f59caf2393c22033b3454c961e91607afbfdeb4129a0df0b5b8891198c623b7e00c3b5c80fd224ee3c54c9a8c7ff6fbdcecfd444a4de0fd19a8eafca6db9af1c22d67ce6d009daf838fe60cb970a4f9f266f3eac133921389f437afb8010e4450c81aa935bae2afc"}, @NL80211_ATTR_FRAME_MATCH={0xc5, 0x5b, "83572c6c8a521f06985697089d001b0f8044c092d3bd125418017a2e5ddd6ffe96f0619b3116de9ba5469d9852d9ee54202390b4e9ddbddccf76f8ce7ef46297bf37d4c00550362e585e1b5f33e52144b020544e31e7afa53fb399359a99aae42221923bf69cd536cc6fb41a7880850e9739b2777e164947c684106d4962df6913ad9ceff61214ce32484f5249da863aadb008b70e5ffe604e59852f004f97107ccb8fba866d45163bab60f51df69f4d0c7ae6eb80125b49ea9b16dcbfe9599b93"}, @NL80211_ATTR_FRAME_MATCH={0xf3, 0x5b, "40f9f1483ad968a7abdae24f1be1b2ee053c52d80b6cb40a9f5517863609ad6e9526b693904199db75b183b53d3f12826f956bdf8a7a386bbaba413a655f04fdf751dd59e6849c6ab0637550f7db0e6055ac988f99ffefe794885e92181cd17e17a9b638e97d2fd6e66984deae3f1e3db9764ba50beb89bda4b6d16c9e4513c17170b655976aa114dcbc3c23adb273802315aa05cbb6c749a23c7e0545092c34f67a5bf870a4c93198a69fa943e99732009d860db62bb13ae8c06e138e8a9c6d251b65dc0903144b84a1d2e6a2df75e3b6a4f3caafe8a1f77ff7aeca747da8b38a95c6537d4fd6f3afda6c19e1345f"}]}, 0x2cc}, 0x1, 0x0, 0x0, 0xc000}, 0x6000c000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000980)={0x40c, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1220}, @NL80211_ATTR_FRAME={0x39e, 0x33, @assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @random="fa7ccb17d170", {0x1, 0x6}}, 0x68c0, 0x2000, {0x0, 0x6, @random="ae646c681275"}, @val={0x1, 0x4, [{0x12}, {0x36, 0x1}, {0x6c, 0x1}, {0xb}]}, @void, [{0xdd, 0xde, "91f911e607ec2eb18a9a8745805843eb26b5bfd8980e929f309a810bb03f7c8fde0257882d1675bb04b4c87e5ff1a261a5112fe886eeb13ae7196a79f5de6ce9322247e128cf1a5ca783542210fa853e60dcfea8b6e39c6b626501b9276c05371500ea6bbdf740ea251fac14ccb06da2b059a94c7e5a21c842ca29da082cf3a0a6adb407d4b4572335be0ea59ca7fc890f2b197fcde6ff6a9fdbde1533d47e28cbda1f448346b6d9c857997aee1cbcd529e8fa4d98110730bb13771922f30d7b04acafd189c41c2f128a11cdb5e040ae1bb1b802740ba8c0a1d62255c25a"}, {0xdd, 0xa4, "43ea4429f0d3b1a3adfee12b0efb2230498c115ae7c3bdb360bafa4da2e0249e912158008e9f8b7fa7211d1f693777def0023bb39c6ea6e4a48d2627920eba5f553826afb92b3c54990e328affb84b4acff05df127d4cb71d06295a780ad54ed0e3bfb0f74ea5d0ed4a049b00f86e9e67a9026a03fa37ea4c63ba71257ed774795c588265ad150fdb27d62f7120ac03a3252db6bac4c11efc4619a91a16e7e4e41a33d2e"}, {0xdd, 0xb8, "b345a1afcb415a8f534c74c67cce18753b9c313987ccb094b4edf5e9bd4762c8f014268fe575e1e81c4516b92c92f6fd29b9d593161dea293bb8bda56d6f5a58263d195a63bfa19c791835f9d7c7157e5b6ac6a6ffdecf6db70e935d55e5d2fab8ad9f629739a7c6cf3f4889404730fc8ee8400700dd38d0d62ac557292b588ac7e881907fc1d04b54cb1b0d074f0478662d79a194d6216630b4858adfb8802b4db9a93ad48cff76ccd520abaa3c8c99c1d01990c14dbbac"}, {0xdd, 0xdb, "47e8508e0098aa3d817ccbdbe9656c4c4731986a8d34a026fb9b355717e3f7619713cff12e182b0bbb005643142c076d5d97b8f901ea7ebe2ea174a1e9c292ba80f1e06851c6b742c08b330213907e2a292bdf197b201dbe968e382b8cb29a2d9c96962ac0f990bf42340d0b1070b396accd5ab2c52df1ce4efbeaadf6e806b0d4b06d7d1c1cd6cea24383c09a82e5053bff8e389d224f182286565f484a2e1f0aad2fea4a3d6a10634dfb68de98d08e6143555072d696c2d237156272a1ee83cbd0f720f85327622e23bcb262b8d0785e68315c149d3e02a3838d"}, {0xdd, 0x16, "039da4d1237e160277fa2e82d5853d17e8b6fa968779"}, {0xdd, 0x39, "0e6c953f0f8cbab71a4a9c7ded2f47c0b2449fbd6fecf5d4c6472eac0e426052a48a245df07a7a87c54cd6d023ea3455bd4565d3ad3607e633"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x23}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x40c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000010) 09:48:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="1457acee9bb4aaa83cb4492181c3ed74da380f77a88cf05bc6efb8050e608b8ab0ca8f315ce327c560d01b6cb9d0d966fc3e4378666899d37d53f5e8868ba0851119b93bb0940b92730b63d5159054c123a4ccfcef8fee198c0823e9f00b457f39ca3cf5183513c4986b37c7d68b9febe6999582c7a4808ea5786e56f3", 0x7d) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x500, 0xa0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) write$fb(r5, &(0x7f0000000280)="9a1e878dfa5472000b1b2ec5e564ad032f61100a3e72f7bcaa9f58b5182bcac82ccc37e99be817e06682a8002466574629a393acf06c764a4e9c2d3753f43a6a493b0ce102c545ea4fe13ed42bffef246593e59d06a7761413a65bf218c040a8ff90aea0a6c689af88f31d4131f03f2ac01e7c02f651a1f32cbad534da71024b524972ad5c2649f74d7f91ccba7d28f498f897a449f25721d6d5040adafa6479ddecc6cec50e0cd88e1ef103abe932e153de0a52f9bf2202540f5c7f57f469a7e9e783771da7933e60f40e06497d37a7e6d6474438e5d9718266f6285da4ac073815", 0xe2) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) [ 1050.393386][T18585] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:22 executing program 2: syz_open_dev$sg(&(0x7f00000010c0), 0x200, 0x44040) 09:48:22 executing program 4: bpf$MAP_CREATE(0x7, &(0x7f0000000040), 0x48) 09:48:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x3b, 0x0, 0x6000}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x33c, r1, 0xd01, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1e}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x101, 0x3ff, 0x9125, 0x7]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x95, 0x1, 0xffff, 0x9, 0x20]}, @NL80211_ATTR_FRAME={0x155, 0x33, @action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7b0}, @broadcast, @broadcast, @initial, {0x0, 0xff}}, @ver_80211n={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, @tdls_teardown={0xc, 0x3, {0x1d, {0x37, 0x11b, {0x8, 0xa, "782195e48cb86122b24b9a0a3887860c", "080d2352ae64aa81f1a91af06e1c9068b4f4c495024a6c4ec8bbfd78699f271e", "4a3538f6189d2148d446676516c0b502a0f0a86d68948fd4b4b71a939dfefd8b", [{0x1, 0x10, "f9dedea60054e18ffdc55303c00785e4"}, {0x3, 0x12, "6bbec3fd1634c3742dd051bbcbfd9952a840"}, {0x4, 0x22, "eba8048a8370dd4dded3f2ac9bc5283dcdc28e326e1eee9f9d95808f1c08da5ef80d"}, {0x1, 0x3, "0ad6b2"}, {0x1, 0x10, "a368758b152efc74099963bc5fbb4aaf"}, {0x1, 0x3, "c3b79b"}, {0x2, 0x24, "e81cc9094a04b88d00822b48cfb1a1dcfa40525fc1fc4e024d43e64b83b617bfe6da5115"}, {0x4, 0x8, "d9549f6a7be5f90d"}, {0x4, 0x21, "2968905886074138af5d5124b78be4f7095d529837e3f1afaea95b82aff9cb3282"}, {0x4, 0xe, "c0b18d3b1b8a9bc2cac6d8772d41"}]}}, {0x65, 0x12, {@random="90088a936850", @device_b, @device_b}}}}}}, @NL80211_ATTR_FRAME={0x1a5, 0x33, @reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3f}, @device_b, @broadcast, @from_mac=@broadcast, {0x8, 0x9}}, 0x1200, 0x52, @default, @val={0x1, 0x2, [{0x30, 0x1}, {0x31, 0x1}]}, @val={0x2d, 0x1a, {0x4000, 0x2, 0x3, 0x0, {0xfff, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x1, 0x3}}, [{0xdd, 0x43, "0d6f99b6363f26c80653a434c3b5a3af8314fb43e6f0bb97dd3ea44047556adb2475ccafe4c3df1d03258ce7ff83563c5acfd9ac347f761e587baf0487943b61bda561"}, {0xdd, 0x6e, "bb9dd0a20e5744d3caed135ff2e59d7c44dcba35f50896f6f0815c58db75d95c234eb6d073e1ec42bda9af01f2f97933580149aa02f71db6f24a6a51e5e45ce14c6012ca6021ff108ceb40acfad889e60969943bb17e7ed3927ea7bbbc882dbc355b139e23001446531c46f05f4b"}, {0xdd, 0x6f, "011d8807d6417fa4ffd86edf9cb0371fe260c9f76482fe2bdf8303bbbe197c80beacbc1e20dbd8cf5e7d4f24d03f7964ab8d6c6074558ea73c91385e4c35edc1e083fa00435510dac282680289034a8bcd0ee5f1965e082acc9581783319f29ee112b576742e8366d6211daab56974"}, {0xdd, 0x3b, "79cebbf0ee0569f9be55b5cbadcd2921bcb28c692acb26edfbacd4ed86df371aa77dfc486ddfbf17d464481eb752f046f2f10934e88a7da3edb391"}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20048000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x60}}, 0x20048044) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x2cc, r1, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xfc, 0x5b, "cee5f1bafa4c47d41b44d76f2f97eec17c87b1ada1952b66b99d011039b963b2d6d9dc121e57dbd49f58f895cbe8a538be3905f07ed0a2d5c1816095571cf9bc01196cc59a538c3577faf81fd6a417caf04e517ad87de1c13fd164b014b8afb725b49981c64944e83e8fd754c83aa7f3998822665985c84a05da370618f7b681a9450b10bbadfd83db0e4adc0dfe2aa1f59caf2393c22033b3454c961e91607afbfdeb4129a0df0b5b8891198c623b7e00c3b5c80fd224ee3c54c9a8c7ff6fbdcecfd444a4de0fd19a8eafca6db9af1c22d67ce6d009daf838fe60cb970a4f9f266f3eac133921389f437afb8010e4450c81aa935bae2afc"}, @NL80211_ATTR_FRAME_MATCH={0xc5, 0x5b, "83572c6c8a521f06985697089d001b0f8044c092d3bd125418017a2e5ddd6ffe96f0619b3116de9ba5469d9852d9ee54202390b4e9ddbddccf76f8ce7ef46297bf37d4c00550362e585e1b5f33e52144b020544e31e7afa53fb399359a99aae42221923bf69cd536cc6fb41a7880850e9739b2777e164947c684106d4962df6913ad9ceff61214ce32484f5249da863aadb008b70e5ffe604e59852f004f97107ccb8fba866d45163bab60f51df69f4d0c7ae6eb80125b49ea9b16dcbfe9599b93"}, @NL80211_ATTR_FRAME_MATCH={0xf3, 0x5b, "40f9f1483ad968a7abdae24f1be1b2ee053c52d80b6cb40a9f5517863609ad6e9526b693904199db75b183b53d3f12826f956bdf8a7a386bbaba413a655f04fdf751dd59e6849c6ab0637550f7db0e6055ac988f99ffefe794885e92181cd17e17a9b638e97d2fd6e66984deae3f1e3db9764ba50beb89bda4b6d16c9e4513c17170b655976aa114dcbc3c23adb273802315aa05cbb6c749a23c7e0545092c34f67a5bf870a4c93198a69fa943e99732009d860db62bb13ae8c06e138e8a9c6d251b65dc0903144b84a1d2e6a2df75e3b6a4f3caafe8a1f77ff7aeca747da8b38a95c6537d4fd6f3afda6c19e1345f"}]}, 0x2cc}, 0x1, 0x0, 0x0, 0xc000}, 0x6000c000) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000980)={0x40c, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1220}, @NL80211_ATTR_FRAME={0x39e, 0x33, @assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @random="fa7ccb17d170", {0x1, 0x6}}, 0x68c0, 0x2000, {0x0, 0x6, @random="ae646c681275"}, @val={0x1, 0x4, [{0x12}, {0x36, 0x1}, {0x6c, 0x1}, {0xb}]}, @void, [{0xdd, 0xde, "91f911e607ec2eb18a9a8745805843eb26b5bfd8980e929f309a810bb03f7c8fde0257882d1675bb04b4c87e5ff1a261a5112fe886eeb13ae7196a79f5de6ce9322247e128cf1a5ca783542210fa853e60dcfea8b6e39c6b626501b9276c05371500ea6bbdf740ea251fac14ccb06da2b059a94c7e5a21c842ca29da082cf3a0a6adb407d4b4572335be0ea59ca7fc890f2b197fcde6ff6a9fdbde1533d47e28cbda1f448346b6d9c857997aee1cbcd529e8fa4d98110730bb13771922f30d7b04acafd189c41c2f128a11cdb5e040ae1bb1b802740ba8c0a1d62255c25a"}, {0xdd, 0xa4, "43ea4429f0d3b1a3adfee12b0efb2230498c115ae7c3bdb360bafa4da2e0249e912158008e9f8b7fa7211d1f693777def0023bb39c6ea6e4a48d2627920eba5f553826afb92b3c54990e328affb84b4acff05df127d4cb71d06295a780ad54ed0e3bfb0f74ea5d0ed4a049b00f86e9e67a9026a03fa37ea4c63ba71257ed774795c588265ad150fdb27d62f7120ac03a3252db6bac4c11efc4619a91a16e7e4e41a33d2e"}, {0xdd, 0xb8, "b345a1afcb415a8f534c74c67cce18753b9c313987ccb094b4edf5e9bd4762c8f014268fe575e1e81c4516b92c92f6fd29b9d593161dea293bb8bda56d6f5a58263d195a63bfa19c791835f9d7c7157e5b6ac6a6ffdecf6db70e935d55e5d2fab8ad9f629739a7c6cf3f4889404730fc8ee8400700dd38d0d62ac557292b588ac7e881907fc1d04b54cb1b0d074f0478662d79a194d6216630b4858adfb8802b4db9a93ad48cff76ccd520abaa3c8c99c1d01990c14dbbac"}, {0xdd, 0xdb, "47e8508e0098aa3d817ccbdbe9656c4c4731986a8d34a026fb9b355717e3f7619713cff12e182b0bbb005643142c076d5d97b8f901ea7ebe2ea174a1e9c292ba80f1e06851c6b742c08b330213907e2a292bdf197b201dbe968e382b8cb29a2d9c96962ac0f990bf42340d0b1070b396accd5ab2c52df1ce4efbeaadf6e806b0d4b06d7d1c1cd6cea24383c09a82e5053bff8e389d224f182286565f484a2e1f0aad2fea4a3d6a10634dfb68de98d08e6143555072d696c2d237156272a1ee83cbd0f720f85327622e23bcb262b8d0785e68315c149d3e02a3838d"}, {0xdd, 0x16, "039da4d1237e160277fa2e82d5853d17e8b6fa968779"}, {0xdd, 0x39, "0e6c953f0f8cbab71a4a9c7ded2f47c0b2449fbd6fecf5d4c6472eac0e426052a48a245df07a7a87c54cd6d023ea3455bd4565d3ad3607e633"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x23}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x40c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000010) 09:48:22 executing program 4: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 09:48:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2161) [ 1050.752736][ T3563] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1050.842867][T18602] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1051.002841][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1051.142757][ T3563] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1051.154631][ T3563] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.174276][ T3563] usb 6-1: config 0 descriptor?? [ 1051.228695][ T3563] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1051.644743][T18593] UDC core: couldn't find an available UDC or it's busy: -16 [ 1051.652472][T18593] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1051.663815][T18593] UDC core: couldn't find an available UDC or it's busy: -16 [ 1051.671369][T18593] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 09:48:25 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect$uac1(0x3, 0xad, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001ecfe6d696864f504a5dad97cbb000000406b1d010140000102030109029b0003011f20090904000000010100000a240106009d02010209240304ff010202200904010000010200000904010101010200000724017f890110102402020000060001f2b7c909e6fd11092402010044012a13072401010400000905010908003fda01072501800500020904020000010200000904020101010200000c2402013f045d563ca69faf090582"], &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x2, 0x1f, 0xfa, 0xff, 0x3}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000400)={0x14, &(0x7f0000000340)={0x20, 0x33, 0x53, {0x53, 0xb, "76774290408aac196f1b50926eff92723d3b9bf3dc6ba8b7f3c3e38a3ec388613f2264d4851a099dce73bc9ab9ef33e4776edcc0e6fad0289b675bee532d537136e744559b0c9f9c0a163e7c137948eea4"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'/10]}, &(0x7f0000000740)={0x44, &(0x7f00000007c0)=ANY=[@ANYBLOB="4080b042fa0e8800000067b8eac581a53da6353516f2864d7f1161b87d8dad0918e757b813eee7972cd030070d62088d019d7ec10f4ce5b49f656c88b0928debacbb68aed16b4d598a520e983fdbdee881245baded920d5dcffd71ed49d6c6e49fb08969d9d89ea72a9e29d08c00000000000000006687ffc96a7c34df4d6b092d91f5e06a51444f12f58fdb42bbf3dd44525c3dc2319e4ec6367fd2e52edcfd8ea7f7a27b6dcf557a5bc3ff0b1bd747aa3b860d66248b9205ada637c092ace7e0cd9960"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000600)={0x20, 0x81, 0x1, "b5"}, &(0x7f0000000640)={0x20, 0x82, 0x3, "07dc39"}, &(0x7f0000000680)={0x20, 0x83, 0x2, 'FF'}, &(0x7f00000006c0)={0x20, 0x84, 0x1, "b5"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "9fe705"}}) (async) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1e7d, 0x3264, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0xc6, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0x91a}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x9, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x75, 0x66}}]}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x310, 0x1, 0x0, 0x9, 0x20, 0x8}, 0x25, &(0x7f0000000cc0)={0x5, 0xf, 0x25, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x32, 0x81, 0xff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x10, 0x5, 0x7f, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x7a, 0x5c, 0x3f, 0x3f}]}, 0x3, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x2409}}, {0x69, &(0x7f0000000d40)=@string={0x69, 0x3, "485ca925a29f21e60982c2398df589e0d99df28e11d34a49cb44b7c122cc8ab0b5cb71d9f756dddad3e4d899f3ec37b605cf197ca25113770e7970e8b80f92739bbf09d041b3fd4079d2e43c68237de5cfd9f380727197683fa967d999a50c60b28da9b4901306"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x82c}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x24, &(0x7f0000000440)={0x20, 0x31, 0x89, {0x89, 0x9, "bd5296435f6729093ddd4adaba8ae23b9e85c84c2ad96201ae41d8ad2dff4325ad4a65235c4c2b34125d612147185add811942491d2cda3b6d538aa3c4a0732e4286b81cf6acf3b129a344ef44bbe3a02a58d9b76f9111c7369c446e8f026f24e6def3bcb87dbf6f059e6eb835c6051950ff5200c6a387763ea52b0664fadd93e01a9c997ae618"}}, &(0x7f00000008c0)={0x0, 0x3, 0x68, @string={0x68, 0x3, "d46395bbbdfe4a2936f94c2bc68548e1451abdd47e95dbd226a7f099452e20e51f1d7f86c957640c49c11e8ec03f6563e33367f16ccb5913c30d4d58a8bd0d8121b968375eeb665ef70d1902bc022270ef5c62b4d8558023bf458138921da69d5392e2b1f635"}}, &(0x7f0000000940)={0x0, 0x22, 0xe, {[@local=@item_012={0x2, 0x2, 0x0, '.5'}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "bb27c9d3"}, @global=@item_4={0x3, 0x1, 0xb, "42cd001f"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xb1, 0x1, {0x22, 0xd23}}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000a00)={0x0, 0x5, 0x60, "8aa643e69cede98853072a09312924c1cf7164d75e5bc51c77fdcf415254237c08415bdccb3efb5a44f9146c00efb8faadc3926d42e79947a34598565e97928d46545eab24f7b4ddc5a5f570e02fbce04c23ca2b6fc78268b338c9ed633fd862"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000b00)={0x20, 0x1, 0x87, "71804f9e915c9ee0cba0226711a662d0c5cca476e990feff5b48d5de4c685bed7dc47b783effc27bb6c10db21227fc92e5f26074ad8c655b30f6130b55f23ab9393b940b576411b6f480eae87ef4401aaf324a02487d7b763832a5b42945018092607405f34b09147eedb53a823236b8afa06128f71f4d937ac0dc102a6a385dc9db6744b698f8"}, &(0x7f0000000bc0)={0x20, 0x3, 0x1, 0x3e}}) 09:48:25 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="1457acee9bb4aaa83cb4492181c3ed74da380f77a88cf05bc6efb8050e608b8ab0ca8f315ce327c560d01b6cb9d0d966fc3e4378666899d37d53f5e8868ba0851119b93bb0940b92730b63d5159054c123a4ccfcef8fee198c0823e9f00b457f39ca3cf5183513c4986b37c7d68b9febe6999582c7a4808ea5786e56f3", 0x7d) (async) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x500, 0xa0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) write$fb(r5, &(0x7f0000000280)="9a1e878dfa5472000b1b2ec5e564ad032f61100a3e72f7bcaa9f58b5182bcac82ccc37e99be817e06682a8002466574629a393acf06c764a4e9c2d3753f43a6a493b0ce102c545ea4fe13ed42bffef246593e59d06a7761413a65bf218c040a8ff90aea0a6c689af88f31d4131f03f2ac01e7c02f651a1f32cbad534da71024b524972ad5c2649f74d7f91ccba7d28f498f897a449f25721d6d5040adafa6479ddecc6cec50e0cd88e1ef103abe932e153de0a52f9bf2202540f5c7f57f469a7e9e783771da7933e60f40e06497d37a7e6d6474438e5d9718266f6285da4ac073815", 0xe2) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) (async) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) 09:48:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x33c, r1, 0xd01, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1e}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x101, 0x3ff, 0x9125, 0x7]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x95, 0x1, 0xffff, 0x9, 0x20]}, @NL80211_ATTR_FRAME={0x155, 0x33, @action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7b0}, @broadcast, @broadcast, @initial, {0x0, 0xff}}, @ver_80211n={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, @tdls_teardown={0xc, 0x3, {0x1d, {0x37, 0x11b, {0x8, 0xa, "782195e48cb86122b24b9a0a3887860c", "080d2352ae64aa81f1a91af06e1c9068b4f4c495024a6c4ec8bbfd78699f271e", "4a3538f6189d2148d446676516c0b502a0f0a86d68948fd4b4b71a939dfefd8b", [{0x1, 0x10, "f9dedea60054e18ffdc55303c00785e4"}, {0x3, 0x12, "6bbec3fd1634c3742dd051bbcbfd9952a840"}, {0x4, 0x22, "eba8048a8370dd4dded3f2ac9bc5283dcdc28e326e1eee9f9d95808f1c08da5ef80d"}, {0x1, 0x3, "0ad6b2"}, {0x1, 0x10, "a368758b152efc74099963bc5fbb4aaf"}, {0x1, 0x3, "c3b79b"}, {0x2, 0x24, "e81cc9094a04b88d00822b48cfb1a1dcfa40525fc1fc4e024d43e64b83b617bfe6da5115"}, {0x4, 0x8, "d9549f6a7be5f90d"}, {0x4, 0x21, "2968905886074138af5d5124b78be4f7095d529837e3f1afaea95b82aff9cb3282"}, {0x4, 0xe, "c0b18d3b1b8a9bc2cac6d8772d41"}]}}, {0x65, 0x12, {@random="90088a936850", @device_b, @device_b}}}}}}, @NL80211_ATTR_FRAME={0x1a5, 0x33, @reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3f}, @device_b, @broadcast, @from_mac=@broadcast, {0x8, 0x9}}, 0x1200, 0x52, @default, @val={0x1, 0x2, [{0x30, 0x1}, {0x31, 0x1}]}, @val={0x2d, 0x1a, {0x4000, 0x2, 0x3, 0x0, {0xfff, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x1, 0x3}}, [{0xdd, 0x43, "0d6f99b6363f26c80653a434c3b5a3af8314fb43e6f0bb97dd3ea44047556adb2475ccafe4c3df1d03258ce7ff83563c5acfd9ac347f761e587baf0487943b61bda561"}, {0xdd, 0x6e, "bb9dd0a20e5744d3caed135ff2e59d7c44dcba35f50896f6f0815c58db75d95c234eb6d073e1ec42bda9af01f2f97933580149aa02f71db6f24a6a51e5e45ce14c6012ca6021ff108ceb40acfad889e60969943bb17e7ed3927ea7bbbc882dbc355b139e23001446531c46f05f4b"}, {0xdd, 0x6f, "011d8807d6417fa4ffd86edf9cb0371fe260c9f76482fe2bdf8303bbbe197c80beacbc1e20dbd8cf5e7d4f24d03f7964ab8d6c6074558ea73c91385e4c35edc1e083fa00435510dac282680289034a8bcd0ee5f1965e082acc9581783319f29ee112b576742e8366d6211daab56974"}, {0xdd, 0x3b, "79cebbf0ee0569f9be55b5cbadcd2921bcb28c692acb26edfbacd4ed86df371aa77dfc486ddfbf17d464481eb752f046f2f10934e88a7da3edb391"}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20048000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x60}}, 0x20048044) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x2cc, r1, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xfc, 0x5b, "cee5f1bafa4c47d41b44d76f2f97eec17c87b1ada1952b66b99d011039b963b2d6d9dc121e57dbd49f58f895cbe8a538be3905f07ed0a2d5c1816095571cf9bc01196cc59a538c3577faf81fd6a417caf04e517ad87de1c13fd164b014b8afb725b49981c64944e83e8fd754c83aa7f3998822665985c84a05da370618f7b681a9450b10bbadfd83db0e4adc0dfe2aa1f59caf2393c22033b3454c961e91607afbfdeb4129a0df0b5b8891198c623b7e00c3b5c80fd224ee3c54c9a8c7ff6fbdcecfd444a4de0fd19a8eafca6db9af1c22d67ce6d009daf838fe60cb970a4f9f266f3eac133921389f437afb8010e4450c81aa935bae2afc"}, @NL80211_ATTR_FRAME_MATCH={0xc5, 0x5b, "83572c6c8a521f06985697089d001b0f8044c092d3bd125418017a2e5ddd6ffe96f0619b3116de9ba5469d9852d9ee54202390b4e9ddbddccf76f8ce7ef46297bf37d4c00550362e585e1b5f33e52144b020544e31e7afa53fb399359a99aae42221923bf69cd536cc6fb41a7880850e9739b2777e164947c684106d4962df6913ad9ceff61214ce32484f5249da863aadb008b70e5ffe604e59852f004f97107ccb8fba866d45163bab60f51df69f4d0c7ae6eb80125b49ea9b16dcbfe9599b93"}, @NL80211_ATTR_FRAME_MATCH={0xf3, 0x5b, "40f9f1483ad968a7abdae24f1be1b2ee053c52d80b6cb40a9f5517863609ad6e9526b693904199db75b183b53d3f12826f956bdf8a7a386bbaba413a655f04fdf751dd59e6849c6ab0637550f7db0e6055ac988f99ffefe794885e92181cd17e17a9b638e97d2fd6e66984deae3f1e3db9764ba50beb89bda4b6d16c9e4513c17170b655976aa114dcbc3c23adb273802315aa05cbb6c749a23c7e0545092c34f67a5bf870a4c93198a69fa943e99732009d860db62bb13ae8c06e138e8a9c6d251b65dc0903144b84a1d2e6a2df75e3b6a4f3caafe8a1f77ff7aeca747da8b38a95c6537d4fd6f3afda6c19e1345f"}]}, 0x2cc}, 0x1, 0x0, 0x0, 0xc000}, 0x6000c000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000980)={0x40c, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1220}, @NL80211_ATTR_FRAME={0x39e, 0x33, @assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @random="fa7ccb17d170", {0x1, 0x6}}, 0x68c0, 0x2000, {0x0, 0x6, @random="ae646c681275"}, @val={0x1, 0x4, [{0x12}, {0x36, 0x1}, {0x6c, 0x1}, {0xb}]}, @void, [{0xdd, 0xde, "91f911e607ec2eb18a9a8745805843eb26b5bfd8980e929f309a810bb03f7c8fde0257882d1675bb04b4c87e5ff1a261a5112fe886eeb13ae7196a79f5de6ce9322247e128cf1a5ca783542210fa853e60dcfea8b6e39c6b626501b9276c05371500ea6bbdf740ea251fac14ccb06da2b059a94c7e5a21c842ca29da082cf3a0a6adb407d4b4572335be0ea59ca7fc890f2b197fcde6ff6a9fdbde1533d47e28cbda1f448346b6d9c857997aee1cbcd529e8fa4d98110730bb13771922f30d7b04acafd189c41c2f128a11cdb5e040ae1bb1b802740ba8c0a1d62255c25a"}, {0xdd, 0xa4, "43ea4429f0d3b1a3adfee12b0efb2230498c115ae7c3bdb360bafa4da2e0249e912158008e9f8b7fa7211d1f693777def0023bb39c6ea6e4a48d2627920eba5f553826afb92b3c54990e328affb84b4acff05df127d4cb71d06295a780ad54ed0e3bfb0f74ea5d0ed4a049b00f86e9e67a9026a03fa37ea4c63ba71257ed774795c588265ad150fdb27d62f7120ac03a3252db6bac4c11efc4619a91a16e7e4e41a33d2e"}, {0xdd, 0xb8, "b345a1afcb415a8f534c74c67cce18753b9c313987ccb094b4edf5e9bd4762c8f014268fe575e1e81c4516b92c92f6fd29b9d593161dea293bb8bda56d6f5a58263d195a63bfa19c791835f9d7c7157e5b6ac6a6ffdecf6db70e935d55e5d2fab8ad9f629739a7c6cf3f4889404730fc8ee8400700dd38d0d62ac557292b588ac7e881907fc1d04b54cb1b0d074f0478662d79a194d6216630b4858adfb8802b4db9a93ad48cff76ccd520abaa3c8c99c1d01990c14dbbac"}, {0xdd, 0xdb, "47e8508e0098aa3d817ccbdbe9656c4c4731986a8d34a026fb9b355717e3f7619713cff12e182b0bbb005643142c076d5d97b8f901ea7ebe2ea174a1e9c292ba80f1e06851c6b742c08b330213907e2a292bdf197b201dbe968e382b8cb29a2d9c96962ac0f990bf42340d0b1070b396accd5ab2c52df1ce4efbeaadf6e806b0d4b06d7d1c1cd6cea24383c09a82e5053bff8e389d224f182286565f484a2e1f0aad2fea4a3d6a10634dfb68de98d08e6143555072d696c2d237156272a1ee83cbd0f720f85327622e23bcb262b8d0785e68315c149d3e02a3838d"}, {0xdd, 0x16, "039da4d1237e160277fa2e82d5853d17e8b6fa968779"}, {0xdd, 0x39, "0e6c953f0f8cbab71a4a9c7ded2f47c0b2449fbd6fecf5d4c6472eac0e426052a48a245df07a7a87c54cd6d023ea3455bd4565d3ad3607e633"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x23}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x40c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000010) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x33c, r1, 0xd01, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1e}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x101, 0x3ff, 0x9125, 0x7]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x95, 0x1, 0xffff, 0x9, 0x20]}, @NL80211_ATTR_FRAME={0x155, 0x33, @action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7b0}, @broadcast, @broadcast, @initial, {0x0, 0xff}}, @ver_80211n={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, @tdls_teardown={0xc, 0x3, {0x1d, {0x37, 0x11b, {0x8, 0xa, "782195e48cb86122b24b9a0a3887860c", "080d2352ae64aa81f1a91af06e1c9068b4f4c495024a6c4ec8bbfd78699f271e", "4a3538f6189d2148d446676516c0b502a0f0a86d68948fd4b4b71a939dfefd8b", [{0x1, 0x10, "f9dedea60054e18ffdc55303c00785e4"}, {0x3, 0x12, "6bbec3fd1634c3742dd051bbcbfd9952a840"}, {0x4, 0x22, "eba8048a8370dd4dded3f2ac9bc5283dcdc28e326e1eee9f9d95808f1c08da5ef80d"}, {0x1, 0x3, "0ad6b2"}, {0x1, 0x10, "a368758b152efc74099963bc5fbb4aaf"}, {0x1, 0x3, "c3b79b"}, {0x2, 0x24, "e81cc9094a04b88d00822b48cfb1a1dcfa40525fc1fc4e024d43e64b83b617bfe6da5115"}, {0x4, 0x8, "d9549f6a7be5f90d"}, {0x4, 0x21, "2968905886074138af5d5124b78be4f7095d529837e3f1afaea95b82aff9cb3282"}, {0x4, 0xe, "c0b18d3b1b8a9bc2cac6d8772d41"}]}}, {0x65, 0x12, {@random="90088a936850", @device_b, @device_b}}}}}}, @NL80211_ATTR_FRAME={0x1a5, 0x33, @reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3f}, @device_b, @broadcast, @from_mac=@broadcast, {0x8, 0x9}}, 0x1200, 0x52, @default, @val={0x1, 0x2, [{0x30, 0x1}, {0x31, 0x1}]}, @val={0x2d, 0x1a, {0x4000, 0x2, 0x3, 0x0, {0xfff, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x1, 0x3}}, [{0xdd, 0x43, "0d6f99b6363f26c80653a434c3b5a3af8314fb43e6f0bb97dd3ea44047556adb2475ccafe4c3df1d03258ce7ff83563c5acfd9ac347f761e587baf0487943b61bda561"}, {0xdd, 0x6e, "bb9dd0a20e5744d3caed135ff2e59d7c44dcba35f50896f6f0815c58db75d95c234eb6d073e1ec42bda9af01f2f97933580149aa02f71db6f24a6a51e5e45ce14c6012ca6021ff108ceb40acfad889e60969943bb17e7ed3927ea7bbbc882dbc355b139e23001446531c46f05f4b"}, {0xdd, 0x6f, "011d8807d6417fa4ffd86edf9cb0371fe260c9f76482fe2bdf8303bbbe197c80beacbc1e20dbd8cf5e7d4f24d03f7964ab8d6c6074558ea73c91385e4c35edc1e083fa00435510dac282680289034a8bcd0ee5f1965e082acc9581783319f29ee112b576742e8366d6211daab56974"}, {0xdd, 0x3b, "79cebbf0ee0569f9be55b5cbadcd2921bcb28c692acb26edfbacd4ed86df371aa77dfc486ddfbf17d464481eb752f046f2f10934e88a7da3edb391"}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20048000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x60}}, 0x20048044) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x2cc, r1, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xfc, 0x5b, "cee5f1bafa4c47d41b44d76f2f97eec17c87b1ada1952b66b99d011039b963b2d6d9dc121e57dbd49f58f895cbe8a538be3905f07ed0a2d5c1816095571cf9bc01196cc59a538c3577faf81fd6a417caf04e517ad87de1c13fd164b014b8afb725b49981c64944e83e8fd754c83aa7f3998822665985c84a05da370618f7b681a9450b10bbadfd83db0e4adc0dfe2aa1f59caf2393c22033b3454c961e91607afbfdeb4129a0df0b5b8891198c623b7e00c3b5c80fd224ee3c54c9a8c7ff6fbdcecfd444a4de0fd19a8eafca6db9af1c22d67ce6d009daf838fe60cb970a4f9f266f3eac133921389f437afb8010e4450c81aa935bae2afc"}, @NL80211_ATTR_FRAME_MATCH={0xc5, 0x5b, "83572c6c8a521f06985697089d001b0f8044c092d3bd125418017a2e5ddd6ffe96f0619b3116de9ba5469d9852d9ee54202390b4e9ddbddccf76f8ce7ef46297bf37d4c00550362e585e1b5f33e52144b020544e31e7afa53fb399359a99aae42221923bf69cd536cc6fb41a7880850e9739b2777e164947c684106d4962df6913ad9ceff61214ce32484f5249da863aadb008b70e5ffe604e59852f004f97107ccb8fba866d45163bab60f51df69f4d0c7ae6eb80125b49ea9b16dcbfe9599b93"}, @NL80211_ATTR_FRAME_MATCH={0xf3, 0x5b, "40f9f1483ad968a7abdae24f1be1b2ee053c52d80b6cb40a9f5517863609ad6e9526b693904199db75b183b53d3f12826f956bdf8a7a386bbaba413a655f04fdf751dd59e6849c6ab0637550f7db0e6055ac988f99ffefe794885e92181cd17e17a9b638e97d2fd6e66984deae3f1e3db9764ba50beb89bda4b6d16c9e4513c17170b655976aa114dcbc3c23adb273802315aa05cbb6c749a23c7e0545092c34f67a5bf870a4c93198a69fa943e99732009d860db62bb13ae8c06e138e8a9c6d251b65dc0903144b84a1d2e6a2df75e3b6a4f3caafe8a1f77ff7aeca747da8b38a95c6537d4fd6f3afda6c19e1345f"}]}, 0x2cc}, 0x1, 0x0, 0x0, 0xc000}, 0x6000c000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000980)={0x40c, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1220}, @NL80211_ATTR_FRAME={0x39e, 0x33, @assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @random="fa7ccb17d170", {0x1, 0x6}}, 0x68c0, 0x2000, {0x0, 0x6, @random="ae646c681275"}, @val={0x1, 0x4, [{0x12}, {0x36, 0x1}, {0x6c, 0x1}, {0xb}]}, @void, [{0xdd, 0xde, "91f911e607ec2eb18a9a8745805843eb26b5bfd8980e929f309a810bb03f7c8fde0257882d1675bb04b4c87e5ff1a261a5112fe886eeb13ae7196a79f5de6ce9322247e128cf1a5ca783542210fa853e60dcfea8b6e39c6b626501b9276c05371500ea6bbdf740ea251fac14ccb06da2b059a94c7e5a21c842ca29da082cf3a0a6adb407d4b4572335be0ea59ca7fc890f2b197fcde6ff6a9fdbde1533d47e28cbda1f448346b6d9c857997aee1cbcd529e8fa4d98110730bb13771922f30d7b04acafd189c41c2f128a11cdb5e040ae1bb1b802740ba8c0a1d62255c25a"}, {0xdd, 0xa4, "43ea4429f0d3b1a3adfee12b0efb2230498c115ae7c3bdb360bafa4da2e0249e912158008e9f8b7fa7211d1f693777def0023bb39c6ea6e4a48d2627920eba5f553826afb92b3c54990e328affb84b4acff05df127d4cb71d06295a780ad54ed0e3bfb0f74ea5d0ed4a049b00f86e9e67a9026a03fa37ea4c63ba71257ed774795c588265ad150fdb27d62f7120ac03a3252db6bac4c11efc4619a91a16e7e4e41a33d2e"}, {0xdd, 0xb8, "b345a1afcb415a8f534c74c67cce18753b9c313987ccb094b4edf5e9bd4762c8f014268fe575e1e81c4516b92c92f6fd29b9d593161dea293bb8bda56d6f5a58263d195a63bfa19c791835f9d7c7157e5b6ac6a6ffdecf6db70e935d55e5d2fab8ad9f629739a7c6cf3f4889404730fc8ee8400700dd38d0d62ac557292b588ac7e881907fc1d04b54cb1b0d074f0478662d79a194d6216630b4858adfb8802b4db9a93ad48cff76ccd520abaa3c8c99c1d01990c14dbbac"}, {0xdd, 0xdb, "47e8508e0098aa3d817ccbdbe9656c4c4731986a8d34a026fb9b355717e3f7619713cff12e182b0bbb005643142c076d5d97b8f901ea7ebe2ea174a1e9c292ba80f1e06851c6b742c08b330213907e2a292bdf197b201dbe968e382b8cb29a2d9c96962ac0f990bf42340d0b1070b396accd5ab2c52df1ce4efbeaadf6e806b0d4b06d7d1c1cd6cea24383c09a82e5053bff8e389d224f182286565f484a2e1f0aad2fea4a3d6a10634dfb68de98d08e6143555072d696c2d237156272a1ee83cbd0f720f85327622e23bcb262b8d0785e68315c149d3e02a3838d"}, {0xdd, 0x16, "039da4d1237e160277fa2e82d5853d17e8b6fa968779"}, {0xdd, 0x39, "0e6c953f0f8cbab71a4a9c7ded2f47c0b2449fbd6fecf5d4c6472eac0e426052a48a245df07a7a87c54cd6d023ea3455bd4565d3ad3607e633"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x23}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x40c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000010) (async) 09:48:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x101}, 0x14}}, 0x0) 09:48:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 09:48:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x3b, 0x0, 0x8800}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1053.441980][ T3563] usb 6-1: USB disconnect, device number 39 [ 1053.576883][T18626] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:25 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="1457acee9bb4aaa83cb4492181c3ed74da380f77a88cf05bc6efb8050e608b8ab0ca8f315ce327c560d01b6cb9d0d966fc3e4378666899d37d53f5e8868ba0851119b93bb0940b92730b63d5159054c123a4ccfcef8fee198c0823e9f00b457f39ca3cf5183513c4986b37c7d68b9febe6999582c7a4808ea5786e56f3", 0x7d) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async, rerun: 32) open(&(0x7f0000000040)='./file0\x00', 0x500, 0xa0) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) write$fb(r5, &(0x7f0000000280)="9a1e878dfa5472000b1b2ec5e564ad032f61100a3e72f7bcaa9f58b5182bcac82ccc37e99be817e06682a8002466574629a393acf06c764a4e9c2d3753f43a6a493b0ce102c545ea4fe13ed42bffef246593e59d06a7761413a65bf218c040a8ff90aea0a6c689af88f31d4131f03f2ac01e7c02f651a1f32cbad534da71024b524972ad5c2649f74d7f91ccba7d28f498f897a449f25721d6d5040adafa6479ddecc6cec50e0cd88e1ef103abe932e153de0a52f9bf2202540f5c7f57f469a7e9e783771da7933e60f40e06497d37a7e6d6474438e5d9718266f6285da4ac073815", 0xe2) (async, rerun: 64) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) (async, rerun: 64) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) 09:48:25 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000140)=""/4096) 09:48:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005700)={0x0, 0x0, &(0x7f00000056c0)={&(0x7f0000000500)=@newchain={0xec4, 0x64, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0xe8c, 0x2, [@TCA_BASIC_ACT={0x4f0, 0x3, [@m_connmark={0x7c, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x11, 0x6, "6d937f9f3185261a97832d3eb2"}, {0xc}, {0xc}}}, @m_skbmod={0x6c, 0x0, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}]}, {0x31, 0x6, "22bac744e62fab152a1675f998e3f3b3257777c607add62689eb5ff0c0294b4aedde4aa3fc964b0c917d991b6a"}, {0xc}, {0xc}}}, @m_vlan={0xa4, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}]}, {0x59, 0x6, "b56512f67646e3234dc8cd86403b4be3fb55c5e7fa53faeef3297fbf69a096be25341ca73f8cde1fb706426a97d058d2de6d8625979a42d673391ea0d3ca60e55c6abd9e082620b87167c3bd43fe7059a912717078"}, {0xc}, {0xc}}}, @m_xt={0x360, 0x0, 0x0, 0x0, {{0x7}, {0x25c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xfd, 0x6, {0x0, 'nat\x00', 0x0, 0x0, "5d586448cde5643828ab2bec50690765b03b1ca24918112e5b0c9edc15182b2c8d6e59d2b9ef9669a159f4bed44f8c987ee6caf39cd5a21199f09be5ec6970f1fae585835d232c0e6e009d7ef59e41619ddc311718f2d119ff3818eb721033d296cfacb05176daafbcbd6daebc77770304c99fc51b48898c4d03d4410449c7f2a1914b220b488b35b490b847e5d1cde7a7d8406d7963fbc591630f211c973a5efb775eb9aa733f0920837fecbd78ce58ca84cb7fad47f7189c4b15f76bec9cd29ed28d9728a4e2a4a0c60ac0c3084049abcf87"}}, @TCA_IPT_TARG={0x61, 0x6, {0x0, 'security\x00', 0x0, 0x0, "1f3860ad747c489a857c5f66606663f7b9e37ee005dbf471f617682ee9999513d38a8da4bedc2841bed052c9642a7521c33d9c56a54453"}}, @TCA_IPT_TARG={0xbd, 0x6, {0x0, 'nat\x00', 0x0, 0x0, "d04a80f64340c8e2e01ec40fb6e4c9d3a83d40d2395da681197f07d3a06dae2a6560fa99eaf27b4e4b6532da3bf415e9c5929f6a1c0f2d2cd6ef9367950efddd683344723476ad227d54828b99709705ff8d282fd10c9ce8c220a7d82833111706c30b828dcac62b3d0fe63d0e4f33f008c54749e9cabae6ad5a898bc1db36cf0b5cd48da0e9bb68a073d428240e2f96c1f6f4"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xdd, 0x6, "eb2f30ebc7c552c62254f54e6357a7cde90cbab5142f1f713ed83378d461a404431b688d811ed45f7ca0c2de75359e836887e06b9484b6c429ff4d4e38258a178635cb2672050280d0775463dd19bd28d198bcfd4f2bee4b8a1dde1e4c9440f4b6bfb0602ed36fbc16b4c17a60bf61e43fa3175c4e08ae0c58a5bd97db31f8d2f6f84bc432c2961e689eb46d978a7611b832dea4cdc528ad0a42ef1abff40368cf9657c9ae138e6a6cf6cce01a0a7f3a8aa2d52f39c9c2a782d42c9099d30db895752aef1af18d684421dc5148daeb804a08fb97614821e2a5"}, {0xc}, {0xc}}}]}, @TCA_BASIC_ACT={0x998, 0x3, [@m_gact={0x994, 0x0, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x94d, 0x6, "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"}, {0xc}, {0xc}}}]}]}}]}, 0xec4}}, 0x0) 09:48:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x4, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000520001"], 0x1c}}, 0x0) 09:48:26 executing program 4: keyctl$instantiate_iov(0x15, 0x0, 0x0, 0x0, 0x0) [ 1053.902948][ T3563] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1053.993370][T18649] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1054.076481][T18651] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1054.142305][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1054.262797][ T3563] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1054.272445][ T3563] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.291911][ T3563] usb 6-1: config 0 descriptor?? [ 1054.339208][ T3563] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1054.535488][T18655] UDC core: couldn't find an available UDC or it's busy: -16 [ 1054.543276][T18655] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 09:48:26 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect$uac1(0x3, 0xad, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001ecfe6d696864f504a5dad97cbb000000406b1d010140000102030109029b0003011f20090904000000010100000a240106009d02010209240304ff010202200904010000010200000904010101010200000724017f890110102402020000060001f2b7c909e6fd11092402010044012a13072401010400000905010908003fda01072501800500020904020000010200000904020101010200000c2402013f045d563ca69faf090582"], &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x2, 0x1f, 0xfa, 0xff, 0x3}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000400)={0x14, &(0x7f0000000340)={0x20, 0x33, 0x53, {0x53, 0xb, "76774290408aac196f1b50926eff92723d3b9bf3dc6ba8b7f3c3e38a3ec388613f2264d4851a099dce73bc9ab9ef33e4776edcc0e6fad0289b675bee532d537136e744559b0c9f9c0a163e7c137948eea4"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'/10]}, &(0x7f0000000740)={0x44, &(0x7f00000007c0)=ANY=[@ANYBLOB="4080b042fa0e8800000067b8eac581a53da6353516f2864d7f1161b87d8dad0918e757b813eee7972cd030070d62088d019d7ec10f4ce5b49f656c88b0928debacbb68aed16b4d598a520e983fdbdee881245baded920d5dcffd71ed49d6c6e49fb08969d9d89ea72a9e29d08c00000000000000006687ffc96a7c34df4d6b092d91f5e06a51444f12f58fdb42bbf3dd44525c3dc2319e4ec6367fd2e52edcfd8ea7f7a27b6dcf557a5bc3ff0b1bd747aa3b860d66248b9205ada637c092ace7e0cd9960"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000600)={0x20, 0x81, 0x1, "b5"}, &(0x7f0000000640)={0x20, 0x82, 0x3, "07dc39"}, &(0x7f0000000680)={0x20, 0x83, 0x2, 'FF'}, &(0x7f00000006c0)={0x20, 0x84, 0x1, "b5"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "9fe705"}}) (async) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1e7d, 0x3264, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0xc6, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0x91a}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x9, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x75, 0x66}}]}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x310, 0x1, 0x0, 0x9, 0x20, 0x8}, 0x25, &(0x7f0000000cc0)={0x5, 0xf, 0x25, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x32, 0x81, 0xff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x10, 0x5, 0x7f, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x7a, 0x5c, 0x3f, 0x3f}]}, 0x3, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x2409}}, {0x69, &(0x7f0000000d40)=@string={0x69, 0x3, "485ca925a29f21e60982c2398df589e0d99df28e11d34a49cb44b7c122cc8ab0b5cb71d9f756dddad3e4d899f3ec37b605cf197ca25113770e7970e8b80f92739bbf09d041b3fd4079d2e43c68237de5cfd9f380727197683fa967d999a50c60b28da9b4901306"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x82c}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x24, &(0x7f0000000440)={0x20, 0x31, 0x89, {0x89, 0x9, "bd5296435f6729093ddd4adaba8ae23b9e85c84c2ad96201ae41d8ad2dff4325ad4a65235c4c2b34125d612147185add811942491d2cda3b6d538aa3c4a0732e4286b81cf6acf3b129a344ef44bbe3a02a58d9b76f9111c7369c446e8f026f24e6def3bcb87dbf6f059e6eb835c6051950ff5200c6a387763ea52b0664fadd93e01a9c997ae618"}}, &(0x7f00000008c0)={0x0, 0x3, 0x68, @string={0x68, 0x3, "d46395bbbdfe4a2936f94c2bc68548e1451abdd47e95dbd226a7f099452e20e51f1d7f86c957640c49c11e8ec03f6563e33367f16ccb5913c30d4d58a8bd0d8121b968375eeb665ef70d1902bc022270ef5c62b4d8558023bf458138921da69d5392e2b1f635"}}, &(0x7f0000000940)={0x0, 0x22, 0xe, {[@local=@item_012={0x2, 0x2, 0x0, '.5'}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "bb27c9d3"}, @global=@item_4={0x3, 0x1, 0xb, "42cd001f"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xb1, 0x1, {0x22, 0xd23}}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000a00)={0x0, 0x5, 0x60, "8aa643e69cede98853072a09312924c1cf7164d75e5bc51c77fdcf415254237c08415bdccb3efb5a44f9146c00efb8faadc3926d42e79947a34598565e97928d46545eab24f7b4ddc5a5f570e02fbce04c23ca2b6fc78268b338c9ed633fd862"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000b00)={0x20, 0x1, 0x87, "71804f9e915c9ee0cba0226711a662d0c5cca476e990feff5b48d5de4c685bed7dc47b783effc27bb6c10db21227fc92e5f26074ad8c655b30f6130b55f23ab9393b940b576411b6f480eae87ef4401aaf324a02487d7b763832a5b42945018092607405f34b09147eedb53a823236b8afa06128f71f4d937ac0dc102a6a385dc9db6744b698f8"}, &(0x7f0000000bc0)={0x20, 0x3, 0x1, 0x3e}}) 09:48:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x560, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fff, 0x41}}}}, [@NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2b, 0x8000, 0x2, 0x2000, 0x0, 0x8, 0x3, 0x8]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x800, 0x81, 0x3, 0x88d, 0x100, 0x80, 0xfa51]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x1b, 0x60, 0x36, 0x16, 0xc, 0x4, 0x6, 0x9]}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0xa}, {0x1, 0x7}, {0x2, 0x7}, {0x1, 0x5}, {0x2}, {0x3, 0x2}, {0x2, 0x1}, {0x6, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x2f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x9, 0x2, 0x8, 0x4, 0x2, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x8000, 0x0, 0x2, 0x501c, 0x48, 0x6]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0x3f, 0xb9, 0x8, 0x5, 0x1400, 0xff]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x62, 0x48, 0xb, 0x24, 0x1, 0x9, 0xc, 0x18, 0x0, 0x4, 0x30, 0x18, 0x36, 0x6, 0x0, 0x36, 0x0, 0x1b, 0x0, 0x5, 0x16, 0x6c, 0x18, 0x16, 0x26]}]}, @NL80211_BAND_2GHZ={0xe8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x5, 0x0, 0x3ff, 0x4, 0xf42, 0x8000, 0x9]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x9, 0x16, 0xc, 0x4, 0x12, 0x4, 0x18, 0xb, 0x36, 0x2, 0x4, 0x4, 0xc, 0x1b, 0x6c, 0x6c]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x12, 0x6, 0x6, 0x4, 0xb, 0x5, 0xe, 0xc, 0x44, 0x12, 0x30, 0xc, 0x6c, 0x60, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6ce, 0x2, 0x7, 0x6, 0xff5, 0x4, 0x101]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x1ff, 0x2, 0x6, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1}, {0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x6}, {0x7, 0xa}, {0x7, 0xa}, {0x5, 0x8}, {0x5, 0x9}, {0x5, 0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x7, 0x6}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0x2}, {0x4}, {0x7}, {0x5, 0x1}, {0x4, 0x3}, {0x6, 0x3}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x5}, {0x2, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x5, 0x9}, {0x2, 0x4}, {0x1, 0x4}, {0x5, 0x9}, {0x0, 0x9}, {0x5, 0x3}, {0x5, 0x6}, {0x5, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x8}, {0x5, 0x2}, {0x6, 0x9}, {0x2, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x6}, {0x3, 0x2}, {0x4}, {0x0, 0x7}, {0x6, 0x8}, {0x7, 0x8}, {0x7, 0x8}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x2}, {0x6, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x3}, {0x2}, {0x4, 0x5}, {0x5, 0xa}, {0x5, 0x1}, {0x7, 0x7}, {0x6, 0x8}, {0x2}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x3}, {0x3}, {0x1, 0x8}, {0x7, 0x5}, {0x7, 0x5}, {0x2, 0x1}, {0x3, 0x4}, {0x2, 0x1}, {0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x7, 0x5}, {0x3, 0x8}, {0x6}, {0x2}, {0x1, 0x4}, {0x5, 0x7}, {0x2, 0x7}, {0x2, 0x1}, {0x2, 0x7}, {0x7, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x8}, {0x2, 0xa}, {0x6, 0x3}, {0x7, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x3}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x9}, {0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x5, 0x4}, {0x2, 0x5}, {0x6, 0x6}, {0x4, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x5, 0x8}, {0x2, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x5}, {0x2, 0x4}, {0x4, 0x7}, {0x4, 0xa}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x18, 0x3, 0x16, 0x0, 0x30, 0x9, 0x9, 0x12, 0x1, 0x1, 0x6, 0xb, 0x35, 0x24, 0x5, 0x9, 0x60, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x36, 0x6, 0x9, 0xb, 0x30, 0x30, 0x30, 0x4, 0x24, 0x3b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x2, 0xb, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc88, 0x3ff, 0xfffa, 0xc9, 0x8000, 0x35, 0x4, 0x400]}}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x3}, {0x4, 0x5}, {}, {0x6}, {0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x2, 0x6}, {0x2, 0x7}, {}, {0x5, 0x6}, {0x7, 0x4}, {0x5, 0x5}, {}, {0x4, 0xa}, {0x2, 0x3}, {0x7, 0xa}, {0x7, 0xa}, {}, {0x2, 0x3}, {0x4}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0x7, 0x1}, {0x7}, {0x3, 0x9}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0x5}, {0x6, 0x3}, {0x5, 0x3}, {0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x4, 0x4}, {0x5, 0x5}, {0x5, 0x3}, {}, {0x1}, {0x0, 0x9}, {0x5, 0x8}, {0x6, 0x9}, {0x2, 0x7}, {0x5, 0x7}, {0x7, 0x8}, {}, {0x4, 0x8}, {0x4, 0x7}, {0x4, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x2, 0x8}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x1, 0x8}, {0x7, 0x7}, {0x5, 0x5}, {0x7, 0x6}, {0x3, 0x1}, {0x7, 0x5}, {0x1, 0x7}, {0x5, 0x3}, {0x4, 0xa}, {0x2, 0x2}, {0x3, 0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x1, 0x2}, {0x3, 0x7}, {}, {0x6, 0x6}, {0x5}, {0x4, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x5}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x0, 0x2, 0xe1, 0x800, 0x4, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x0, 0x6, 0x1ff, 0x8000, 0x9]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5b03, 0xa7, 0x100, 0x3f, 0x1, 0x2, 0x5, 0x81]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x1b, 0x15, 0x1, 0x30, 0x2, 0x0, 0x9, 0x5, 0x48, 0x12, 0x0, 0x9, 0x24, 0x48]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2fe, 0x9, 0x0, 0x5, 0x1a5, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x30, 0x1b, 0x30, 0x6, 0x9, 0x7b, 0x1, 0x30, 0x60, 0x1, 0x60, 0x48, 0x24, 0x73, 0x9, 0xb, 0x24, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xfff, 0xffff, 0x5, 0x4, 0xe856, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x44, 0x12, 0xb, 0xb, 0x3, 0x18, 0x18, 0x6, 0x30, 0xb, 0xb, 0x2, 0x48, 0xc, 0xb, 0x58, 0x4, 0x1b, 0x12, 0x3, 0x60, 0x4, 0x6c, 0x1, 0x2, 0x0, 0x1b, 0x6, 0x6]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x60, 0x24]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x0, 0x7f, 0x6, 0x5, 0x7ff, 0x6]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x3}, {0x1, 0x5}, {0x6, 0x5}, {0x1, 0xa}, {0x6, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x2, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x7, 0x4}, {0x5}, {0x7, 0x1}, {0x7, 0x1}, {0x7, 0xa}, {0x0, 0x19}, {0x3, 0x5}, {0x5, 0x6}, {0x6}, {0x3, 0x9}, {0x0, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7ff, 0xdaaf, 0x6, 0x7f, 0xa03c, 0x401, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x1}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x8}, {0x5, 0x9}, {0x3, 0x8}, {0x5, 0x8}, {0x4, 0x6}, {0x3, 0x4}, {0x4, 0x2}, {0x7, 0x6}, {0x1, 0x4}, {0x5, 0x5}, {0x6, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xd1ed, 0x8, 0x400, 0x7ff, 0x8, 0xf7df, 0x4]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x3}, {0x6, 0x6}, {0x7, 0x1}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x6}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0x5}, {0x3, 0x4}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x3, 0x8}, {0x5, 0x2}, {0x6, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x1}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xead6beb32fe617f8, 0x36, 0xc, 0x48, 0xb, 0xb, 0x48, 0x4, 0x60, 0x1]}]}]}]}, 0x560}, 0x1, 0x0, 0x0, 0x4001}, 0x24000080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:26 executing program 2: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000001c0)={0x8}, 0x0, 0x0) 09:48:26 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) recvmmsg(r1, &(0x7f0000000480)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, &(0x7f0000000440)=""/32, 0x20}, 0x8}], 0x1, 0x2020, &(0x7f00000004c0)) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x4, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x64}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000200)=[r1, r0, r2, r0, r3, r4], 0x6) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x420000, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000080)={0x0, 0xc137}) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f00000001c0)={0x8, 0x6, &(0x7f00000000c0)=[0x80, 0xd6, 0x5, 0x800, 0x2, 0x3ff], &(0x7f0000000100)=[0x8001, 0x5, 0xd2, 0x81, 0x2, 0x9], &(0x7f0000000140)=[0x81, 0x1000, 0x1ff, 0x2, 0x8], &(0x7f0000000180)=[0x400, 0x8]}) 09:48:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x3b, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005700)={0x0, 0x0, &(0x7f00000056c0)={&(0x7f0000000500)=@newchain={0x1ec4, 0x64, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x10, 0x6}, {0xffff}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x1e8c, 0x2, [@TCA_BASIC_ACT={0x4f4, 0x3, [@m_connmark={0x7c, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x11, 0x6, "6d937f9f3185261a97832d3eb2"}, {0xc}, {0xc}}}, @m_skbmod={0x6c, 0x0, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}]}, {0x31, 0x6, "22bac744e62fab152a1675f998e3f3b3257777c607add62689eb5ff0c0294b4aedde4aa3fc964b0c917d991b6a"}, {0xc}, {0xc}}}, @m_vlan={0xa4, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}]}, {0x59, 0x6, "b56512f67646e3234dc8cd86403b4be3fb55c5e7fa53faeef3297fbf69a096be25341ca73f8cde1fb706426a97d058d2de6d8625979a42d673391ea0d3ca60e55c6abd9e082620b87167c3bd43fe7059a912717078"}, {0xc}, {0xc}}}, @m_xt={0x364, 0x0, 0x0, 0x0, {{0x7}, {0x25c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xfd, 0x6, {0x0, 'nat\x00', 0x0, 0x0, "5d586448cde5643828ab2bec50690765b03b1ca24918112e5b0c9edc15182b2c8d6e59d2b9ef9669a159f4bed44f8c987ee6caf39cd5a21199f09be5ec6970f1fae585835d232c0e6e009d7ef59e41619ddc311718f2d119ff3818eb721033d296cfacb05176daafbcbd6daebc77770304c99fc51b48898c4d03d4410449c7f2a1914b220b488b35b490b847e5d1cde7a7d8406d7963fbc591630f211c973a5efb775eb9aa733f0920837fecbd78ce58ca84cb7fad47f7189c4b15f76bec9cd29ed28d9728a4e2a4a0c60ac0c3084049abcf87"}}, @TCA_IPT_TARG={0x61, 0x6, {0x0, 'security\x00', 0x0, 0x0, "1f3860ad747c489a857c5f66606663f7b9e37ee005dbf471f617682ee9999513d38a8da4bedc2841bed052c9642a7521c33d9c56a54453"}}, @TCA_IPT_TARG={0xbd, 0x6, {0x0, 'nat\x00', 0x0, 0x0, "d04a80f64340c8e2e01ec40fb6e4c9d3a83d40d2395da681197f07d3a06dae2a6560fa99eaf27b4e4b6532da3bf415e9c5929f6a1c0f2d2cd6ef9367950efddd683344723476ad227d54828b99709705ff8d282fd10c9ce8c220a7d82833111706c30b828dcac62b3d0fe63d0e4f33f008c54749e9cabae6ad5a898bc1db36cf0b5cd48da0e9bb68a073d428240e2f96c1f6f4"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xe1, 0x6, "eb2f30ebc7c552c62254f54e6357a7cde90cbab5142f1f713ed83378d461a404431b688d811ed45f7ca0c2de75359e836887e06b9484b6c429ff4d4e38258a178635cb2672050280d0775463dd19bd28d198bcfd4f2bee4b8a1dde1e4c9440f4b6bfb0602ed36fbc16b4c17a60bf61e43fa3175c4e08ae0c58a5bd97db31f8d2f6f84bc432c2961e689eb46d978a7611b832dea4cdc528ad0a42ef1abff40368cf9657c9ae138e6a6cf6cce01a0a7f3a8aa2d52f39c9c2a782d42c9099d30db895752aef1af18d684421dc5148daeb804a08fb97614821e2a559bd8d5c"}, {0xc}, {0xc}}}]}, @TCA_BASIC_ACT={0x1994, 0x3, [@m_gact={0x10b4, 0xe, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x4, 0x8}}]}, {0x1001, 0x6, "e3c8e2a769976f43c101db00300782381ef56fc3da0d6cdcb3aa53b68c3cf0d445dca866b370764eb994ec25236a1f6ef01a65f46cfaf780d4bda7a48548c4f2ad82db3a518d1606fdc7c5bd27ceeb291fd9ad40aa7c1a8d8e1f12d8069a7ac8b812acdc157c13100f42c978f088959d11e3670e9ba7f01b40d1d07926dfce7d327ae58e7a0c8382868e90c6df7e089ea1ac0dca93a8fe918aae50a78d06c3e14138d1e53714f90840d39be631d40a64b005a27d45c9f989ffdfaf66bd0aeb5dd9bcaaa03598850af3fdd62fd20c551eff2cd92234a8260537e84a9dbf4a3575fef0e7cf7a3cd4564c0f2221127da83d6ca51f1008d3f2c07d417a9d3568d2eb56e97a45217cabf3250c041b9bf8e313f7fa2531af17a4c7e87e99b73129da783069baa286702bd47a6817ea40034ea8072380752bdc1e8090a8afac1a26d3ef0547e41407fa656377a09ec1ae05834e9482b21504133598db29585f913587819e4ac9c83138e55fae6a715bb3f11ac5d0b3aa0e25375eb969cccf259a81107dbe931aeb58f9ff5a4058bda8a5138dc3303cfa670899472aa06b8e2b9ff1981f415fc9c01ef5fa0ebd26a59bee65b51146d464823f6076e0482d034845ffda91f831ff61b3f968568550e18005a37b6f4e3c1c51be9f82dcf2815c8744d93870af2befea577f69abf13f76e181b45c3d5b1c62a9016029b2a4cfe94e5f8d22f42ad6bbc99854fa9ff8109ce1844f26260875003d6baecfe6eadfaa73ed5170308185aa17938b503ec44d1859d420f2ff398ddff5f60b44e592be61d76aacd736cac801661c613c81dce149d78b4fbe0b091c96f103e46bb0ed327c35c182596717772a1bac7356f699b6298867136da5760d0da3d59d1499090121fd98a3c560a2781a5e7e9b86184e56f1f290baef0097248787e54f7ad317e7fd42f069063a450b774bf41ea044f26629b5f98b1ab7f9ee9f743c3882882ed0ffac35692d6d24f3b07afe5270852311a5f4d0da9deb755f3f9b09a314a82855c9085fd421adea34cb965d4122086a83473c054d78d91dbdf683925511f35a41e704e844969d752c0299befb6869863fb51a2269f2d3f9cc54019291defa7ea77759eb6fadffe3b31535d6f1b9c3e3c00f7d7f4270705d5ba8dfbfb99087260eead7a40996f0f0205c5932cb6190f5b5e0735513e944dbead90a3a0f22bac2567e7e405e3b14f58361b76eaed791bdf24e182da59550613ca8da32503b3f75336e5bb1418c9e0f31b0941400728f0120ec6201e64ccd8323ee453b9d1b16c0fd020c1963aaf4487c388f814ab2f173b6a9ab4774b89bbdf8207b5f2ab67b6e4ac5baeb800cb801c3b6d0ad229830f39f2cb29d4f2ffe21ce01d6b25d0cda52f2374075e0585c7f8f4b979408fd5501e5fd6f1bec9751eae59bd32fa46cc374f8aee72d9e6db938e77d15788c64ce1a00dcd5699e56dc71daae41f935dcb1978988fa1afcfbea04f92d07fafbe8634b60287cfd67dffc3bff04d3d559cdab453f485356b7b31f9c4c45ff5f286582c79df06b8c0046f10c53c95eba5b7e055fdf033f017707141b97b3715e34ae1aca5f3702ce66854489f5c1cd663e94c17167653b699ed517d60c533b66838e008c8d8d427ba341c52bee26a79f58e6054e62f8560ed91d169585890ba7771ef8f809d48d5bd76fb311de6e3c73edfba023f0eb6b2ea0dbcf12e713cceeb620503298d22cce592682c60f678c6dc1bba132149dc45663afd1773b2d807138755a3144e5c7fb65e1f081061731e60edb153cff28eed92227dd5c613090f1cfe95e299daea772475566a8d75bba4dfa15929f19ac123f960c7ad02255ad946abaffc23c7d58d5b7e8704a439437ab0ea410b8156887501e14ca3006956215f862372f8d7c4ea1cf91d0dd92cfd855701cc0c4aea1d9b0229dbc1d0fec885923c5054515fa26a9f44a01e0709845023c2f2dc241b923727b6568f89f2a97be1f01778280e4e57ed90e32727feb13f5f60ab50e7765314c129432e68848587201e8dcba2ed54d6af81ef9006f8fc31aca32e14f768815ec97ec64367396dcea4a7fb89272091810c3f13d0cbbc2461d2af69584a0f3846e5af735b476a37b8ce051bcc21e769faba23033f56581681e8d4f36573350ff2ba55a296cb996987c99004fcbe6aa6f6291bde5d57cdc90baa84b58a9ef589a287f00572a5fa708dce62b0932cbcc49616e952d49d2f8070aa0450df2f97df3392d14670096db293fa964a5f6b6848474e870feafccdac50782bbd630dd74a9ec0e88c9b75aa74865ba3f36c0a1840b7706ff0f97cc50e6bd35d45c8ece101423a4df4efb0e789241eaa07a8eeabeb78a5177a167fc7300f08bcb46b7cbd43b9c31f9aa7fb87f4b3b5b79d252ffe2f1319303a185b0e602b4f10748bbbd6dd7c4720c3990b4e0eef8c9e4fd418779567b71db7659f840fd1a7f0cf01ff8ad72b7e6dbc8495ff728c9ac2a832311e26f28af202324da1e43d372e59f1fba758578c8b9c6b87e7029df3c8547402cc1acd79a596b08daf5098677392340b751d90f3e61cfcce949ca46dbf87df07b1c26f34e02c76791eb15ca98875d1ed09022ac11400c6976536a3f80fa7651d7c178591a1d956e17c7c2371abfa1a41ea45da69cc6cc5fe05dcc95f1e1e573df85e7f1427531a11315f5437b4ddf506cb3c3a18380d031ec7ae451783597990c26e6cc0b142a92904523a1e5fb588ff7720fd69f1ba8a8fd5f89f852c3fad33319750a2e01d63d4f91d4bb581b3d80f4d89314ce4f21b07138402579f64d5db6e316cb0f74edaa28fae32a28f6a73efaabebd1e1d9d316848fff1c1cf68f7004dd2b4cc5184e473573ed1fd46139fa88422f81bce206ab6c339145bc4e9fcdf507e07e96c1b93548428bf3121ed4bec841ae43c3ff8fdf9eb7e054052fcb9549d0619d017b6e8b8e3066f53c717d1de4008b81eb84b63d0b0c77f51b544a7c956f3bc4dd453571ebde71f78fb752aaa2d7ec1db3448a4f04b0445b376a8a874f8e07ef63819c493b701774e0498ad4cc79ad66f2999f90491cf1db6e847faa1cb6153236b1c9a32af385859685279016006013e17315c06db984cd058af10e147be7f8469dcb7582c2660bb329f3d848dd058493f7b931e597f68ffa8fdbde05ff4f9914dde7ed0158f576f9d5851b6eca06bbaa5d6ffb22bb3bcdcaa28492fdb2353d498240d08985808ae863ae5a453f795d46709806c680ae4898a6b439dd7a73c2845d67b7926fe7824c050a5d3acccc528bd0526e16363b54d80f5f5b381fbd1f1e3a59881f9bd15f61f54fc343bc874878c9c5ce82b7f91220c0948e0053293ba10ea8915c4fe0e9dbba7404f11ae8037da3feb4e214beae7cd7f77e6c4eaf87761f4c64450e36bb945baa42d8289e4551334e859306b7f36d5d3906f1f26dfb68b901307b5fe78a63cca3503a3e622772431b40f69433057f0dd7ff528e597b3176e22c8830f19f8ca62f10b3722284be13fdabd24f5857ed999dd35e2fcf47f9c499cd46dada71dcd9df4892c8a1d31ae50fd368e6a96eab906e9242549712cfd4f00040465c20c923327b040d88d559f22b3d2f137dd34ee336e273bb4aa75e1dade7989a3c0763d627a811708f4212a60ed9efd29460799963c0415197dbc6787a7a68f961634b804e5a0624f19ef8f250de171eb8ee56f06653a06f084d61c710fa416fd6ce745aba1dd02fd4e51da8ba15c4ed949d387b88690cd1997ec537d946f76e08d0cc5096c0c01a91738706feeb1c25633beb60f1f3123ac69fc0bfbeddb5f9fcf464ea7b1e067c7358801ef70d3df35402dfad4838bf76033f6ca7b5061e678bc3bdd2b779d63fac0dc0bcc6e6dccc8b2909172d7f9eba6185055a5c381be9c338a1776e694c0b96c1e19955e2e938b649f65c84fcfea7fbd884e4883ac7ed6b3ff3d2218492a2687886e5955ebac51462abbb3246f7ec05ce722467ae00961e31fc41bc7fbf7940de9f184e937f8e2a37963fb42ca76109a320f9940f31e5498e36feb5d18b480c423935739d35a3c72b06d0124b0c3c613a2139c2d96398a9a051044bac931acc4fbdf9cdd67befb86e752893979744f15943845f4d84ac70e0a242d8c235d924244f17a5ef7c32c3e1df2baccedf7d39b0ade18f1e87ee85c4313a2435af99823e69858d4194af0c1cb4f9797b7130b7156728b0535c1edd30bd53b23a53a77981e36a5c971bdc16079ab45024c785c6232d0d200bf513871f85b35906a83d00b3b954dfef3fd3dd3196da7d5f5bba07ff7ae3cad041d0c2191599acbf3a61ce6d1b9f247ecefbf2eb4dcad17313eb1e9aef68121d8eac64a008dacbe5b81970c3e270cf39fd58ed0cca99151aaf8ec03aa338e5956d5a000611768746f54935248830cdfcf5da54f41ea490f726225bdc172936b4e492c3904f384c17599411bb2d4d77f2ece16bf78488e6bf67dec22b6c6be16571b7f71c449cd0a507268604ff515d4f20190de97a05021a14cdb5ea9cca920ee8dd950f612d85b2f3d11c32a2fdbfa63d3fdcdbb5988ec4a4b8e6e3057980ceb16b7d80766e1649aa4515d4bd223e7440f0bb15ab45bcbf0bec263fb9bcb0530624ade2583075113e59f84e2a2bf83d31584e728077a76c416edcc172783295e93bc8411c11f984dccf13871e72f008c496d3a2c75ed26c353ea13b15d0a642e659beb0bd0544a8b3c0f9de56b64eeeea19d56eb8365a6aa01a9f761e3fa8eb23c1918e83380262264550a2d3f81bcfce24a4f662957386eef021b908116a95e9601a47c74029239a8e9be1c1ac88f079f8f46e4b817f44035e6384df94fb77880b1367394007a638a7bd6243bbfe60f49bee8e5bf9c9780711caa7fe93618e3569a743e72fd68d622110ee201067c7b1b0099cdf737992ef540b3d6b65d7233fe6e02de0014421df7007a4ddd350fcbe69d9f2a80a06ad8e9c9f59591d70c221b0d15d578408f2982f1075565fac2d85c9058c0e04ff558e7809a62fb94a7f2bb61d80ada4ac5606c4ad454700b9c744f5587c3a958c6ab493e47bb0cec54c26a1c691f57a982514afc084a57168c11ffc6159650e290c2e7ae326ec77c2440271395b21123d02a7a1cd59cbfe2ee7bf00f3276900985d1c2d45cb859ec95ca0913eb9900e55ade7bd5e3c592c8f3890dc4b671299b43d0fb8288b49d4ca169cde99fd491767375d732245f4afcef9d07617dd004e5ab635f9e2609a29516cbbf4a1ff04e340bec13c3553d7cb8f5669895ec6e87826fcb0bdfd271856c44b5a744059d42c8ad2260010398ae257c404aade64b5c7c0ac00a29c7310be39c1b4b5851e8f78b00ed415a19fabb76d90db2e994b635a9e1cbf4d1aad3fe86d940b1bd866ba94b7f226aaaaaca3ef6087bf0792d2183b69510eeca8b3bfc8ce6a32c276ceeb50df37b0ca68a29dee43063ce1b672d6b139a4123aef794156c56ee5ccdfba8ada1f686527c80e52e4b4f39d50e4b9d2c87e7f71846240d1fd93182387410f396385742d2fb5633d75a68df274330518627a8bec88f8730dff6f75924f8c096c564167fd08977f4198c3b430724c5134a3820852fdea40849d9bf2ba62059b1603b080fc859bb559b6f91f905feb049577692fafe2f63d64416078b783d12506119bc18b4b9ebfd4a0473e444fe38cdb53708e318a85efce865adfd0171118a5bc6df854bd04df2e0f1f2e5da343e01858f1b71f9ebc9f320c46a3f98372817b3ae7003dd03c3a"}, {0xc}, {0xc}}}, @m_ipt={0x8dc, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x8b1, 0x6, "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"}, {0xc}, {0xc}}}]}]}}]}, 0x1ec4}, 0x1, 0x0, 0x0, 0x40801}, 0x0) [ 1054.590216][ T3563] usb 6-1: USB disconnect, device number 40 [ 1054.702490][T18665] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:26 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x1000000, 0x800}, 0x20) 09:48:26 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0x420e, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400000010005a72aca3d1dec5faf970966e5100", @ANYRES32=0x0, @ANYBLOB="0280e6ff0802000008001300", @ANYRES32=r0, @ANYBLOB="0800280033b90000080025000000000005001100040000000800250002000000040014000500270005000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x4080) listen(0xffffffffffffffff, 0x3) [ 1054.806902][T18671] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1054.815416][T18671] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 09:48:26 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) recvmmsg(r1, &(0x7f0000000480)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, &(0x7f0000000440)=""/32, 0x20}, 0x8}], 0x1, 0x2020, &(0x7f00000004c0)) (async) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x4, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x64}}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000200)=[r1, r0, r2, r0, r3, r4], 0x6) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x420000, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000080)={0x0, 0xc137}) (async) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f00000001c0)={0x8, 0x6, &(0x7f00000000c0)=[0x80, 0xd6, 0x5, 0x800, 0x2, 0x3ff], &(0x7f0000000100)=[0x8001, 0x5, 0xd2, 0x81, 0x2, 0x9], &(0x7f0000000140)=[0x81, 0x1000, 0x1ff, 0x2, 0x8], &(0x7f0000000180)=[0x400, 0x8]}) 09:48:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x560, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fff, 0x41}}}}, [@NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2b, 0x8000, 0x2, 0x2000, 0x0, 0x8, 0x3, 0x8]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x800, 0x81, 0x3, 0x88d, 0x100, 0x80, 0xfa51]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x1b, 0x60, 0x36, 0x16, 0xc, 0x4, 0x6, 0x9]}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0xa}, {0x1, 0x7}, {0x2, 0x7}, {0x1, 0x5}, {0x2}, {0x3, 0x2}, {0x2, 0x1}, {0x6, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x2f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x9, 0x2, 0x8, 0x4, 0x2, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x8000, 0x0, 0x2, 0x501c, 0x48, 0x6]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0x3f, 0xb9, 0x8, 0x5, 0x1400, 0xff]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x62, 0x48, 0xb, 0x24, 0x1, 0x9, 0xc, 0x18, 0x0, 0x4, 0x30, 0x18, 0x36, 0x6, 0x0, 0x36, 0x0, 0x1b, 0x0, 0x5, 0x16, 0x6c, 0x18, 0x16, 0x26]}]}, @NL80211_BAND_2GHZ={0xe8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x5, 0x0, 0x3ff, 0x4, 0xf42, 0x8000, 0x9]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x9, 0x16, 0xc, 0x4, 0x12, 0x4, 0x18, 0xb, 0x36, 0x2, 0x4, 0x4, 0xc, 0x1b, 0x6c, 0x6c]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x12, 0x6, 0x6, 0x4, 0xb, 0x5, 0xe, 0xc, 0x44, 0x12, 0x30, 0xc, 0x6c, 0x60, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6ce, 0x2, 0x7, 0x6, 0xff5, 0x4, 0x101]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x1ff, 0x2, 0x6, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1}, {0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x6}, {0x7, 0xa}, {0x7, 0xa}, {0x5, 0x8}, {0x5, 0x9}, {0x5, 0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x7, 0x6}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0x2}, {0x4}, {0x7}, {0x5, 0x1}, {0x4, 0x3}, {0x6, 0x3}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x5}, {0x2, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x5, 0x9}, {0x2, 0x4}, {0x1, 0x4}, {0x5, 0x9}, {0x0, 0x9}, {0x5, 0x3}, {0x5, 0x6}, {0x5, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x8}, {0x5, 0x2}, {0x6, 0x9}, {0x2, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x6}, {0x3, 0x2}, {0x4}, {0x0, 0x7}, {0x6, 0x8}, {0x7, 0x8}, {0x7, 0x8}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x2}, {0x6, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x3}, {0x2}, {0x4, 0x5}, {0x5, 0xa}, {0x5, 0x1}, {0x7, 0x7}, {0x6, 0x8}, {0x2}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x3}, {0x3}, {0x1, 0x8}, {0x7, 0x5}, {0x7, 0x5}, {0x2, 0x1}, {0x3, 0x4}, {0x2, 0x1}, {0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x7, 0x5}, {0x3, 0x8}, {0x6}, {0x2}, {0x1, 0x4}, {0x5, 0x7}, {0x2, 0x7}, {0x2, 0x1}, {0x2, 0x7}, {0x7, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x8}, {0x2, 0xa}, {0x6, 0x3}, {0x7, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x3}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x9}, {0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x5, 0x4}, {0x2, 0x5}, {0x6, 0x6}, {0x4, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x5, 0x8}, {0x2, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x5}, {0x2, 0x4}, {0x4, 0x7}, {0x4, 0xa}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x18, 0x3, 0x16, 0x0, 0x30, 0x9, 0x9, 0x12, 0x1, 0x1, 0x6, 0xb, 0x35, 0x24, 0x5, 0x9, 0x60, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x36, 0x6, 0x9, 0xb, 0x30, 0x30, 0x30, 0x4, 0x24, 0x3b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x2, 0xb, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc88, 0x3ff, 0xfffa, 0xc9, 0x8000, 0x35, 0x4, 0x400]}}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x3}, {0x4, 0x5}, {}, {0x6}, {0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x2, 0x6}, {0x2, 0x7}, {}, {0x5, 0x6}, {0x7, 0x4}, {0x5, 0x5}, {}, {0x4, 0xa}, {0x2, 0x3}, {0x7, 0xa}, {0x7, 0xa}, {}, {0x2, 0x3}, {0x4}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0x7, 0x1}, {0x7}, {0x3, 0x9}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0x5}, {0x6, 0x3}, {0x5, 0x3}, {0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x4, 0x4}, {0x5, 0x5}, {0x5, 0x3}, {}, {0x1}, {0x0, 0x9}, {0x5, 0x8}, {0x6, 0x9}, {0x2, 0x7}, {0x5, 0x7}, {0x7, 0x8}, {}, {0x4, 0x8}, {0x4, 0x7}, {0x4, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x2, 0x8}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x1, 0x8}, {0x7, 0x7}, {0x5, 0x5}, {0x7, 0x6}, {0x3, 0x1}, {0x7, 0x5}, {0x1, 0x7}, {0x5, 0x3}, {0x4, 0xa}, {0x2, 0x2}, {0x3, 0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x1, 0x2}, {0x3, 0x7}, {}, {0x6, 0x6}, {0x5}, {0x4, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x5}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x0, 0x2, 0xe1, 0x800, 0x4, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x0, 0x6, 0x1ff, 0x8000, 0x9]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5b03, 0xa7, 0x100, 0x3f, 0x1, 0x2, 0x5, 0x81]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x1b, 0x15, 0x1, 0x30, 0x2, 0x0, 0x9, 0x5, 0x48, 0x12, 0x0, 0x9, 0x24, 0x48]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2fe, 0x9, 0x0, 0x5, 0x1a5, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x30, 0x1b, 0x30, 0x6, 0x9, 0x7b, 0x1, 0x30, 0x60, 0x1, 0x60, 0x48, 0x24, 0x73, 0x9, 0xb, 0x24, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xfff, 0xffff, 0x5, 0x4, 0xe856, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x44, 0x12, 0xb, 0xb, 0x3, 0x18, 0x18, 0x6, 0x30, 0xb, 0xb, 0x2, 0x48, 0xc, 0xb, 0x58, 0x4, 0x1b, 0x12, 0x3, 0x60, 0x4, 0x6c, 0x1, 0x2, 0x0, 0x1b, 0x6, 0x6]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x60, 0x24]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x0, 0x7f, 0x6, 0x5, 0x7ff, 0x6]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x3}, {0x1, 0x5}, {0x6, 0x5}, {0x1, 0xa}, {0x6, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x2, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x7, 0x4}, {0x5}, {0x7, 0x1}, {0x7, 0x1}, {0x7, 0xa}, {0x0, 0x19}, {0x3, 0x5}, {0x5, 0x6}, {0x6}, {0x3, 0x9}, {0x0, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7ff, 0xdaaf, 0x6, 0x7f, 0xa03c, 0x401, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x1}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x8}, {0x5, 0x9}, {0x3, 0x8}, {0x5, 0x8}, {0x4, 0x6}, {0x3, 0x4}, {0x4, 0x2}, {0x7, 0x6}, {0x1, 0x4}, {0x5, 0x5}, {0x6, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xd1ed, 0x8, 0x400, 0x7ff, 0x8, 0xf7df, 0x4]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x3}, {0x6, 0x6}, {0x7, 0x1}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x6}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0x5}, {0x3, 0x4}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x3, 0x8}, {0x5, 0x2}, {0x6, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x1}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xead6beb32fe617f8, 0x36, 0xc, 0x48, 0xb, 0xb, 0x48, 0x4, 0x60, 0x1]}]}]}]}, 0x560}, 0x1, 0x0, 0x0, 0x4001}, 0x24000080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x560, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fff, 0x41}}}}, [@NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2b, 0x8000, 0x2, 0x2000, 0x0, 0x8, 0x3, 0x8]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x800, 0x81, 0x3, 0x88d, 0x100, 0x80, 0xfa51]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x1b, 0x60, 0x36, 0x16, 0xc, 0x4, 0x6, 0x9]}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0xa}, {0x1, 0x7}, {0x2, 0x7}, {0x1, 0x5}, {0x2}, {0x3, 0x2}, {0x2, 0x1}, {0x6, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x2f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x9, 0x2, 0x8, 0x4, 0x2, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x8000, 0x0, 0x2, 0x501c, 0x48, 0x6]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0x3f, 0xb9, 0x8, 0x5, 0x1400, 0xff]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x62, 0x48, 0xb, 0x24, 0x1, 0x9, 0xc, 0x18, 0x0, 0x4, 0x30, 0x18, 0x36, 0x6, 0x0, 0x36, 0x0, 0x1b, 0x0, 0x5, 0x16, 0x6c, 0x18, 0x16, 0x26]}]}, @NL80211_BAND_2GHZ={0xe8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x5, 0x0, 0x3ff, 0x4, 0xf42, 0x8000, 0x9]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x9, 0x16, 0xc, 0x4, 0x12, 0x4, 0x18, 0xb, 0x36, 0x2, 0x4, 0x4, 0xc, 0x1b, 0x6c, 0x6c]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x12, 0x6, 0x6, 0x4, 0xb, 0x5, 0xe, 0xc, 0x44, 0x12, 0x30, 0xc, 0x6c, 0x60, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6ce, 0x2, 0x7, 0x6, 0xff5, 0x4, 0x101]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x1ff, 0x2, 0x6, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1}, {0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x6}, {0x7, 0xa}, {0x7, 0xa}, {0x5, 0x8}, {0x5, 0x9}, {0x5, 0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x7, 0x6}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0x2}, {0x4}, {0x7}, {0x5, 0x1}, {0x4, 0x3}, {0x6, 0x3}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x5}, {0x2, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x5, 0x9}, {0x2, 0x4}, {0x1, 0x4}, {0x5, 0x9}, {0x0, 0x9}, {0x5, 0x3}, {0x5, 0x6}, {0x5, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x8}, {0x5, 0x2}, {0x6, 0x9}, {0x2, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x6}, {0x3, 0x2}, {0x4}, {0x0, 0x7}, {0x6, 0x8}, {0x7, 0x8}, {0x7, 0x8}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x2}, {0x6, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x3}, {0x2}, {0x4, 0x5}, {0x5, 0xa}, {0x5, 0x1}, {0x7, 0x7}, {0x6, 0x8}, {0x2}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x3}, {0x3}, {0x1, 0x8}, {0x7, 0x5}, {0x7, 0x5}, {0x2, 0x1}, {0x3, 0x4}, {0x2, 0x1}, {0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x7, 0x5}, {0x3, 0x8}, {0x6}, {0x2}, {0x1, 0x4}, {0x5, 0x7}, {0x2, 0x7}, {0x2, 0x1}, {0x2, 0x7}, {0x7, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x8}, {0x2, 0xa}, {0x6, 0x3}, {0x7, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x3}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x9}, {0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x5, 0x4}, {0x2, 0x5}, {0x6, 0x6}, {0x4, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x5, 0x8}, {0x2, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x5}, {0x2, 0x4}, {0x4, 0x7}, {0x4, 0xa}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x18, 0x3, 0x16, 0x0, 0x30, 0x9, 0x9, 0x12, 0x1, 0x1, 0x6, 0xb, 0x35, 0x24, 0x5, 0x9, 0x60, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x36, 0x6, 0x9, 0xb, 0x30, 0x30, 0x30, 0x4, 0x24, 0x3b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x2, 0xb, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc88, 0x3ff, 0xfffa, 0xc9, 0x8000, 0x35, 0x4, 0x400]}}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x3}, {0x4, 0x5}, {}, {0x6}, {0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x2, 0x6}, {0x2, 0x7}, {}, {0x5, 0x6}, {0x7, 0x4}, {0x5, 0x5}, {}, {0x4, 0xa}, {0x2, 0x3}, {0x7, 0xa}, {0x7, 0xa}, {}, {0x2, 0x3}, {0x4}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0x7, 0x1}, {0x7}, {0x3, 0x9}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0x5}, {0x6, 0x3}, {0x5, 0x3}, {0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x4, 0x4}, {0x5, 0x5}, {0x5, 0x3}, {}, {0x1}, {0x0, 0x9}, {0x5, 0x8}, {0x6, 0x9}, {0x2, 0x7}, {0x5, 0x7}, {0x7, 0x8}, {}, {0x4, 0x8}, {0x4, 0x7}, {0x4, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x2, 0x8}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x1, 0x8}, {0x7, 0x7}, {0x5, 0x5}, {0x7, 0x6}, {0x3, 0x1}, {0x7, 0x5}, {0x1, 0x7}, {0x5, 0x3}, {0x4, 0xa}, {0x2, 0x2}, {0x3, 0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x1, 0x2}, {0x3, 0x7}, {}, {0x6, 0x6}, {0x5}, {0x4, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x5}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x0, 0x2, 0xe1, 0x800, 0x4, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x0, 0x6, 0x1ff, 0x8000, 0x9]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5b03, 0xa7, 0x100, 0x3f, 0x1, 0x2, 0x5, 0x81]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x1b, 0x15, 0x1, 0x30, 0x2, 0x0, 0x9, 0x5, 0x48, 0x12, 0x0, 0x9, 0x24, 0x48]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2fe, 0x9, 0x0, 0x5, 0x1a5, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x30, 0x1b, 0x30, 0x6, 0x9, 0x7b, 0x1, 0x30, 0x60, 0x1, 0x60, 0x48, 0x24, 0x73, 0x9, 0xb, 0x24, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xfff, 0xffff, 0x5, 0x4, 0xe856, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x44, 0x12, 0xb, 0xb, 0x3, 0x18, 0x18, 0x6, 0x30, 0xb, 0xb, 0x2, 0x48, 0xc, 0xb, 0x58, 0x4, 0x1b, 0x12, 0x3, 0x60, 0x4, 0x6c, 0x1, 0x2, 0x0, 0x1b, 0x6, 0x6]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x60, 0x24]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x0, 0x7f, 0x6, 0x5, 0x7ff, 0x6]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x3}, {0x1, 0x5}, {0x6, 0x5}, {0x1, 0xa}, {0x6, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x2, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x7, 0x4}, {0x5}, {0x7, 0x1}, {0x7, 0x1}, {0x7, 0xa}, {0x0, 0x19}, {0x3, 0x5}, {0x5, 0x6}, {0x6}, {0x3, 0x9}, {0x0, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7ff, 0xdaaf, 0x6, 0x7f, 0xa03c, 0x401, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x1}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x8}, {0x5, 0x9}, {0x3, 0x8}, {0x5, 0x8}, {0x4, 0x6}, {0x3, 0x4}, {0x4, 0x2}, {0x7, 0x6}, {0x1, 0x4}, {0x5, 0x5}, {0x6, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xd1ed, 0x8, 0x400, 0x7ff, 0x8, 0xf7df, 0x4]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x3}, {0x6, 0x6}, {0x7, 0x1}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x6}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0x5}, {0x3, 0x4}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x3, 0x8}, {0x5, 0x2}, {0x6, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x1}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xead6beb32fe617f8, 0x36, 0xc, 0x48, 0xb, 0xb, 0x48, 0x4, 0x60, 0x1]}]}]}]}, 0x560}, 0x1, 0x0, 0x0, 0x4001}, 0x24000080) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) (async) 09:48:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x4c, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8982, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 1055.142524][ T3563] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1055.228249][T18684] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1055.274080][T18684] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1055.392292][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1055.512265][ T3563] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1055.521518][ T3563] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.533382][ T3563] usb 6-1: config 0 descriptor?? [ 1055.577471][ T3563] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1055.775288][T18692] UDC core: couldn't find an available UDC or it's busy: -16 [ 1055.783099][T18692] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 09:48:27 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x20, 0x21, 0x39, {0x39, 0x4, "1a25e815e562c5e845a7d8db76e76c218e876da8c4d0df204b1d89b2766a6c3a94897d80e74a09f7520c56e471f34a2ab768d6f9878b7c"}}, &(0x7f0000000080)={0x0, 0x3, 0x79, @string={0x79, 0x3, "5f57ce8060770eb44d856069466388383f39400728ca2ab3ef15b20eb18abbd6475be9d0839d8833705b6e6872f147edf21f377ef7b4c1ef489c6146c2039bc1ec71000c4a87cb9640349cfd82159d20f3193667cdf6558ae341d9f96876ea08c94f121c93fe9dd39dd5991466df5575ef2b92b8bf7bf2"}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x10, 0x73, 0xc2, "5dcb9cc5", "a70c96a4"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x8, 0x80, 0x40, 0x3, 0x9, 0x94d5}}}, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x20, 0x11, 0x53, "56c7c3ef1fc556b15b8051e21a943d9b897966a24e710293c4b7e0dfc58a59f9278922e78dffb32eba0e00c047f8c7e8992bb6e118c2187dc91e9f6466f09cd075841c0f1e649c01b95c2617831e8658d9a7ef"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x32}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2a}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1000, 0x4}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000440)={0x40, 0xb, 0x2, "9a79"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x536}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @local}, &(0x7f0000000540)={0x40, 0x19, 0x2, "ccbf"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0x21, 0x1}}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000880)={0x14, &(0x7f00000007c0)={0x20, 0x6, 0x1b, {0x1b, 0x9, "e39937054226fcb3293aed6f9a8347a8a1e44edfacbf3b022b"}}, &(0x7f0000000800)={0x0, 0x3, 0x52, @string={0x52, 0x3, "44bf46e46c2726a0b76f9237ee1a9b29b9bcb43949fb3c061056df85080d5dad96354e3a002b22f860f0f519317f1b92ce134a9f3035bda3b8b0327e43be2c0b39a605c9dec3603ab129434cb2e61c22"}}}, &(0x7f0000000b80)={0x44, &(0x7f00000008c0)={0x20, 0x9, 0xc3, "f62c91630bcbba04d02edff6b756559adb1f4604b7b138ee6bd395cac98cb3aac4156c3122e870cb9a4fcb073f8fb5069471fbe2cb4f029da1d7e8c82e37b0dc706e380c23038796105fc0bb23022bb161d73a3788d6ee177f93625ab98636aac02270eac8dccc0913f591a0138814b689702b498730969d1fb3eadccae332f9f352820ac643a379608b930714b0bed68f10a0df5187380f2630d5dfbc2f1cfcc9a025525015eb2c85fe8765bc29807c2e0631dfcb6200be4331836c53355a15bbc1a7"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xd9}, &(0x7f0000000a40)={0x20, 0x81, 0x3, "349d78"}, &(0x7f0000000a80)={0x20, 0x82, 0x3, "49caed"}, &(0x7f0000000ac0)={0x20, 0x83, 0x3, "7ca3cf"}, &(0x7f0000000b00)={0x20, 0x84, 0x3, "f08cfc"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "1eaee9"}}) 09:48:27 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0x420e, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400000010005a72aca3d1dec5faf970966e5100", @ANYRES32=0x0, @ANYBLOB="0280e6ff0802000008001300", @ANYRES32=r0, @ANYBLOB="0800280033b90000080025000000000005001100040000000800250002000000040014000500270005000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x4080) listen(0xffffffffffffffff, 0x3) 09:48:27 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000004c0)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)=@chain) 09:48:27 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) recvmmsg(r1, &(0x7f0000000480)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, &(0x7f0000000440)=""/32, 0x20}, 0x8}], 0x1, 0x2020, &(0x7f00000004c0)) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x4, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x64}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000200)=[r1, r0, r2, r0, r3, r4], 0x6) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x420000, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000080)={0x0, 0xc137}) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f00000001c0)={0x8, 0x6, &(0x7f00000000c0)=[0x80, 0xd6, 0x5, 0x800, 0x2, 0x3ff], &(0x7f0000000100)=[0x8001, 0x5, 0xd2, 0x81, 0x2, 0x9], &(0x7f0000000140)=[0x81, 0x1000, 0x1ff, 0x2, 0x8], &(0x7f0000000180)=[0x400, 0x8]}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x3) (async) recvmmsg(r1, &(0x7f0000000480)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, &(0x7f0000000440)=""/32, 0x20}, 0x8}], 0x1, 0x2020, &(0x7f00000004c0)) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x4, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x4c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x64}}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000200)=[r1, r0, r2, r0, r3, r4], 0x6) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x420000, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000080)={0x0, 0xc137}) (async) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f00000001c0)={0x8, 0x6, &(0x7f00000000c0)=[0x80, 0xd6, 0x5, 0x800, 0x2, 0x3ff], &(0x7f0000000100)=[0x8001, 0x5, 0xd2, 0x81, 0x2, 0x9], &(0x7f0000000140)=[0x81, 0x1000, 0x1ff, 0x2, 0x8], &(0x7f0000000180)=[0x400, 0x8]}) (async) 09:48:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x2, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x560, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fff, 0x41}}}}, [@NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2b, 0x8000, 0x2, 0x2000, 0x0, 0x8, 0x3, 0x8]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x800, 0x81, 0x3, 0x88d, 0x100, 0x80, 0xfa51]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x1b, 0x60, 0x36, 0x16, 0xc, 0x4, 0x6, 0x9]}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0xa}, {0x1, 0x7}, {0x2, 0x7}, {0x1, 0x5}, {0x2}, {0x3, 0x2}, {0x2, 0x1}, {0x6, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x2f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x9, 0x2, 0x8, 0x4, 0x2, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x8000, 0x0, 0x2, 0x501c, 0x48, 0x6]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0x3f, 0xb9, 0x8, 0x5, 0x1400, 0xff]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x62, 0x48, 0xb, 0x24, 0x1, 0x9, 0xc, 0x18, 0x0, 0x4, 0x30, 0x18, 0x36, 0x6, 0x0, 0x36, 0x0, 0x1b, 0x0, 0x5, 0x16, 0x6c, 0x18, 0x16, 0x26]}]}, @NL80211_BAND_2GHZ={0xe8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x5, 0x0, 0x3ff, 0x4, 0xf42, 0x8000, 0x9]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x9, 0x16, 0xc, 0x4, 0x12, 0x4, 0x18, 0xb, 0x36, 0x2, 0x4, 0x4, 0xc, 0x1b, 0x6c, 0x6c]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x12, 0x6, 0x6, 0x4, 0xb, 0x5, 0xe, 0xc, 0x44, 0x12, 0x30, 0xc, 0x6c, 0x60, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6ce, 0x2, 0x7, 0x6, 0xff5, 0x4, 0x101]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x1ff, 0x2, 0x6, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1}, {0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x6}, {0x7, 0xa}, {0x7, 0xa}, {0x5, 0x8}, {0x5, 0x9}, {0x5, 0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x7, 0x6}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0x2}, {0x4}, {0x7}, {0x5, 0x1}, {0x4, 0x3}, {0x6, 0x3}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x5}, {0x2, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x5, 0x9}, {0x2, 0x4}, {0x1, 0x4}, {0x5, 0x9}, {0x0, 0x9}, {0x5, 0x3}, {0x5, 0x6}, {0x5, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x8}, {0x5, 0x2}, {0x6, 0x9}, {0x2, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x6}, {0x3, 0x2}, {0x4}, {0x0, 0x7}, {0x6, 0x8}, {0x7, 0x8}, {0x7, 0x8}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x2}, {0x6, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x3}, {0x2}, {0x4, 0x5}, {0x5, 0xa}, {0x5, 0x1}, {0x7, 0x7}, {0x6, 0x8}, {0x2}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x3}, {0x3}, {0x1, 0x8}, {0x7, 0x5}, {0x7, 0x5}, {0x2, 0x1}, {0x3, 0x4}, {0x2, 0x1}, {0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x7, 0x5}, {0x3, 0x8}, {0x6}, {0x2}, {0x1, 0x4}, {0x5, 0x7}, {0x2, 0x7}, {0x2, 0x1}, {0x2, 0x7}, {0x7, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x8}, {0x2, 0xa}, {0x6, 0x3}, {0x7, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x3}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x9}, {0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x5, 0x4}, {0x2, 0x5}, {0x6, 0x6}, {0x4, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x5, 0x8}, {0x2, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x5}, {0x2, 0x4}, {0x4, 0x7}, {0x4, 0xa}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x18, 0x3, 0x16, 0x0, 0x30, 0x9, 0x9, 0x12, 0x1, 0x1, 0x6, 0xb, 0x35, 0x24, 0x5, 0x9, 0x60, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x36, 0x6, 0x9, 0xb, 0x30, 0x30, 0x30, 0x4, 0x24, 0x3b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x2, 0xb, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc88, 0x3ff, 0xfffa, 0xc9, 0x8000, 0x35, 0x4, 0x400]}}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x3}, {0x4, 0x5}, {}, {0x6}, {0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x2, 0x6}, {0x2, 0x7}, {}, {0x5, 0x6}, {0x7, 0x4}, {0x5, 0x5}, {}, {0x4, 0xa}, {0x2, 0x3}, {0x7, 0xa}, {0x7, 0xa}, {}, {0x2, 0x3}, {0x4}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0x7, 0x1}, {0x7}, {0x3, 0x9}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0x5}, {0x6, 0x3}, {0x5, 0x3}, {0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x4, 0x4}, {0x5, 0x5}, {0x5, 0x3}, {}, {0x1}, {0x0, 0x9}, {0x5, 0x8}, {0x6, 0x9}, {0x2, 0x7}, {0x5, 0x7}, {0x7, 0x8}, {}, {0x4, 0x8}, {0x4, 0x7}, {0x4, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x2, 0x8}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x1, 0x8}, {0x7, 0x7}, {0x5, 0x5}, {0x7, 0x6}, {0x3, 0x1}, {0x7, 0x5}, {0x1, 0x7}, {0x5, 0x3}, {0x4, 0xa}, {0x2, 0x2}, {0x3, 0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x1, 0x2}, {0x3, 0x7}, {}, {0x6, 0x6}, {0x5}, {0x4, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x5}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x0, 0x2, 0xe1, 0x800, 0x4, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x0, 0x6, 0x1ff, 0x8000, 0x9]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5b03, 0xa7, 0x100, 0x3f, 0x1, 0x2, 0x5, 0x81]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x1b, 0x15, 0x1, 0x30, 0x2, 0x0, 0x9, 0x5, 0x48, 0x12, 0x0, 0x9, 0x24, 0x48]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2fe, 0x9, 0x0, 0x5, 0x1a5, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x30, 0x1b, 0x30, 0x6, 0x9, 0x7b, 0x1, 0x30, 0x60, 0x1, 0x60, 0x48, 0x24, 0x73, 0x9, 0xb, 0x24, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xfff, 0xffff, 0x5, 0x4, 0xe856, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x44, 0x12, 0xb, 0xb, 0x3, 0x18, 0x18, 0x6, 0x30, 0xb, 0xb, 0x2, 0x48, 0xc, 0xb, 0x58, 0x4, 0x1b, 0x12, 0x3, 0x60, 0x4, 0x6c, 0x1, 0x2, 0x0, 0x1b, 0x6, 0x6]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x60, 0x24]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x0, 0x7f, 0x6, 0x5, 0x7ff, 0x6]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x3}, {0x1, 0x5}, {0x6, 0x5}, {0x1, 0xa}, {0x6, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x2, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x7, 0x4}, {0x5}, {0x7, 0x1}, {0x7, 0x1}, {0x7, 0xa}, {0x0, 0x19}, {0x3, 0x5}, {0x5, 0x6}, {0x6}, {0x3, 0x9}, {0x0, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7ff, 0xdaaf, 0x6, 0x7f, 0xa03c, 0x401, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x1}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x8}, {0x5, 0x9}, {0x3, 0x8}, {0x5, 0x8}, {0x4, 0x6}, {0x3, 0x4}, {0x4, 0x2}, {0x7, 0x6}, {0x1, 0x4}, {0x5, 0x5}, {0x6, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xd1ed, 0x8, 0x400, 0x7ff, 0x8, 0xf7df, 0x4]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x3}, {0x6, 0x6}, {0x7, 0x1}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x6}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0x5}, {0x3, 0x4}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x3, 0x8}, {0x5, 0x2}, {0x6, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x1}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xead6beb32fe617f8, 0x36, 0xc, 0x48, 0xb, 0xb, 0x48, 0x4, 0x60, 0x1]}]}]}]}, 0x560}, 0x1, 0x0, 0x0, 0x4001}, 0x24000080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x560, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fff, 0x41}}}}, [@NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2b, 0x8000, 0x2, 0x2000, 0x0, 0x8, 0x3, 0x8]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x800, 0x81, 0x3, 0x88d, 0x100, 0x80, 0xfa51]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x1b, 0x60, 0x36, 0x16, 0xc, 0x4, 0x6, 0x9]}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0xa}, {0x1, 0x7}, {0x2, 0x7}, {0x1, 0x5}, {0x2}, {0x3, 0x2}, {0x2, 0x1}, {0x6, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x2f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x9, 0x2, 0x8, 0x4, 0x2, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x8000, 0x0, 0x2, 0x501c, 0x48, 0x6]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0x3f, 0xb9, 0x8, 0x5, 0x1400, 0xff]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x62, 0x48, 0xb, 0x24, 0x1, 0x9, 0xc, 0x18, 0x0, 0x4, 0x30, 0x18, 0x36, 0x6, 0x0, 0x36, 0x0, 0x1b, 0x0, 0x5, 0x16, 0x6c, 0x18, 0x16, 0x26]}]}, @NL80211_BAND_2GHZ={0xe8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x5, 0x0, 0x3ff, 0x4, 0xf42, 0x8000, 0x9]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x9, 0x16, 0xc, 0x4, 0x12, 0x4, 0x18, 0xb, 0x36, 0x2, 0x4, 0x4, 0xc, 0x1b, 0x6c, 0x6c]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x12, 0x6, 0x6, 0x4, 0xb, 0x5, 0xe, 0xc, 0x44, 0x12, 0x30, 0xc, 0x6c, 0x60, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6ce, 0x2, 0x7, 0x6, 0xff5, 0x4, 0x101]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x1ff, 0x2, 0x6, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1}, {0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x6}, {0x7, 0xa}, {0x7, 0xa}, {0x5, 0x8}, {0x5, 0x9}, {0x5, 0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x7, 0x6}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0x2}, {0x4}, {0x7}, {0x5, 0x1}, {0x4, 0x3}, {0x6, 0x3}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x5}, {0x2, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x5, 0x9}, {0x2, 0x4}, {0x1, 0x4}, {0x5, 0x9}, {0x0, 0x9}, {0x5, 0x3}, {0x5, 0x6}, {0x5, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x8}, {0x5, 0x2}, {0x6, 0x9}, {0x2, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x6}, {0x3, 0x2}, {0x4}, {0x0, 0x7}, {0x6, 0x8}, {0x7, 0x8}, {0x7, 0x8}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x2}, {0x6, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x3}, {0x2}, {0x4, 0x5}, {0x5, 0xa}, {0x5, 0x1}, {0x7, 0x7}, {0x6, 0x8}, {0x2}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x3}, {0x3}, {0x1, 0x8}, {0x7, 0x5}, {0x7, 0x5}, {0x2, 0x1}, {0x3, 0x4}, {0x2, 0x1}, {0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x7, 0x5}, {0x3, 0x8}, {0x6}, {0x2}, {0x1, 0x4}, {0x5, 0x7}, {0x2, 0x7}, {0x2, 0x1}, {0x2, 0x7}, {0x7, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x8}, {0x2, 0xa}, {0x6, 0x3}, {0x7, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x3}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x9}, {0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x5, 0x4}, {0x2, 0x5}, {0x6, 0x6}, {0x4, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x5, 0x8}, {0x2, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x5}, {0x2, 0x4}, {0x4, 0x7}, {0x4, 0xa}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x18, 0x3, 0x16, 0x0, 0x30, 0x9, 0x9, 0x12, 0x1, 0x1, 0x6, 0xb, 0x35, 0x24, 0x5, 0x9, 0x60, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x36, 0x6, 0x9, 0xb, 0x30, 0x30, 0x30, 0x4, 0x24, 0x3b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x2, 0xb, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc88, 0x3ff, 0xfffa, 0xc9, 0x8000, 0x35, 0x4, 0x400]}}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x3}, {0x4, 0x5}, {}, {0x6}, {0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x2, 0x6}, {0x2, 0x7}, {}, {0x5, 0x6}, {0x7, 0x4}, {0x5, 0x5}, {}, {0x4, 0xa}, {0x2, 0x3}, {0x7, 0xa}, {0x7, 0xa}, {}, {0x2, 0x3}, {0x4}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0x7, 0x1}, {0x7}, {0x3, 0x9}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0x5}, {0x6, 0x3}, {0x5, 0x3}, {0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x4, 0x4}, {0x5, 0x5}, {0x5, 0x3}, {}, {0x1}, {0x0, 0x9}, {0x5, 0x8}, {0x6, 0x9}, {0x2, 0x7}, {0x5, 0x7}, {0x7, 0x8}, {}, {0x4, 0x8}, {0x4, 0x7}, {0x4, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x2, 0x8}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x1, 0x8}, {0x7, 0x7}, {0x5, 0x5}, {0x7, 0x6}, {0x3, 0x1}, {0x7, 0x5}, {0x1, 0x7}, {0x5, 0x3}, {0x4, 0xa}, {0x2, 0x2}, {0x3, 0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x1, 0x2}, {0x3, 0x7}, {}, {0x6, 0x6}, {0x5}, {0x4, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x5}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x0, 0x2, 0xe1, 0x800, 0x4, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x0, 0x6, 0x1ff, 0x8000, 0x9]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5b03, 0xa7, 0x100, 0x3f, 0x1, 0x2, 0x5, 0x81]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x1b, 0x15, 0x1, 0x30, 0x2, 0x0, 0x9, 0x5, 0x48, 0x12, 0x0, 0x9, 0x24, 0x48]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2fe, 0x9, 0x0, 0x5, 0x1a5, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x30, 0x1b, 0x30, 0x6, 0x9, 0x7b, 0x1, 0x30, 0x60, 0x1, 0x60, 0x48, 0x24, 0x73, 0x9, 0xb, 0x24, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xfff, 0xffff, 0x5, 0x4, 0xe856, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x44, 0x12, 0xb, 0xb, 0x3, 0x18, 0x18, 0x6, 0x30, 0xb, 0xb, 0x2, 0x48, 0xc, 0xb, 0x58, 0x4, 0x1b, 0x12, 0x3, 0x60, 0x4, 0x6c, 0x1, 0x2, 0x0, 0x1b, 0x6, 0x6]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x60, 0x24]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x0, 0x7f, 0x6, 0x5, 0x7ff, 0x6]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x3}, {0x1, 0x5}, {0x6, 0x5}, {0x1, 0xa}, {0x6, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x2, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x7, 0x4}, {0x5}, {0x7, 0x1}, {0x7, 0x1}, {0x7, 0xa}, {0x0, 0x19}, {0x3, 0x5}, {0x5, 0x6}, {0x6}, {0x3, 0x9}, {0x0, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7ff, 0xdaaf, 0x6, 0x7f, 0xa03c, 0x401, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x1}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x8}, {0x5, 0x9}, {0x3, 0x8}, {0x5, 0x8}, {0x4, 0x6}, {0x3, 0x4}, {0x4, 0x2}, {0x7, 0x6}, {0x1, 0x4}, {0x5, 0x5}, {0x6, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xd1ed, 0x8, 0x400, 0x7ff, 0x8, 0xf7df, 0x4]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x3}, {0x6, 0x6}, {0x7, 0x1}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x6}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0x5}, {0x3, 0x4}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x3, 0x8}, {0x5, 0x2}, {0x6, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x1}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xead6beb32fe617f8, 0x36, 0xc, 0x48, 0xb, 0xb, 0x48, 0x4, 0x60, 0x1]}]}]}]}, 0x560}, 0x1, 0x0, 0x0, 0x4001}, 0x24000080) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) (async) [ 1055.818439][ T9700] usb 6-1: USB disconnect, device number 41 [ 1055.954358][T18703] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:28 executing program 2: io_uring_setup(0x353c, &(0x7f0000000100)={0x0, 0x6aa0}) 09:48:28 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0x420e, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400000010005a72aca3d1dec5faf970966e5100", @ANYRES32=0x0, @ANYBLOB="0280e6ff0802000008001300", @ANYRES32=r0, @ANYBLOB="0800280033b90000080025000000000005001100040000000800250002000000040014000500270005000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x4080) listen(0xffffffffffffffff, 0x3) 09:48:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x5, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:28 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x140, 0x320, 0x556, 0x258, 0x80000000, 0x2, 0x0, 0x0, {0xfffffb6f, 0x5}, {0x1, 0x800, 0x1}, {0x40, 0x8001}, {0xfffffffd, 0x3}, 0x3, 0x10, 0x1, 0x800, 0x1, 0x4, 0x800, 0x3, 0x5, 0x3, 0x8000, 0x7, 0x3d, 0x4, 0x1, 0x8}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=[0x8, 0x0, 0x66, 0x5], &(0x7f0000000040)=[0x3ff, 0x7f, 0x1], &(0x7f0000000080)=[0x2a, 0xdb, 0x8000, 0x1, 0xe000], &(0x7f0000000100)=[0x2, 0x7, 0x7fff]}) 09:48:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x401, 0x54}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x40840) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="eb4e15ce67ea51440190200e70c6e426c06f6d9374fcfe6d79ef5806e027b4e86a745a1d0e7d78cfdf0cb452c02ec74e5a6ea3455aa4a7391d15084a87daf73b2c5181b0c5b5a4d00733aea111b677545479640dafd02af573343315dd69c0bb8bce5a4d42c00547a715b104da2d54b69de0831280f6f2d43d96f9f7b4c8d3837d0ed6f1", @ANYRES16=r1, @ANYBLOB="1f0000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="4400330030800000080211000000080211000001bdd65ff8077c00000000000000000000000001002d1a00"/68], 0x60}}, 0x0) 09:48:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xfffffffffffffcd0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000009010800000000000000000000000008000640000000013c00020006000340000400000600034000040000140001800800014ac200ffffffff080002006401010006000340000300000c00028005000100400000001e0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x240d0012}, 0x4) [ 1056.338221][T18729] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1056.402088][ T9700] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1056.643609][ T9700] usb 6-1: Using ep0 maxpacket: 32 [ 1056.802115][ T9700] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1056.811512][ T9700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.825527][ T9700] usb 6-1: config 0 descriptor?? [ 1056.868018][ T9700] gspca_main: sonixb-2.14.0 probing 0c45:60b0 09:48:31 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x20, 0x21, 0x39, {0x39, 0x4, "1a25e815e562c5e845a7d8db76e76c218e876da8c4d0df204b1d89b2766a6c3a94897d80e74a09f7520c56e471f34a2ab768d6f9878b7c"}}, &(0x7f0000000080)={0x0, 0x3, 0x79, @string={0x79, 0x3, "5f57ce8060770eb44d856069466388383f39400728ca2ab3ef15b20eb18abbd6475be9d0839d8833705b6e6872f147edf21f377ef7b4c1ef489c6146c2039bc1ec71000c4a87cb9640349cfd82159d20f3193667cdf6558ae341d9f96876ea08c94f121c93fe9dd39dd5991466df5575ef2b92b8bf7bf2"}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x10, 0x73, 0xc2, "5dcb9cc5", "a70c96a4"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x8, 0x80, 0x40, 0x3, 0x9, 0x94d5}}}, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x20, 0x11, 0x53, "56c7c3ef1fc556b15b8051e21a943d9b897966a24e710293c4b7e0dfc58a59f9278922e78dffb32eba0e00c047f8c7e8992bb6e118c2187dc91e9f6466f09cd075841c0f1e649c01b95c2617831e8658d9a7ef"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x32}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2a}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1000, 0x4}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000440)={0x40, 0xb, 0x2, "9a79"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x536}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @local}, &(0x7f0000000540)={0x40, 0x19, 0x2, "ccbf"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0x21, 0x1}}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000880)={0x14, &(0x7f00000007c0)={0x20, 0x6, 0x1b, {0x1b, 0x9, "e39937054226fcb3293aed6f9a8347a8a1e44edfacbf3b022b"}}, &(0x7f0000000800)={0x0, 0x3, 0x52, @string={0x52, 0x3, "44bf46e46c2726a0b76f9237ee1a9b29b9bcb43949fb3c061056df85080d5dad96354e3a002b22f860f0f519317f1b92ce134a9f3035bda3b8b0327e43be2c0b39a605c9dec3603ab129434cb2e61c22"}}}, &(0x7f0000000b80)={0x44, &(0x7f00000008c0)={0x20, 0x9, 0xc3, "f62c91630bcbba04d02edff6b756559adb1f4604b7b138ee6bd395cac98cb3aac4156c3122e870cb9a4fcb073f8fb5069471fbe2cb4f029da1d7e8c82e37b0dc706e380c23038796105fc0bb23022bb161d73a3788d6ee177f93625ab98636aac02270eac8dccc0913f591a0138814b689702b498730969d1fb3eadccae332f9f352820ac643a379608b930714b0bed68f10a0df5187380f2630d5dfbc2f1cfcc9a025525015eb2c85fe8765bc29807c2e0631dfcb6200be4331836c53355a15bbc1a7"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xd9}, &(0x7f0000000a40)={0x20, 0x81, 0x3, "349d78"}, &(0x7f0000000a80)={0x20, 0x82, 0x3, "49caed"}, &(0x7f0000000ac0)={0x20, 0x83, 0x3, "7ca3cf"}, &(0x7f0000000b00)={0x20, 0x84, 0x3, "f08cfc"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "1eaee9"}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x20, 0x21, 0x39, {0x39, 0x4, "1a25e815e562c5e845a7d8db76e76c218e876da8c4d0df204b1d89b2766a6c3a94897d80e74a09f7520c56e471f34a2ab768d6f9878b7c"}}, &(0x7f0000000080)={0x0, 0x3, 0x79, @string={0x79, 0x3, "5f57ce8060770eb44d856069466388383f39400728ca2ab3ef15b20eb18abbd6475be9d0839d8833705b6e6872f147edf21f377ef7b4c1ef489c6146c2039bc1ec71000c4a87cb9640349cfd82159d20f3193667cdf6558ae341d9f96876ea08c94f121c93fe9dd39dd5991466df5575ef2b92b8bf7bf2"}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x10, 0x73, 0xc2, "5dcb9cc5", "a70c96a4"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x8, 0x80, 0x40, 0x3, 0x9, 0x94d5}}}, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x20, 0x11, 0x53, "56c7c3ef1fc556b15b8051e21a943d9b897966a24e710293c4b7e0dfc58a59f9278922e78dffb32eba0e00c047f8c7e8992bb6e118c2187dc91e9f6466f09cd075841c0f1e649c01b95c2617831e8658d9a7ef"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x32}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2a}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1000, 0x4}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000440)={0x40, 0xb, 0x2, "9a79"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x536}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @local}, &(0x7f0000000540)={0x40, 0x19, 0x2, "ccbf"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0x21, 0x1}}) (async) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000880)={0x14, &(0x7f00000007c0)={0x20, 0x6, 0x1b, {0x1b, 0x9, "e39937054226fcb3293aed6f9a8347a8a1e44edfacbf3b022b"}}, &(0x7f0000000800)={0x0, 0x3, 0x52, @string={0x52, 0x3, "44bf46e46c2726a0b76f9237ee1a9b29b9bcb43949fb3c061056df85080d5dad96354e3a002b22f860f0f519317f1b92ce134a9f3035bda3b8b0327e43be2c0b39a605c9dec3603ab129434cb2e61c22"}}}, &(0x7f0000000b80)={0x44, &(0x7f00000008c0)={0x20, 0x9, 0xc3, "f62c91630bcbba04d02edff6b756559adb1f4604b7b138ee6bd395cac98cb3aac4156c3122e870cb9a4fcb073f8fb5069471fbe2cb4f029da1d7e8c82e37b0dc706e380c23038796105fc0bb23022bb161d73a3788d6ee177f93625ab98636aac02270eac8dccc0913f591a0138814b689702b498730969d1fb3eadccae332f9f352820ac643a379608b930714b0bed68f10a0df5187380f2630d5dfbc2f1cfcc9a025525015eb2c85fe8765bc29807c2e0631dfcb6200be4331836c53355a15bbc1a7"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xd9}, &(0x7f0000000a40)={0x20, 0x81, 0x3, "349d78"}, &(0x7f0000000a80)={0x20, 0x82, 0x3, "49caed"}, &(0x7f0000000ac0)={0x20, 0x83, 0x3, "7ca3cf"}, &(0x7f0000000b00)={0x20, 0x84, 0x3, "f08cfc"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "1eaee9"}}) (async) 09:48:31 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0x420e, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400000010005a72aca3d1dec5faf970966e5100", @ANYRES32=0x0, @ANYBLOB="0280e6ff0802000008001300", @ANYRES32=r0, @ANYBLOB="0800280033b90000080025000000000005001100040000000800250002000000040014000500270005000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x4080) listen(0xffffffffffffffff, 0x3) 09:48:31 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x140, 0x320, 0x556, 0x258, 0x80000000, 0x2, 0x0, 0x0, {0xfffffb6f, 0x5}, {0x1, 0x800, 0x1}, {0x40, 0x8001}, {0xfffffffd, 0x3}, 0x3, 0x10, 0x1, 0x800, 0x1, 0x4, 0x800, 0x3, 0x5, 0x3, 0x8000, 0x7, 0x3d, 0x4, 0x1, 0x8}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=[0x8, 0x0, 0x66, 0x5], &(0x7f0000000040)=[0x3ff, 0x7f, 0x1], &(0x7f0000000080)=[0x2a, 0xdb, 0x8000, 0x1, 0xe000], &(0x7f0000000100)=[0x2, 0x7, 0x7fff]}) 09:48:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x401, 0x54}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x40840) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="eb4e15ce67ea51440190200e70c6e426c06f6d9374fcfe6d79ef5806e027b4e86a745a1d0e7d78cfdf0cb452c02ec74e5a6ea3455aa4a7391d15084a87daf73b2c5181b0c5b5a4d00733aea111b677545479640dafd02af573343315dd69c0bb8bce5a4d42c00547a715b104da2d54b69de0831280f6f2d43d96f9f7b4c8d3837d0ed6f1", @ANYRES16=r1, @ANYBLOB="1f0000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="4400330030800000080211000000080211000001bdd65ff8077c00000000000000000000000001002d1a00"/68], 0x60}}, 0x0) 09:48:31 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x4180, 0x0) 09:48:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x6, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1058.961471][ T9700] usb 6-1: USB disconnect, device number 42 09:48:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8921, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 1059.070995][T18739] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:31 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0x420e, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400000010005a72aca3d1dec5faf970966e5100", @ANYRES32=0x0, @ANYBLOB="0280e6ff0802000008001300", @ANYRES32=r0, @ANYBLOB="0800280033b90000080025000000000005001100040000000800250002000000040014000500270005000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x4080) 09:48:31 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x140, 0x320, 0x556, 0x258, 0x80000000, 0x2, 0x0, 0x0, {0xfffffb6f, 0x5}, {0x1, 0x800, 0x1}, {0x40, 0x8001}, {0xfffffffd, 0x3}, 0x3, 0x10, 0x1, 0x800, 0x1, 0x4, 0x800, 0x3, 0x5, 0x3, 0x8000, 0x7, 0x3d, 0x4, 0x1, 0x8}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=[0x8, 0x0, 0x66, 0x5], &(0x7f0000000040)=[0x3ff, 0x7f, 0x1], &(0x7f0000000080)=[0x2a, 0xdb, 0x8000, 0x1, 0xe000], &(0x7f0000000100)=[0x2, 0x7, 0x7fff]}) 09:48:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x401, 0x54}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x40840) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="eb4e15ce67ea51440190200e70c6e426c06f6d9374fcfe6d79ef5806e027b4e86a745a1d0e7d78cfdf0cb452c02ec74e5a6ea3455aa4a7391d15084a87daf73b2c5181b0c5b5a4d00733aea111b677545479640dafd02af573343315dd69c0bb8bce5a4d42c00547a715b104da2d54b69de0831280f6f2d43d96f9f7b4c8d3837d0ed6f1", @ANYRES16=r1, @ANYBLOB="1f0000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="4400330030800000080211000000080211000001bdd65ff8077c00000000000000000000000001002d1a00"/68], 0x60}}, 0x0) 09:48:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x8, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x6c, 0x3f2, 0x0, 0x0, 0x0, "", ["", "", "", "", ""]}, 0x10}}, 0x0) [ 1059.472987][T18763] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1059.522098][ T9700] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1059.569368][T18767] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1059.801972][ T9700] usb 6-1: Using ep0 maxpacket: 32 [ 1059.932262][ T9700] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1059.941496][ T9700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.964208][ T9700] usb 6-1: config 0 descriptor?? [ 1060.011463][ T9700] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1060.780790][T18768] UDC core: couldn't find an available UDC or it's busy: -16 [ 1060.788494][T18768] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 09:48:32 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x20, 0x21, 0x39, {0x39, 0x4, "1a25e815e562c5e845a7d8db76e76c218e876da8c4d0df204b1d89b2766a6c3a94897d80e74a09f7520c56e471f34a2ab768d6f9878b7c"}}, &(0x7f0000000080)={0x0, 0x3, 0x79, @string={0x79, 0x3, "5f57ce8060770eb44d856069466388383f39400728ca2ab3ef15b20eb18abbd6475be9d0839d8833705b6e6872f147edf21f377ef7b4c1ef489c6146c2039bc1ec71000c4a87cb9640349cfd82159d20f3193667cdf6558ae341d9f96876ea08c94f121c93fe9dd39dd5991466df5575ef2b92b8bf7bf2"}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x10, 0x73, 0xc2, "5dcb9cc5", "a70c96a4"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x8, 0x80, 0x40, 0x3, 0x9, 0x94d5}}}, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x20, 0x11, 0x53, "56c7c3ef1fc556b15b8051e21a943d9b897966a24e710293c4b7e0dfc58a59f9278922e78dffb32eba0e00c047f8c7e8992bb6e118c2187dc91e9f6466f09cd075841c0f1e649c01b95c2617831e8658d9a7ef"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x32}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2a}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1000, 0x4}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000440)={0x40, 0xb, 0x2, "9a79"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x536}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @local}, &(0x7f0000000540)={0x40, 0x19, 0x2, "ccbf"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0x21, 0x1}}) (async) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000880)={0x14, &(0x7f00000007c0)={0x20, 0x6, 0x1b, {0x1b, 0x9, "e39937054226fcb3293aed6f9a8347a8a1e44edfacbf3b022b"}}, &(0x7f0000000800)={0x0, 0x3, 0x52, @string={0x52, 0x3, "44bf46e46c2726a0b76f9237ee1a9b29b9bcb43949fb3c061056df85080d5dad96354e3a002b22f860f0f519317f1b92ce134a9f3035bda3b8b0327e43be2c0b39a605c9dec3603ab129434cb2e61c22"}}}, &(0x7f0000000b80)={0x44, &(0x7f00000008c0)={0x20, 0x9, 0xc3, "f62c91630bcbba04d02edff6b756559adb1f4604b7b138ee6bd395cac98cb3aac4156c3122e870cb9a4fcb073f8fb5069471fbe2cb4f029da1d7e8c82e37b0dc706e380c23038796105fc0bb23022bb161d73a3788d6ee177f93625ab98636aac02270eac8dccc0913f591a0138814b689702b498730969d1fb3eadccae332f9f352820ac643a379608b930714b0bed68f10a0df5187380f2630d5dfbc2f1cfcc9a025525015eb2c85fe8765bc29807c2e0631dfcb6200be4331836c53355a15bbc1a7"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xd9}, &(0x7f0000000a40)={0x20, 0x81, 0x3, "349d78"}, &(0x7f0000000a80)={0x20, 0x82, 0x3, "49caed"}, &(0x7f0000000ac0)={0x20, 0x83, 0x3, "7ca3cf"}, &(0x7f0000000b00)={0x20, 0x84, 0x3, "f08cfc"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "1eaee9"}}) 09:48:32 executing program 0: init_module(&(0x7f0000000000)=':\x95+', 0x3, &(0x7f0000000040)='/dev/fb0\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 09:48:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9300}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x91}, 0x20000040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x2a0, r1, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0xc}}}}, [@NL80211_ATTR_FRAME={0x275, 0x33, @reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xfb}, @device_a, @device_b, @initial, {0xc, 0x7}}, 0x1548, 0x0, @random, @val, @val={0x2d, 0x1a, {0x10, 0x3, 0x5, 0x0, {0x10000, 0x7, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2}, 0x400, 0x1, 0x8}}, [{0xdd, 0x98, "756f50e717acda434d333b2cd28bbd35c224ec414117134d3cd6ca1968b626fc029df11966b10b7ada23a5563e450e389a9f77fa2d226047db9416253d5d4a2a2c3ffcad44c7be0f492fa4ab2a0ff0f7ba0cf6c338a8bee1de330b16936d826e7b0413cd9c85db9a4d9f5fc921846b95331690c926b7ddae619dd3a370b1879d0428b9388c2e00a8d1a61d3250e622211f7179adfb7270cd"}, {0xdd, 0x9b, "b876c727fbf7a29953a504c499f968174f5f58db4f65ccf98c285d37d7584d012296b058ecf53a3fba3ab047db0055d750c8712e2146c0de6a615dad37d80769bf5bef13f46b9469b286bb0fbecfce40ef3e5d6e1fd955784ba68c7f75ac93c137efb37aae9ca75639f5b1ab2a82beee9c8313926bcf782b99693d77d2f28e1d5a46d05cc706d7f6cc662c65281ca4c11b5d6946460a7264d54026"}, {0xdd, 0xfc, "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"}]}}]}, 0x2a0}}, 0x0) 09:48:32 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0x420e, r0) 09:48:32 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) write$binfmt_elf32(r0, 0x0, 0x33f) 09:48:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x9, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1060.821359][ T3563] usb 6-1: USB disconnect, device number 43 09:48:33 executing program 0: init_module(&(0x7f0000000000)=':\x95+', 0x3, &(0x7f0000000040)='/dev/fb0\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) init_module(&(0x7f0000000000)=':\x95+', 0x3, &(0x7f0000000040)='/dev/fb0\x00') (async) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (async) [ 1060.940219][T18778] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:33 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5460, 0x0) 09:48:33 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x420e, r0) 09:48:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9300}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x91}, 0x20000040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x2a0, r1, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0xc}}}}, [@NL80211_ATTR_FRAME={0x275, 0x33, @reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xfb}, @device_a, @device_b, @initial, {0xc, 0x7}}, 0x1548, 0x0, @random, @val, @val={0x2d, 0x1a, {0x10, 0x3, 0x5, 0x0, {0x10000, 0x7, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2}, 0x400, 0x1, 0x8}}, [{0xdd, 0x98, "756f50e717acda434d333b2cd28bbd35c224ec414117134d3cd6ca1968b626fc029df11966b10b7ada23a5563e450e389a9f77fa2d226047db9416253d5d4a2a2c3ffcad44c7be0f492fa4ab2a0ff0f7ba0cf6c338a8bee1de330b16936d826e7b0413cd9c85db9a4d9f5fc921846b95331690c926b7ddae619dd3a370b1879d0428b9388c2e00a8d1a61d3250e622211f7179adfb7270cd"}, {0xdd, 0x9b, "b876c727fbf7a29953a504c499f968174f5f58db4f65ccf98c285d37d7584d012296b058ecf53a3fba3ab047db0055d750c8712e2146c0de6a615dad37d80769bf5bef13f46b9469b286bb0fbecfce40ef3e5d6e1fd955784ba68c7f75ac93c137efb37aae9ca75639f5b1ab2a82beee9c8313926bcf782b99693d77d2f28e1d5a46d05cc706d7f6cc662c65281ca4c11b5d6946460a7264d54026"}, {0xdd, 0xfc, "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"}]}}]}, 0x2a0}}, 0x0) 09:48:33 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x88, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x8, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x6f, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x6, 0x24, 0x6, 0x0, 0x0, "01"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7f, 0x0, 0x9}, [@country_functional={0xa, 0x24, 0x7, 0x6, 0x8, [0x7, 0x0]}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x9, [0x4, 0x1000, 0x3, 0x3, 0x0, 0x30]}, @mdlm={0x15, 0x24, 0x12, 0x9145}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfe, 0x7f, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x8, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x8, 0x20}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x7, 0x0, 0x3, 0x10, 0x7}, 0x39, &(0x7f0000000100)={0x5, 0xf, 0x39, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x9, 0xf, 0x9, [0xff3ff0, 0x3f00, 0xc0, 0xff0000, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "c88e33ebd2eca29b24283bf77b728751"}]}, 0x1, [{0x0, 0x0}]}) 09:48:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0xa, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1061.372859][ T3563] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1061.396802][T18803] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1061.612091][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1061.652737][ T3557] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1061.732554][ T3563] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1061.742063][ T3563] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.753573][ T3563] usb 6-1: config 0 descriptor?? [ 1061.798699][ T3563] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1061.891863][ T3557] usb 3-1: Using ep0 maxpacket: 8 [ 1062.012393][ T3557] usb 3-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1062.025009][ T3557] usb 3-1: config 1 interface 0 altsetting 111 bulk endpoint 0x82 has invalid maxpacket 16 [ 1062.035596][ T3557] usb 3-1: config 1 interface 0 altsetting 111 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1062.046113][ T3557] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1062.292308][ T3557] usb 3-1: string descriptor 0 read error: -22 [ 1062.298862][ T3557] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1062.308259][ T3557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.343109][T18802] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1062.351089][T18802] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1062.582441][ T3557] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 1062.630618][ T3557] usb 3-1: USB disconnect, device number 82 09:48:36 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1e02000000000000000c050000000000000109022a0001000000000904000000c03aca00a39ac681"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:48:36 executing program 0: init_module(&(0x7f0000000000)=':\x95+', 0x3, &(0x7f0000000040)='/dev/fb0\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 09:48:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9300}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x91}, 0x20000040) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x2a0, r1, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0xc}}}}, [@NL80211_ATTR_FRAME={0x275, 0x33, @reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xfb}, @device_a, @device_b, @initial, {0xc, 0x7}}, 0x1548, 0x0, @random, @val, @val={0x2d, 0x1a, {0x10, 0x3, 0x5, 0x0, {0x10000, 0x7, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2}, 0x400, 0x1, 0x8}}, [{0xdd, 0x98, "756f50e717acda434d333b2cd28bbd35c224ec414117134d3cd6ca1968b626fc029df11966b10b7ada23a5563e450e389a9f77fa2d226047db9416253d5d4a2a2c3ffcad44c7be0f492fa4ab2a0ff0f7ba0cf6c338a8bee1de330b16936d826e7b0413cd9c85db9a4d9f5fc921846b95331690c926b7ddae619dd3a370b1879d0428b9388c2e00a8d1a61d3250e622211f7179adfb7270cd"}, {0xdd, 0x9b, "b876c727fbf7a29953a504c499f968174f5f58db4f65ccf98c285d37d7584d012296b058ecf53a3fba3ab047db0055d750c8712e2146c0de6a615dad37d80769bf5bef13f46b9469b286bb0fbecfce40ef3e5d6e1fd955784ba68c7f75ac93c137efb37aae9ca75639f5b1ab2a82beee9c8313926bcf782b99693d77d2f28e1d5a46d05cc706d7f6cc662c65281ca4c11b5d6946460a7264d54026"}, {0xdd, 0xfc, "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"}]}}]}, 0x2a0}}, 0x0) 09:48:36 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x420e, r0) 09:48:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0xb, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6}, 0x48) [ 1063.984192][ T3563] usb 6-1: USB disconnect, device number 44 09:48:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1064.090009][T18817] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x320, 0xf0, 0x0, 0x258, 0x67b102ab, 0x5, 0x10, 0x0, {0x8, 0x0, 0x1}, {0x3ff, 0x2, 0x1}, {0x8, 0x2, 0x1}, {0x3, 0x7, 0x1}, 0x2, 0x1, 0x80000000, 0x40, 0x0, 0x8, 0x8, 0x2, 0x101, 0x8, 0x6, 0x4, 0x2, 0x200, 0x1, 0x5}) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 09:48:36 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x420e, r0) 09:48:36 executing program 3: keyctl$instantiate_iov(0x17, 0x0, 0x0, 0x0, 0x0) 09:48:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x10, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:36 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x68, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x8, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x6f, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7f, 0x0, 0x9}, [@country_functional={0x12, 0x24, 0x7, 0x7, 0x9, [0x4, 0x1000, 0x3, 0x3, 0xfffe, 0x30]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfe, 0x7f, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x8, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x8, 0x20}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x7, 0x8, 0x3, 0x10, 0x7}, 0x39, &(0x7f0000000100)={0x5, 0xf, 0x39, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x9, 0xf, 0x9, [0xff3ff0, 0x3f00, 0xc0, 0xff0000, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "c88e33ebd2eca29b24283bf77b728751"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x409}}]}) [ 1064.495997][T18832] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1064.533500][ T3563] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1064.560967][T18832] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1064.722237][ T3563] usb 6-1: device descriptor read/64, error 18 [ 1064.792064][ T3557] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1064.992100][ T3563] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1065.032658][ T3557] usb 3-1: Using ep0 maxpacket: 8 [ 1065.152182][ T3557] usb 3-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1065.164173][ T3557] usb 3-1: config 1 interface 0 altsetting 111 bulk endpoint 0x82 has invalid maxpacket 16 [ 1065.174479][ T3557] usb 3-1: config 1 interface 0 altsetting 111 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1065.187378][ T3557] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1065.195030][ T3563] usb 6-1: device descriptor read/64, error 18 [ 1065.315431][ T3563] usb usb6-port1: attempt power cycle [ 1065.352332][ T3557] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1065.361594][ T3557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.370085][ T3557] usb 3-1: Product: syz [ 1065.374607][ T3557] usb 3-1: Manufacturer: syz [ 1065.379348][ T3557] usb 3-1: SerialNumber: syz [ 1065.413078][T18834] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1065.420323][T18834] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1065.732261][ T3557] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 1065.763109][ T3563] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1065.771385][ T3557] usb 3-1: USB disconnect, device number 83 [ 1065.932286][ T3563] usb 6-1: device descriptor read/8, error -61 [ 1066.202549][ T3563] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1066.382294][ T3563] usb 6-1: device descriptor read/8, error -61 [ 1066.502332][ T3563] usb usb6-port1: unable to enumerate USB device 09:48:39 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1e02000000000000000c050000000000000109022a0001000000000904000000c03aca00a39ac681"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1e02000000000000000c050000000000000109022a0001000000000904000000c03aca00a39ac681"], 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 09:48:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x320, 0xf0, 0x0, 0x258, 0x67b102ab, 0x5, 0x10, 0x0, {0x8, 0x0, 0x1}, {0x3ff, 0x2, 0x1}, {0x8, 0x2, 0x1}, {0x3, 0x7, 0x1}, 0x2, 0x1, 0x80000000, 0x40, 0x0, 0x8, 0x8, 0x2, 0x101, 0x8, 0x6, 0x4, 0x2, 0x200, 0x1, 0x5}) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x320, 0xf0, 0x0, 0x258, 0x67b102ab, 0x5, 0x10, 0x0, {0x8, 0x0, 0x1}, {0x3ff, 0x2, 0x1}, {0x8, 0x2, 0x1}, {0x3, 0x7, 0x1}, 0x2, 0x1, 0x80000000, 0x40, 0x0, 0x8, 0x8, 0x2, 0x101, 0x8, 0x6, 0x4, 0x2, 0x200, 0x1, 0x5}) (async) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (async) 09:48:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000000)={'batadv_slave_1\x00'}) 09:48:39 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) 09:48:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x11, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:39 executing program 2: syz_open_dev$sg(&(0x7f00000010c0), 0x0, 0x44040) 09:48:39 executing program 3: keyctl$KEYCTL_MOVE(0x17, 0x0, 0x0, 0x0, 0x10) 09:48:39 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "1c8d5e8853451b4c06dc12066d3530248aaab3b141ad29829b65fe14b6c595cf1ee5b4416781dee0d7896e8b822b50b123094a1dad5539cb9ab042eb470de3c9"}, 0x48, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, r1, 0x0) [ 1067.215147][T18841] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x320, 0xf0, 0x0, 0x258, 0x67b102ab, 0x5, 0x10, 0x0, {0x8, 0x0, 0x1}, {0x3ff, 0x2, 0x1}, {0x8, 0x2, 0x1}, {0x3, 0x7, 0x1}, 0x2, 0x1, 0x80000000, 0x40, 0x0, 0x8, 0x8, 0x2, 0x101, 0x8, 0x6, 0x4, 0x2, 0x200, 0x1, 0x5}) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 09:48:39 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) 09:48:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x117, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000140), 0x4) [ 1067.596903][ T3563] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1067.724706][T18867] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1067.792238][ T3563] usb 6-1: device descriptor read/64, error 18 [ 1067.929261][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1067.935942][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 1068.066717][ T3563] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1068.282066][ T3563] usb 6-1: device descriptor read/64, error 18 [ 1068.407312][ T3563] usb usb6-port1: attempt power cycle [ 1068.841998][ T3563] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1069.012142][ T3563] usb 6-1: device descriptor read/8, error -61 [ 1069.281894][ T3563] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1069.452201][ T3563] usb 6-1: device descriptor read/8, error -61 [ 1069.572247][ T3563] usb usb6-port1: unable to enumerate USB device 09:48:42 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1e02000000000000000c050000000000000109022a0001000000000904000000c03aca00a39ac681"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:48:42 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004680), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000046c0)={0x29}, 0x29) 09:48:42 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) 09:48:42 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 09:48:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x136, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:42 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(r1, &(0x7f0000000480)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000004c0)={0x3, 0xffffffffffffffe0, @status={[0x400, 0x7, 0x4, 0x6, 0x2, 0x8000]}, [0x9, 0x1000000000, 0x9, 0x1004000000000, 0x6, 0x2, 0x7fffffff, 0x4, 0x100, 0x4, 0xd58e, 0xebea, 0x200, 0xffffffffffffffff, 0x5, 0x1, 0x20, 0x6, 0x8000, 0x5, 0x1000, 0x0, 0x400, 0x1000, 0x1, 0x7, 0x6, 0xff, 0x7, 0x78, 0x1, 0x5, 0x9, 0x3, 0xfff, 0x3, 0xfffffffffffffc01, 0x8000000000000001, 0x6, 0x7fff, 0xffffffff, 0x9, 0x7f, 0x200, 0x6, 0x7, 0x1, 0xbec, 0x81, 0x3, 0x4, 0x0, 0x1, 0xfffffffffffffffa, 0x2, 0x7fffffff, 0x3, 0x4, 0x9, 0x8000, 0x8000000000000000, 0x4, 0x6ac, 0x1]}) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000040)=""/14, 0xe}, {&(0x7f0000000180)=""/237, 0xed}, {&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000000380)=""/99, 0x63}], 0x6, 0x6, 0x90) [ 1070.364443][T18870] binder: 18868:18870 ioctl c0306201 0 returned -14 [ 1070.379032][T18874] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:42 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x4) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)) 09:48:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3801, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:42 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0) 09:48:42 executing program 4: ftruncate(0xffffffffffffffff, 0x0) tkill(0x0, 0x13) ptrace(0x10, 0x0) ptrace(0x420e, 0x0) 09:48:42 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) openat$cgroup_ro(r1, &(0x7f0000000480)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000004c0)={0x3, 0xffffffffffffffe0, @status={[0x400, 0x7, 0x4, 0x6, 0x2, 0x8000]}, [0x9, 0x1000000000, 0x9, 0x1004000000000, 0x6, 0x2, 0x7fffffff, 0x4, 0x100, 0x4, 0xd58e, 0xebea, 0x200, 0xffffffffffffffff, 0x5, 0x1, 0x20, 0x6, 0x8000, 0x5, 0x1000, 0x0, 0x400, 0x1000, 0x1, 0x7, 0x6, 0xff, 0x7, 0x78, 0x1, 0x5, 0x9, 0x3, 0xfff, 0x3, 0xfffffffffffffc01, 0x8000000000000001, 0x6, 0x7fff, 0xffffffff, 0x9, 0x7f, 0x200, 0x6, 0x7, 0x1, 0xbec, 0x81, 0x3, 0x4, 0x0, 0x1, 0xfffffffffffffffa, 0x2, 0x7fffffff, 0x3, 0x4, 0x9, 0x8000, 0x8000000000000000, 0x4, 0x6ac, 0x1]}) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (async, rerun: 64) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000040)=""/14, 0xe}, {&(0x7f0000000180)=""/237, 0xed}, {&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000000380)=""/99, 0x63}], 0x6, 0x6, 0x90) (rerun: 64) 09:48:42 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x80}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e6278a1467ac85, 0x8, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9}, 0x8, 0x10, 0x0}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) [ 1070.731558][T18889] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1070.762958][ T3557] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1070.962362][ T3557] usb 6-1: device descriptor read/64, error 18 [ 1071.234325][ T3557] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1071.441968][ T3557] usb 6-1: device descriptor read/64, error 18 [ 1071.562381][ T3557] usb usb6-port1: attempt power cycle [ 1071.982048][ T3557] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1072.202368][ T3557] usb 6-1: device descriptor read/8, error -61 [ 1072.482152][ T3557] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1072.672127][ T3557] usb 6-1: device descriptor read/8, error -61 [ 1072.792437][ T3557] usb usb6-port1: unable to enumerate USB device 09:48:45 executing program 5: r0 = syz_usb_connect(0x0, 0x5, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xaf, 0xce, 0x8f, 0x20, 0x1199, 0x68aa, 0xc8da, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbd, 0x0, 0x0, 0xff, 0xff, 0xff, 0x0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "bc1ac7"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x3f, 0x0, 0x401, 0x7c}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xff, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0xfa, 0x3}, @acm={0x4, 0x24, 0x2, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}]}]}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x40, 0x4, 0xae, {0xae, 0x9, "1faa2463521490554c93b11d72710815e1fbc333312f73f1428054db788fc0429010370b9258d4123bdc634152957a8a83060350e1f3d107724bfa411c015e5ed182f1080430dcc4af5c6a27ec57226ece8c7751355f326187642ba2d1d705023cd1f77c41950c4671f97c6eab963b8098bb5b8c85f4ce9d5aca45d4456bf0881ad00da04ebe930535dede5077523143f10c222eaa358e9961cbb86e939387c972a4fcdc875cc094f23512c1"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}, &(0x7f0000000680)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x4, 0x8, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x3, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x7, 0xffff}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x2, 0x0, 0x8, "fdb80652", "b62dce6f"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0xf2, 0x94, 0xaf, 0xab, 0x23, 0x3}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000780)={0x0, 0x15, 0xe4, "559b9366f14f9636cd1728af5e52263acb7f5e34253be05d0d1fa1a917e0d879cfd8b384599268be8ed7d2763ec13534583d2cd366bda8a0174637132654972cfa9995a076dfcda11ec6dd12487a1d724009d665c33f7f4327f2ba6b138b06a8b4e7d838ca3cca3b9f0b078945a03dab7f29e3a23f85dbf2e5749ebe6693e76ccaf1676cda87780da8901d6ac159e34e55754b89578b30877819cf4a07ece25f6e7f85ddd8a88ea481f483eac346f247f6d0f64082b2f06b178ef3c60b161a2d423f93669171c0fbebfbe48250ec1e7e6fd24966d83eecf9c60ed4c341cc58c2305465a7"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x6, 0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x1, 0xa7c29c916e57301e}}, 0xfffffffffffffffc, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "b627"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "f1c7"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x3a}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0xf8}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00170000000045901f609f6e690c8eb42fe63d755d4b08cc828e923df600ee6e3ce01891d0ce621fa586366ac3c19aa1208f6d8518c4069ad4a84764cf005103f517c3ec923345e0ba5762f3648c7ff1c5fbd7860ca8514b2bf8aa92a13ba25d2685867b14ac"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r3], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r4, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, &(0x7f00000001c0)={0x20, 0x21, 0x4f, {0x4f, 0xe, "871ffd63c2b8b65e97bd8339dd731e325fb4e38348031e4037abb928f9e36a95c98e8e19df2b0a56fd4ad62d2d077be462a6fc0ad7fb6c47f4b249181b0310e8d7757d339e2adaaddeea2bbac3"}}, &(0x7f0000000240)={0x0, 0x3, 0x55, @string={0x55, 0x3, "daa58f4dddc11aaf49058184935c0a6dcbdb7b4e440a8adab7c0e4a3f22069c6e490fd39d1e3153d2513e7a36faa386c8b8c2e1b2f39e9e0d7cc95b85d6517c38daa5196e281dc08bab3cee3a580ef767d2f20"}}, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "010ed3c6"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0xa83}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x40, 0x17, 0x21, "1f13209a365e41ca4611b2ff6d96141e68ff304aaf25ffb91bcb740841644c406b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000400)={0x20, 0x1, 0xc2, "35759181547c434db62ac4472e099dd250552a93be977b16f4a5570cc135ca33fcc0893e16624fbe6379c133c2453333dcaa275361ed564f74576110ebc0afb31291acbf0cc4886e47636cc457ca61e90d1dbcf860251c13024d1c0ac51b7280fe3a74e3591069ce7f5bef968006d5025ad8f38988383848b67335a3f7f0d0bdf6c1d94472776f87e5ebe7b74815fde62ea930aeb04ed2c9b234bafaf153670d38a2175993a487aa72a4febd53d9f2b046b80c13b297776b748555f85af8b19f7b87"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x99}}) 09:48:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r1, 0x2}}, 0x18) 09:48:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0xc000, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:45 executing program 4: ftruncate(0xffffffffffffffff, 0x0) tkill(0x0, 0x13) ptrace(0x10, 0x0) ptrace(0x420e, 0x0) 09:48:45 executing program 3: openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/rcu_expedited', 0x200, 0x0) 09:48:45 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(r1, &(0x7f0000000480)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000004c0)={0x3, 0xffffffffffffffe0, @status={[0x400, 0x7, 0x4, 0x6, 0x2, 0x8000]}, [0x9, 0x1000000000, 0x9, 0x1004000000000, 0x6, 0x2, 0x7fffffff, 0x4, 0x100, 0x4, 0xd58e, 0xebea, 0x200, 0xffffffffffffffff, 0x5, 0x1, 0x20, 0x6, 0x8000, 0x5, 0x1000, 0x0, 0x400, 0x1000, 0x1, 0x7, 0x6, 0xff, 0x7, 0x78, 0x1, 0x5, 0x9, 0x3, 0xfff, 0x3, 0xfffffffffffffc01, 0x8000000000000001, 0x6, 0x7fff, 0xffffffff, 0x9, 0x7f, 0x200, 0x6, 0x7, 0x1, 0xbec, 0x81, 0x3, 0x4, 0x0, 0x1, 0xfffffffffffffffa, 0x2, 0x7fffffff, 0x3, 0x4, 0x9, 0x8000, 0x8000000000000000, 0x4, 0x6ac, 0x1]}) (async) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000040)=""/14, 0xe}, {&(0x7f0000000180)=""/237, 0xed}, {&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000000380)=""/99, 0x63}], 0x6, 0x6, 0x90) 09:48:45 executing program 4: ftruncate(0xffffffffffffffff, 0x0) tkill(0x0, 0x13) ptrace(0x10, 0x0) ptrace(0x420e, 0x0) [ 1073.593602][T18907] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'sit0\x00', 0x0}) 09:48:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x5, &(0x7f0000000000), 0x4) 09:48:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x4, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xcccbf55e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4, 0x4}]}]}, 0x1c}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xec}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ab}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) 09:48:45 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0x420e, r0) [ 1073.922520][ T3557] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1074.020527][T18921] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1074.128770][T18921] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1074.297445][ T3557] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.308769][ T3557] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1074.321971][ T3557] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1074.331187][ T3557] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.345839][ T3557] usb 6-1: config 0 descriptor?? [ 1074.845262][ T3557] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 1074.862072][ T3557] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0016/input/input21 [ 1074.954998][ T3557] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1075.454775][T18911] UDC core: couldn't find an available UDC or it's busy: -16 [ 1075.462460][T18911] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1075.474064][ T9700] usb 6-1: USB disconnect, device number 57 09:48:48 executing program 5: r0 = syz_usb_connect(0x0, 0x5, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xaf, 0xce, 0x8f, 0x20, 0x1199, 0x68aa, 0xc8da, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbd, 0x0, 0x0, 0xff, 0xff, 0xff, 0x0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "bc1ac7"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x3f, 0x0, 0x401, 0x7c}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xff, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0xfa, 0x3}, @acm={0x4, 0x24, 0x2, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}]}]}}]}}]}}, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x40, 0x4, 0xae, {0xae, 0x9, "1faa2463521490554c93b11d72710815e1fbc333312f73f1428054db788fc0429010370b9258d4123bdc634152957a8a83060350e1f3d107724bfa411c015e5ed182f1080430dcc4af5c6a27ec57226ece8c7751355f326187642ba2d1d705023cd1f77c41950c4671f97c6eab963b8098bb5b8c85f4ce9d5aca45d4456bf0881ad00da04ebe930535dede5077523143f10c222eaa358e9961cbb86e939387c972a4fcdc875cc094f23512c1"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}, &(0x7f0000000680)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x4, 0x8, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x3, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x7, 0xffff}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x2, 0x0, 0x8, "fdb80652", "b62dce6f"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0xf2, 0x94, 0xaf, 0xab, 0x23, 0x3}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000780)={0x0, 0x15, 0xe4, "559b9366f14f9636cd1728af5e52263acb7f5e34253be05d0d1fa1a917e0d879cfd8b384599268be8ed7d2763ec13534583d2cd366bda8a0174637132654972cfa9995a076dfcda11ec6dd12487a1d724009d665c33f7f4327f2ba6b138b06a8b4e7d838ca3cca3b9f0b078945a03dab7f29e3a23f85dbf2e5749ebe6693e76ccaf1676cda87780da8901d6ac159e34e55754b89578b30877819cf4a07ece25f6e7f85ddd8a88ea481f483eac346f247f6d0f64082b2f06b178ef3c60b161a2d423f93669171c0fbebfbe48250ec1e7e6fd24966d83eecf9c60ed4c341cc58c2305465a7"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x6, 0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x1, 0xa7c29c916e57301e}}, 0xfffffffffffffffc, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "b627"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "f1c7"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x3a}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0xf8}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00170000000045901f609f6e690c8eb42fe63d755d4b08cc828e923df600ee6e3ce01891d0ce621fa586366ac3c19aa1208f6d8518c4069ad4a84764cf005103f517c3ec923345e0ba5762f3648c7ff1c5fbd7860ca8514b2bf8aa92a13ba25d2685867b14ac"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r3], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r4, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") (async) syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, &(0x7f00000001c0)={0x20, 0x21, 0x4f, {0x4f, 0xe, "871ffd63c2b8b65e97bd8339dd731e325fb4e38348031e4037abb928f9e36a95c98e8e19df2b0a56fd4ad62d2d077be462a6fc0ad7fb6c47f4b249181b0310e8d7757d339e2adaaddeea2bbac3"}}, &(0x7f0000000240)={0x0, 0x3, 0x55, @string={0x55, 0x3, "daa58f4dddc11aaf49058184935c0a6dcbdb7b4e440a8adab7c0e4a3f22069c6e490fd39d1e3153d2513e7a36faa386c8b8c2e1b2f39e9e0d7cc95b85d6517c38daa5196e281dc08bab3cee3a580ef767d2f20"}}, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "010ed3c6"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0xa83}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x40, 0x17, 0x21, "1f13209a365e41ca4611b2ff6d96141e68ff304aaf25ffb91bcb740841644c406b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000400)={0x20, 0x1, 0xc2, "35759181547c434db62ac4472e099dd250552a93be977b16f4a5570cc135ca33fcc0893e16624fbe6379c133c2453333dcaa275361ed564f74576110ebc0afb31291acbf0cc4886e47636cc457ca61e90d1dbcf860251c13024d1c0ac51b7280fe3a74e3591069ce7f5bef968006d5025ad8f38988383848b67335a3f7f0d0bdf6c1d94472776f87e5ebe7b74815fde62ea930aeb04ed2c9b234bafaf153670d38a2175993a487aa72a4febd53d9f2b046b80c13b297776b748555f85af8b19f7b87"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x99}}) 09:48:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 09:48:48 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x13) ptrace(0x10, r0) ptrace(0x420e, r0) 09:48:48 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) 09:48:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x117, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xcccbf55e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4, 0x4}]}]}, 0x1c}}, 0x0) (async) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xec}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ab}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x11) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) [ 1076.068759][T18929] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000001480)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 09:48:48 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x13) ptrace(0x10, r0) ptrace(0x420e, r0) [ 1076.267622][T18937] nvme_fabrics: missing parameter 'transport=%s' [ 1076.274357][T18937] nvme_fabrics: missing parameter 'nqn=%s' 09:48:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x136, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xcccbf55e) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4, 0x4}]}]}, 0x1c}}, 0x0) (async) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xec}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ab}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x11) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) 09:48:48 executing program 3: openat$tcp_mem(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) [ 1076.472174][ T9700] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1076.487361][T18953] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:48 executing program 2: syz_io_uring_setup(0x13fe, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1076.862309][ T9700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.873736][ T9700] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1076.886927][ T9700] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1076.896281][ T9700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.911437][ T9700] usb 6-1: config 0 descriptor?? [ 1077.384659][ T9700] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 1077.401529][ T9700] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0017/input/input22 [ 1077.494440][ T9700] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1077.589096][T18946] UDC core: couldn't find an available UDC or it's busy: -16 [ 1077.596923][T18946] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 09:48:49 executing program 5: r0 = syz_usb_connect(0x0, 0x5, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xaf, 0xce, 0x8f, 0x20, 0x1199, 0x68aa, 0xc8da, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbd, 0x0, 0x0, 0xff, 0xff, 0xff, 0x0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "bc1ac7"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x3f, 0x0, 0x401, 0x7c}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xff, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0xfa, 0x3}, @acm={0x4, 0x24, 0x2, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}]}]}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x40, 0x4, 0xae, {0xae, 0x9, "1faa2463521490554c93b11d72710815e1fbc333312f73f1428054db788fc0429010370b9258d4123bdc634152957a8a83060350e1f3d107724bfa411c015e5ed182f1080430dcc4af5c6a27ec57226ece8c7751355f326187642ba2d1d705023cd1f77c41950c4671f97c6eab963b8098bb5b8c85f4ce9d5aca45d4456bf0881ad00da04ebe930535dede5077523143f10c222eaa358e9961cbb86e939387c972a4fcdc875cc094f23512c1"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}, &(0x7f0000000680)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x4, 0x8, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x3, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x7, 0xffff}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x2, 0x0, 0x8, "fdb80652", "b62dce6f"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0xf2, 0x94, 0xaf, 0xab, 0x23, 0x3}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000780)={0x0, 0x15, 0xe4, "559b9366f14f9636cd1728af5e52263acb7f5e34253be05d0d1fa1a917e0d879cfd8b384599268be8ed7d2763ec13534583d2cd366bda8a0174637132654972cfa9995a076dfcda11ec6dd12487a1d724009d665c33f7f4327f2ba6b138b06a8b4e7d838ca3cca3b9f0b078945a03dab7f29e3a23f85dbf2e5749ebe6693e76ccaf1676cda87780da8901d6ac159e34e55754b89578b30877819cf4a07ece25f6e7f85ddd8a88ea481f483eac346f247f6d0f64082b2f06b178ef3c60b161a2d423f93669171c0fbebfbe48250ec1e7e6fd24966d83eecf9c60ed4c341cc58c2305465a7"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x6, 0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x1, 0xa7c29c916e57301e}}, 0xfffffffffffffffc, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "b627"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "f1c7"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x3a}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0xf8}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00170000000045901f609f6e690c8eb42fe63d755d4b08cc828e923df600ee6e3ce01891d0ce621fa586366ac3c19aa1208f6d8518c4069ad4a84764cf005103f517c3ec923345e0ba5762f3648c7ff1c5fbd7860ca8514b2bf8aa92a13ba25d2685867b14ac"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r3], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r4, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, &(0x7f00000001c0)={0x20, 0x21, 0x4f, {0x4f, 0xe, "871ffd63c2b8b65e97bd8339dd731e325fb4e38348031e4037abb928f9e36a95c98e8e19df2b0a56fd4ad62d2d077be462a6fc0ad7fb6c47f4b249181b0310e8d7757d339e2adaaddeea2bbac3"}}, &(0x7f0000000240)={0x0, 0x3, 0x55, @string={0x55, 0x3, "daa58f4dddc11aaf49058184935c0a6dcbdb7b4e440a8adab7c0e4a3f22069c6e490fd39d1e3153d2513e7a36faa386c8b8c2e1b2f39e9e0d7cc95b85d6517c38daa5196e281dc08bab3cee3a580ef767d2f20"}}, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "010ed3c6"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0xa83}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x40, 0x17, 0x21, "1f13209a365e41ca4611b2ff6d96141e68ff304aaf25ffb91bcb740841644c406b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000400)={0x20, 0x1, 0xc2, "35759181547c434db62ac4472e099dd250552a93be977b16f4a5570cc135ca33fcc0893e16624fbe6379c133c2453333dcaa275361ed564f74576110ebc0afb31291acbf0cc4886e47636cc457ca61e90d1dbcf860251c13024d1c0ac51b7280fe3a74e3591069ce7f5bef968006d5025ad8f38988383848b67335a3f7f0d0bdf6c1d94472776f87e5ebe7b74815fde62ea930aeb04ed2c9b234bafaf153670d38a2175993a487aa72a4febd53d9f2b046b80c13b297776b748555f85af8b19f7b87"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x99}}) syz_usb_connect(0x0, 0x5, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xaf, 0xce, 0x8f, 0x20, 0x1199, 0x68aa, 0xc8da, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbd, 0x0, 0x0, 0xff, 0xff, 0xff, 0x0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "bc1ac7"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x3f, 0x0, 0x401, 0x7c}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xff, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0xfa, 0x3}, @acm={0x4, 0x24, 0x2, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}]}]}}]}}]}}, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") (async) syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x40, 0x4, 0xae, {0xae, 0x9, "1faa2463521490554c93b11d72710815e1fbc333312f73f1428054db788fc0429010370b9258d4123bdc634152957a8a83060350e1f3d107724bfa411c015e5ed182f1080430dcc4af5c6a27ec57226ece8c7751355f326187642ba2d1d705023cd1f77c41950c4671f97c6eab963b8098bb5b8c85f4ce9d5aca45d4456bf0881ad00da04ebe930535dede5077523143f10c222eaa358e9961cbb86e939387c972a4fcdc875cc094f23512c1"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}, &(0x7f0000000680)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x4, 0x8, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x3, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x7, 0xffff}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x2, 0x0, 0x8, "fdb80652", "b62dce6f"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0xf2, 0x94, 0xaf, 0xab, 0x23, 0x3}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000780)={0x0, 0x15, 0xe4, "559b9366f14f9636cd1728af5e52263acb7f5e34253be05d0d1fa1a917e0d879cfd8b384599268be8ed7d2763ec13534583d2cd366bda8a0174637132654972cfa9995a076dfcda11ec6dd12487a1d724009d665c33f7f4327f2ba6b138b06a8b4e7d838ca3cca3b9f0b078945a03dab7f29e3a23f85dbf2e5749ebe6693e76ccaf1676cda87780da8901d6ac159e34e55754b89578b30877819cf4a07ece25f6e7f85ddd8a88ea481f483eac346f247f6d0f64082b2f06b178ef3c60b161a2d423f93669171c0fbebfbe48250ec1e7e6fd24966d83eecf9c60ed4c341cc58c2305465a7"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x6, 0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x1, 0xa7c29c916e57301e}}, 0xfffffffffffffffc, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "b627"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "f1c7"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x3a}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0xf8}}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00170000000045901f609f6e690c8eb42fe63d755d4b08cc828e923df600ee6e3ce01891d0ce621fa586366ac3c19aa1208f6d8518c4069ad4a84764cf005103f517c3ec923345e0ba5762f3648c7ff1c5fbd7860ca8514b2bf8aa92a13ba25d2685867b14ac"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r3], 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r4, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") (async) syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, &(0x7f00000001c0)={0x20, 0x21, 0x4f, {0x4f, 0xe, "871ffd63c2b8b65e97bd8339dd731e325fb4e38348031e4037abb928f9e36a95c98e8e19df2b0a56fd4ad62d2d077be462a6fc0ad7fb6c47f4b249181b0310e8d7757d339e2adaaddeea2bbac3"}}, &(0x7f0000000240)={0x0, 0x3, 0x55, @string={0x55, 0x3, "daa58f4dddc11aaf49058184935c0a6dcbdb7b4e440a8adab7c0e4a3f22069c6e490fd39d1e3153d2513e7a36faa386c8b8c2e1b2f39e9e0d7cc95b85d6517c38daa5196e281dc08bab3cee3a580ef767d2f20"}}, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "010ed3c6"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0xa83}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x40, 0x17, 0x21, "1f13209a365e41ca4611b2ff6d96141e68ff304aaf25ffb91bcb740841644c406b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000400)={0x20, 0x1, 0xc2, "35759181547c434db62ac4472e099dd250552a93be977b16f4a5570cc135ca33fcc0893e16624fbe6379c133c2453333dcaa275361ed564f74576110ebc0afb31291acbf0cc4886e47636cc457ca61e90d1dbcf860251c13024d1c0ac51b7280fe3a74e3591069ce7f5bef968006d5025ad8f38988383848b67335a3f7f0d0bdf6c1d94472776f87e5ebe7b74815fde62ea930aeb04ed2c9b234bafaf153670d38a2175993a487aa72a4febd53d9f2b046b80c13b297776b748555f85af8b19f7b87"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x99}}) (async) 09:48:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f000000d5c0)) 09:48:49 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x13) ptrace(0x10, r0) ptrace(0x420e, r0) 09:48:49 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000e410000000210600000000000001010000000000003a0200000000000000000000000000000300000000000000040000008e750000f8020000020000000700000000000000ffffffffffffff7f0100008000000000ff0f00d4f80000003000"/152]) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 09:48:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:49 executing program 2: unshare(0x0) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 1077.659565][ T3557] usb 6-1: USB disconnect, device number 58 [ 1077.783969][T18969] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:49 executing program 3: syz_io_uring_setup(0x13fe, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x151}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 09:48:50 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000e410000000210600000000000001010000000000003a0200000000000000000000000000000300000000000000040000008e750000f8020000020000000700000000000000ffffffffffffff7f0100008000000000ff0f00d4f80000003000"/152]) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000e410000000210600000000000001010000000000003a0200000000000000000000000000000300000000000000040000008e750000f8020000020000000700000000000000ffffffffffffff7f0100008000000000ff0f00d4f80000003000"/152]) (async) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (async) 09:48:50 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) 09:48:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{0x2}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:50 executing program 2: socketpair(0x10, 0x2, 0x5d, &(0x7f0000000000)) 09:48:50 executing program 3: r0 = epoll_create(0x400) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r1, &(0x7f0000000800)) [ 1078.212147][ T3557] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1078.344285][T18997] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1078.572556][ T3557] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.584244][ T3557] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1078.600190][ T3557] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1078.610182][ T3557] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.626711][ T3557] usb 6-1: config 0 descriptor?? [ 1079.114410][ T3557] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 1079.130302][ T3557] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0018/input/input23 [ 1079.225951][ T3557] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1079.729101][T18979] UDC core: couldn't find an available UDC or it's busy: -16 [ 1079.736822][T18979] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1079.749844][T19003] UDC core: couldn't find an available UDC or it's busy: -16 [ 1079.757658][T19003] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 09:48:51 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19690000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0x2, "a9af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000001c0)={0x0, 0x4, 0xe2, "2f253d2fa960f1548ff56046aa66065a0fc0168282dd4100000000000000000000008d6ae438803c5b8c71407d94424beeafe7059236a6b642f69695313e6023475dcfcd5b3666e1b1d8939665957c65edc8dd77ff189de03cfc613bfcf2b57b2bc55a02e4d36b1989028ce3345252b25c979cd18984e01045dea3447e3f472a67404acd2ac1087d4524d20dfc1c55b397e591d5b0356df41392a5357025ea1dec1dcdc5178d804a5240c3e7860e8c6a3348f4ad50b6ed517bfaf2b4b2d43d6aa344a995e2cf9c9fb3ca11e12795a5e38ced013487882b58ecf9846b622c8c23dc3b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:48:51 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) 09:48:51 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000e410000000210600000000000001010000000000003a0200000000000000000000000000000300000000000000040000008e750000f8020000020000000700000000000000ffffffffffffff7f0100008000000000ff0f00d4f80000003000"/152]) (async) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 09:48:51 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x0, 0x0, 0x0, @remote}}}}}, 0x0) 09:48:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{0x3}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x541b, 0x0) [ 1079.790847][ T3557] usb 6-1: USB disconnect, device number 59 09:48:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x1, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) 09:48:52 executing program 2: r0 = epoll_create(0x7) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) [ 1079.939517][T19021] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:52 executing program 3: pselect6(0xffffffffffffff7d, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000300), 0x0) 09:48:52 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) 09:48:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @broadcast, @local}, 0xc) [ 1080.393239][T19040] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1080.482378][ T3557] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1080.721966][ T3557] usb 6-1: Using ep0 maxpacket: 32 [ 1080.842217][ T3557] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1080.853673][ T3557] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.868104][ T3557] usb 6-1: config 0 descriptor?? [ 1080.919242][ T3557] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1081.114706][T19029] UDC core: couldn't find an available UDC or it's busy: -16 [ 1081.122442][T19029] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1081.142153][ T3557] sonixb 6-1:0.0: Error reading register 00: -71 [ 1081.167493][ T3557] usb 6-1: USB disconnect, device number 60 09:48:53 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19690000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0x2, "a9af"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000001c0)={0x0, 0x4, 0xe2, "2f253d2fa960f1548ff56046aa66065a0fc0168282dd4100000000000000000000008d6ae438803c5b8c71407d94424beeafe7059236a6b642f69695313e6023475dcfcd5b3666e1b1d8939665957c65edc8dd77ff189de03cfc613bfcf2b57b2bc55a02e4d36b1989028ce3345252b25c979cd18984e01045dea3447e3f472a67404acd2ac1087d4524d20dfc1c55b397e591d5b0356df41392a5357025ea1dec1dcdc5178d804a5240c3e7860e8c6a3348f4ad50b6ed517bfaf2b4b2d43d6aa344a995e2cf9c9fb3ca11e12795a5e38ced013487882b58ecf9846b622c8c23dc3b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:48:53 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 09:48:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x1, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x1, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) (async) 09:48:53 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0xffffffffffffffff, r0) ptrace(0x420e, r0) 09:48:53 executing program 3: syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0xc4102) 09:48:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x2}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1081.708301][T19046] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000006240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0x40}}, 0x0) 09:48:53 executing program 2: prctl$PR_MCE_KILL_GET(0x1d) [ 1081.819211][T19059] UDC core: couldn't find an available UDC or it's busy: -16 [ 1081.827448][T19059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 09:48:53 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0xffffffffffffffff, r0) ptrace(0x420e, r0) 09:48:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x3}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x1, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x1, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) (async) 09:48:54 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004bfee908e60f00985d19690000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0x2, "a9af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000001c0)={0x0, 0x4, 0xe2, "2f253d2fa960f1548ff56046aa66065a0fc0168282dd4100000000000000000000008d6ae438803c5b8c71407d94424beeafe7059236a6b642f69695313e6023475dcfcd5b3666e1b1d8939665957c65edc8dd77ff189de03cfc613bfcf2b57b2bc55a02e4d36b1989028ce3345252b25c979cd18984e01045dea3447e3f472a67404acd2ac1087d4524d20dfc1c55b397e591d5b0356df41392a5357025ea1dec1dcdc5178d804a5240c3e7860e8c6a3348f4ad50b6ed517bfaf2b4b2d43d6aa344a995e2cf9c9fb3ca11e12795a5e38ced013487882b58ecf9846b622c8c23dc3b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:48:54 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 09:48:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x10102, 0x0, 0x0) [ 1082.091632][T19074] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:54 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0xffffffffffffffff, r0) ptrace(0x420e, r0) 09:48:54 executing program 3: rt_sigaction(0x33, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000180)) 09:48:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x0, 0x2}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 09:48:54 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, 0x0) ptrace(0x420e, r0) [ 1082.477818][T19096] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:54 executing program 3: timer_create(0x2, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 09:48:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x0, 0x5}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1082.622370][ T3563] usb 6-1: new high-speed USB device number 61 using dummy_hcd 09:48:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (async) 09:48:54 executing program 3: write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x453, 0x0, 0x0, 0x0, 'w', [""]}, 0x14}}, 0x0) [ 1082.811127][T19105] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1082.886465][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1083.012249][ T3563] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1083.021507][ T3563] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.053137][ T3563] usb 6-1: config 0 descriptor?? [ 1083.099375][ T3563] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1083.303437][T19078] UDC core: couldn't find an available UDC or it's busy: -16 [ 1083.313261][T19078] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1083.342268][ T3563] sonixb 6-1:0.0: Error reading register 00: -71 [ 1083.353903][ T3563] usb 6-1: USB disconnect, device number 61 09:48:55 executing program 5: syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:48:55 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, 0x0) ptrace(0x420e, r0) 09:48:55 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) recvmmsg$unix(r0, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:48:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 09:48:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x0, 0x6}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:55 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000d40), 0x6000, 0x0) [ 1083.916298][T19117] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:56 executing program 2: msgsnd(0x0, &(0x7f0000000200)={0x3}, 0x8, 0x800) 09:48:56 executing program 0: r0 = mq_open(&(0x7f0000000000)='?[]!\\,[\x00', 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f0000000180)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) 09:48:56 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, 0x0) ptrace(0x420e, r0) 09:48:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x0, 0x8}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:56 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x80108906, 0x0) 09:48:56 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) io_setup(0x9, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0}]) [ 1084.328365][T19136] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:56 executing program 5: syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 09:48:56 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x101041) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 09:48:56 executing program 3: r0 = getpgid(0x0) waitid(0x1, r0, 0x0, 0x8, 0x0) 09:48:56 executing program 0: syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x856ebf69bd8513ff) 09:48:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x0, 0x9}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:56 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0xffffffffffffffff, r0) 09:48:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x4, 0x0, 0x0) 09:48:56 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x101041) write$P9_RXATTRCREATE(r0, &(0x7f0000000240)={0x7}, 0x7) [ 1084.824274][T19150] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:56 executing program 2: prctl$PR_MCE_KILL_GET(0x15) 09:48:57 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0xffffffffffffffff, r0) 09:48:57 executing program 3: syz_io_uring_setup(0x3095, &(0x7f0000000040), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e72000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 09:48:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x0, 0xa}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:57 executing program 5: syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 09:48:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@multicast1, @broadcast, @local}, 0xc) 09:48:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000140)={0x101, {{0x2, 0x0, @broadcast}}}, 0x88) [ 1085.214301][T19169] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:57 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0xffffffffffffffff, r0) 09:48:57 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x2, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private}, {0x0, 0x0, 0x0, @remote}}}}}, 0x0) 09:48:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) 09:48:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x0, 0xb}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:57 executing program 2: msgsnd(0x0, &(0x7f0000000200)={0x3, "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"}, 0xfd1, 0x800) 09:48:57 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) io_setup(0x9, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x4}]) 09:48:57 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0x420e, 0x0) [ 1085.692434][T19187] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:57 executing program 0: clock_gettime(0x3, &(0x7f0000002100)) 09:48:57 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 09:48:57 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x2f, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:48:57 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0x420e, 0x0) 09:48:57 executing program 3: syz_io_uring_setup(0x562b, &(0x7f0000000080), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x7c55, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 09:48:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:58 executing program 0: syz_io_uring_setup(0x445d, &(0x7f0000000440)={0x0, 0x229b, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) 09:48:58 executing program 2: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xffffffff) [ 1086.158495][T19209] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000040)={@private}, 0x8) 09:48:58 executing program 3: mq_open(&(0x7f0000000000)='.{}!\x00', 0x0, 0x0, 0x0) 09:48:58 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0x420e, 0x0) [ 1086.351914][T18836] usb 6-1: new high-speed USB device number 62 using dummy_hcd 09:48:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:58 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) 09:48:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x3, 0x0, 0x0) [ 1086.528042][T19219] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1086.592543][T18836] usb 6-1: Using ep0 maxpacket: 32 [ 1086.713130][T18836] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1086.723080][T18836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.763077][T18836] usb 6-1: config 0 descriptor?? [ 1086.809250][T18836] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1087.222629][T18836] usb 6-1: USB disconnect, device number 62 09:48:59 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x2f, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x2f, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 09:48:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0xa, &(0x7f0000000000)={@multicast1, @broadcast, @local}, 0xc) 09:48:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:48:59 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x458103, 0x0) 09:48:59 executing program 3: r0 = epoll_create1(0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) 09:48:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f0000006240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELOBJ={0x24c, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_USERDATA={0xf9, 0x8, "d72714101f426bd61cef62806f96ce9b2c33e364c943e0d0ff854786ca7114c5c040231edba2782c28f3bdb85c29e38872538f0388f0068c6a6a6dc3753892252282c3a153f8985fa77e94f3201d864446be4df57cfcf3530bf53feb3a2122cddba03c53dca4dcafbc4d7b0389d539441548f94cac4cec2d712803261d4075d5148fbc775f470c1758356c06f574628f93295c002ad4fd05eacf9355d45620bcbcd94645d41072b537ae06e2e4aa0789fac9df32c9f92df50a33dfb441e6b06fa89cb1afd32ccb61192a19c81409ae8c6ed3fda61b87095f4aba8eefbdb3f87cb0465e9a231f4f7e3272603fd6f55c478d5ab5ed34"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x1d, 0x8, "46f0807c3cfcb3a6f415caa30735488b9e4cbdd37b4991b21c"}, @NFTA_OBJ_USERDATA={0xed, 0x8, "4aace0477977d4eb02c41bd08dc9d8398da0448af7f3bb6dba990e1bb499a9a53c31e49d38ad710889c94f22168902f8b8dce7d193cadcc02714b3887ab51f7368e592dd07e9866c5fcec99fb9f0659ce5bf19d869de4da477be65c193d3d284de86a3af4028ada1f6cee1fae9f605fbf5bfc4a853bd8229ee964b5a7921f63697fbd96bcd688fb88ddeb6af00f001d1a0ad8f34f9d7425c3651588d85ba56357c95e1227ee6b3c297cbb9ddf81929790d6fc553f4581fc368cae45064f8e95d9e480c69ade8c60386748f543fdd960c08225b2542063b935ebc5b5e93f324817aefb72b81456b5d2b"}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x114, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_USERDATA={0xc9, 0xc, "2ea60407e5b30dc23beae47daa531e2a07610ed8faf19376a8c2c5c8488b2cf9e2d6957e4bd02b019747bd71acc53203c9019a8f2e89787dea25187c030a66a0b3ff26e2e95750b90c3157bac9b50b0abc6b5d698d72fc7cf38ba6d9f2a47df323efa8227fc9b588e07475f16bf6b23b5e1209a3e21112641f1eee6fff587c51584a9865cfcf1ff74ebdb3be05c842f42e9a14f929c60245bf7bb60fab56ee2238058d8bb1669172a866682b5e60c732f43e89f6dfd763e0dfadf76b9f7b04b91e004b9b60"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSETELEM={0xb1c, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xafc, 0x3, 0x0, 0x1, [{0xaf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xaf4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa9, 0x1, "8697c5c523cbf21609262aa888bb6baf35620a523f7fe8669d6fa399006ad4a7d379a20ee572a30c53caeab144127a76a201004d97d54361da13d96a640c6f2c7516ea98d19e92761c39260947626218d84ac0b25c83cb979bad0de3139d870dbffb18a1ab1e5fdc55e1ea9dcb08175f15deb2185216ff7b47e0e3c048f0152de5b98d2ad231d1acbb79cba82ab6031760294544a52d307e6f56e5193620e8a824fc494ddd"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa1d, 0x1, "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"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) [ 1087.815306][T19232] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:48:59 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') 09:48:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0xd, &(0x7f0000000000)={@multicast1, @broadcast, @local}, 0xc) 09:49:00 executing program 0: io_setup(0x1f, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:49:00 executing program 2: io_setup(0x1f, &(0x7f0000000000)) syz_io_uring_setup(0x677, &(0x7f0000000c80)={0x0, 0x9f4b}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fce, &(0x7f0000000d80), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000e00), &(0x7f0000000e40)) 09:49:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1088.172754][ T9700] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1088.227609][T19249] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1088.422069][ T9700] usb 6-1: Using ep0 maxpacket: 32 [ 1088.552221][ T9700] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1088.561546][ T9700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.574932][ T9700] usb 6-1: config 0 descriptor?? [ 1088.619094][ T9700] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1089.041398][T19238] UDC core: couldn't find an available UDC or it's busy: -16 [ 1089.049159][T19238] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 09:49:02 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x2f, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:49:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) 09:49:02 executing program 0: io_setup(0x7297, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000340)) io_setup(0x9, &(0x7f0000000200)) io_setup(0x9, &(0x7f0000000400)) io_setup(0xa70, &(0x7f0000000180)) 09:49:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="68000000000b01030000000000000000000000070800034000000000050001"], 0x68}}, 0x0) 09:49:02 executing program 4: r0 = epoll_create1(0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0, 0x2}]) 09:49:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1090.844369][ T9700] usb 6-1: USB disconnect, device number 63 [ 1090.946810][T19260] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1090.983819][T19262] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 09:49:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) 09:49:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) 09:49:03 executing program 0: r0 = epoll_create1(0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0xffffffff}]) 09:49:03 executing program 2: timer_create(0x1, 0x0, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{}, {0x0, 0x989680}}, 0x0) 09:49:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:03 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12071, 0xffffffffffffffff, 0x10000000) [ 1091.366504][T19275] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1091.422147][ T9700] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1091.682094][ T9700] usb 6-1: Using ep0 maxpacket: 32 [ 1091.812315][ T9700] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1091.821853][ T9700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.833623][ T9700] usb 6-1: config 0 descriptor?? [ 1091.878450][ T9700] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1092.298215][ T3563] usb 6-1: USB disconnect, device number 64 09:49:04 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="120110ff2505a1a440000102030109027600020156303f0904000001020d00000724060001c2fe05240002000d240f0101040000f7ff3f0083080c241b0700ffff7f9a8000080c241b000401000106c909090905810300040242020904010000020d00000904010102024d000009058202b4c92405800905030200040604d300000000"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x20, 0x9, 0x1, 0x20, 0x9d}, 0xb, &(0x7f0000000140)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0xbe, &(0x7f0000000180)=@string={0xbe, 0x3, "9ee1585024688d1df017e83ccc4e54b2501427f0e05756591858311ca8185f2e743ac89d90fa0518f8a47348f900b2ab8c160fd663c3660d36f059bd40e0593693b59b419f9b9c9b4ece8adbcc34a1df72605ef210b770a42d108e40bfda3fda22572a15a2fd7aae5190c14cd9171244a130ac1f202002ac062e40d846c33459080b4b98b2ad0a2951905d6cac5fe55c0666294703edf0c438efe8161348a29b3f9cfcdc99fa853b4caf4bc23cc0eb9ad498a64cf9ac015aff3f3b87"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4fc}}, {0x60, &(0x7f0000000280)=@string={0x60, 0x3, "a9945de1dbb176872bf594f7d1412526d130fac68ca49136e52b5601b1efe649863f87bfe4ee4f7181920ea6cef0b39ce8543701decf6a67e7409206106bc6d9253804353ecd96a4008a1af6704749274bc2a44d3ee6b9b5e822c57cbff1"}}]}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400e4000000000904d800090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io$hid(r2, &(0x7f0000000cc0)={0x24, &(0x7f0000000a80)={0x0, 0x22, 0x4e, {0x4e, 0x0, "5752f2c44e1dca5ce5f3c6aa5f683ead50b95f83d33e32778df935fad28cf4d950a5be823e1d059b86c2da8b6a680366edc1e4b3487a7e17efc7c452f77d5c279d7ccecfef86579d8bde08af"}}, &(0x7f0000000b00)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "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"}}, &(0x7f0000000c40)={0x0, 0x22, 0x19, {[@local=@item_4={0x3, 0x2, 0x1, "716637c0"}, @main=@item_4={0x3, 0x0, 0xc, "b4a72a6c"}, @global=@item_4={0x3, 0x1, 0x0, "96960e61"}, @main=@item_4={0x3, 0x0, 0xc, "50670fea"}, @global=@item_4={0x3, 0x1, 0x0, "00503982"}]}}, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x20, 0x1, {0x22, 0x97b}}}}, &(0x7f0000000f80)={0x2c, &(0x7f0000000d00)={0x20, 0x0, 0x82, "473baa9add141a642f3b037f509d1dfb070c1f96cdd7a86c311de1e7149b4774d2500a2d3ce6e22e20ae42816d7d94ecd74e0ea7c525feba864e3ec10750de800c067de7fdca13909898019eaad60e94c11edb9fcd1f3f9abb13ed291f463a0835e6a3d915ac0bb079030e7f285b414e6d948694e558c6be548110edcae2070c272b"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x3a}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000e40)={0x20, 0x1, 0xc6, "5ff0378e709c87a91d8b56b0fb430af837aa09371096297f9816b82cf552b6326a0edb5b1e5ff8aa8df7cf2a481f56a2a4ffebc7da01ff11c839bb6b7f4f0088b96b182c61e201764d07c8bfa3b58c58eec56191b6b0ed353272e70ba7d8ce37027137c8b06a6b88ae004e6b23d6bfd72a216e21057f0f054d0a3bce3183e3692a998a925ca744ed2ee1737cd8dfad6862573bc77ff3a3ce18558dabb8d5a5a8622c6d7dd46aaaa10adb377983f16aa0e804475029b59951d2e6dcece60326278790076dc954"}, &(0x7f0000000f40)={0x20, 0x3, 0x1, 0xfd}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r3], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r4, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io(r4, &(0x7f0000000500)={0x2c, &(0x7f00000003c0)={0x20, 0xa, 0x78, {0x78, 0x22, "3a65ac2e5a14de1c8188acfc063cb4594e85d39404d59a279cd26478b1442e578dcbccb5688e1fd73a087b4251654c88590f1564a6dcbb4b26f50d7322249fef62d1d950c161bab41b7b6274ce5e1bce217dfc129ac3da4cf2457c9641ee5668774e570b3b900468729eb47da89de6354819bdc68e00"}}, &(0x7f0000000340)={0x0, 0x3, 0x11, @string={0x11, 0x3, "ca29aec461056abc63a4ee948a3a3d"}}, &(0x7f0000000440)={0x0, 0xf, 0x21, {0x5, 0xf, 0x21, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x20, 0x0, 0x7955}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x8, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x1, 0x0, 0x9, 0x81}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x1, 0x5e, 0x81, "ba19340f", "3ec9df71"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x8, 0x40, 0x4, 0x3f, 0x401}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000540)={0x40, 0x13, 0x33, "f7042465094e29440dd9498245dc7a73ce7c3da38e729af3b35cacd1d84f3eb1dbb69c9032e9b4e56b65328aa56ce09494ecbc"}, &(0x7f0000000600)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x400, 0x8}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x3d8}, &(0x7f0000000740)={0x40, 0x9, 0x1}, &(0x7f0000000780)={0x40, 0xb, 0x2, '+`'}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x88e}, &(0x7f0000000800)={0x40, 0x13, 0x6, @local}, &(0x7f0000000840)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000880)={0x40, 0x19, 0x2, "f910"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x7f}}) 09:49:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:04 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa3, 0xd0, 0xc6, 0x40, 0x2c7c, 0x620, 0xefea, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 09:49:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) 09:49:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) 09:49:04 executing program 4: sched_setscheduler(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1dd00) 09:49:05 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) [ 1092.940904][T19286] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:05 executing program 0: syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) 09:49:05 executing program 3: pipe(&(0x7f00000005c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0xc020660b, 0x0) 09:49:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:05 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x7, {{0x2, 0x0, @multicast2}}, 0x1, 0x1, [{}]}, 0x110) 09:49:05 executing program 3: socketpair(0xa, 0x3, 0x3a, &(0x7f00000001c0)) [ 1093.171943][ T3563] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1093.204029][ T9700] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1093.367225][T19299] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1093.458124][ T9700] usb 6-1: Using ep0 maxpacket: 32 [ 1093.532487][ T3563] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0620, bcdDevice=ef.ea [ 1093.542381][ T3563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.565658][ T3563] usb 3-1: config 0 descriptor?? [ 1093.604131][ T9700] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1093.613491][ T9700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.625979][ T9700] usb 6-1: config 0 descriptor?? [ 1093.673232][ T9700] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1093.822347][ T3563] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 1093.837941][ T3563] usb 3-1: USB disconnect, device number 84 [ 1093.867734][T19290] UDC core: couldn't find an available UDC or it's busy: -16 [ 1093.875447][T19290] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1094.095352][T19290] UDC core: couldn't find an available UDC or it's busy: -16 [ 1094.103068][T19290] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1094.125587][ T3570] usb 6-1: USB disconnect, device number 65 09:49:06 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="120110ff2505a1a440000102030109027600020156303f0904000001020d00000724060001c2fe05240002000d240f0101040000f7ff3f0083080c241b0700ffff7f9a8000080c241b000401000106c909090905810300040242020904010000020d00000904010102024d000009058202b4c92405800905030200040604d300000000"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x20, 0x9, 0x1, 0x20, 0x9d}, 0xb, &(0x7f0000000140)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0xbe, &(0x7f0000000180)=@string={0xbe, 0x3, "9ee1585024688d1df017e83ccc4e54b2501427f0e05756591858311ca8185f2e743ac89d90fa0518f8a47348f900b2ab8c160fd663c3660d36f059bd40e0593693b59b419f9b9c9b4ece8adbcc34a1df72605ef210b770a42d108e40bfda3fda22572a15a2fd7aae5190c14cd9171244a130ac1f202002ac062e40d846c33459080b4b98b2ad0a2951905d6cac5fe55c0666294703edf0c438efe8161348a29b3f9cfcdc99fa853b4caf4bc23cc0eb9ad498a64cf9ac015aff3f3b87"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4fc}}, {0x60, &(0x7f0000000280)=@string={0x60, 0x3, "a9945de1dbb176872bf594f7d1412526d130fac68ca49136e52b5601b1efe649863f87bfe4ee4f7181920ea6cef0b39ce8543701decf6a67e7409206106bc6d9253804353ecd96a4008a1af6704749274bc2a44d3ee6b9b5e822c57cbff1"}}]}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400e4000000000904d800090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io$hid(r2, &(0x7f0000000cc0)={0x24, &(0x7f0000000a80)={0x0, 0x22, 0x4e, {0x4e, 0x0, "5752f2c44e1dca5ce5f3c6aa5f683ead50b95f83d33e32778df935fad28cf4d950a5be823e1d059b86c2da8b6a680366edc1e4b3487a7e17efc7c452f77d5c279d7ccecfef86579d8bde08af"}}, &(0x7f0000000b00)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "7f2abeeaa81274dd3f16472cb2b2299e5fad11cde15a3e492b1b463ffb1106af9770b13ba7bf90bc7577f87808eaae90d55fdcd8a048cb8a641f12c286ed3040f1644403559d35ef879aa549fb5f886db9e496191b92413e21516f2f4b1211de8b0d65f620aaa0933c5939bb5e269d7adbb9cdb119494beaf4712b466ccb4c19a72a9dad41199ed687d36e8d2c357178b139828ff0d984815e2ab4e112bed78def1548cc84a03a8ba3724b334a25522f96556c4c4a0a4230a6ccf870ac09758ccc2e0ca818c2194c93661dcee750f6f789c06dddb6d20e1d9f22e57d424375cc06af63763fda0b741c26f001f0a722693663436b05e5bfab0d49663b"}}, &(0x7f0000000c40)={0x0, 0x22, 0x19, {[@local=@item_4={0x3, 0x2, 0x1, "716637c0"}, @main=@item_4={0x3, 0x0, 0xc, "b4a72a6c"}, @global=@item_4={0x3, 0x1, 0x0, "96960e61"}, @main=@item_4={0x3, 0x0, 0xc, "50670fea"}, @global=@item_4={0x3, 0x1, 0x0, "00503982"}]}}, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x20, 0x1, {0x22, 0x97b}}}}, &(0x7f0000000f80)={0x2c, &(0x7f0000000d00)={0x20, 0x0, 0x82, "473baa9add141a642f3b037f509d1dfb070c1f96cdd7a86c311de1e7149b4774d2500a2d3ce6e22e20ae42816d7d94ecd74e0ea7c525feba864e3ec10750de800c067de7fdca13909898019eaad60e94c11edb9fcd1f3f9abb13ed291f463a0835e6a3d915ac0bb079030e7f285b414e6d948694e558c6be548110edcae2070c272b"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x3a}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000e40)={0x20, 0x1, 0xc6, "5ff0378e709c87a91d8b56b0fb430af837aa09371096297f9816b82cf552b6326a0edb5b1e5ff8aa8df7cf2a481f56a2a4ffebc7da01ff11c839bb6b7f4f0088b96b182c61e201764d07c8bfa3b58c58eec56191b6b0ed353272e70ba7d8ce37027137c8b06a6b88ae004e6b23d6bfd72a216e21057f0f054d0a3bce3183e3692a998a925ca744ed2ee1737cd8dfad6862573bc77ff3a3ce18558dabb8d5a5a8622c6d7dd46aaaa10adb377983f16aa0e804475029b59951d2e6dcece60326278790076dc954"}, &(0x7f0000000f40)={0x20, 0x3, 0x1, 0xfd}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r3], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r4, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") (async) syz_usb_control_io(r4, &(0x7f0000000500)={0x2c, &(0x7f00000003c0)={0x20, 0xa, 0x78, {0x78, 0x22, "3a65ac2e5a14de1c8188acfc063cb4594e85d39404d59a279cd26478b1442e578dcbccb5688e1fd73a087b4251654c88590f1564a6dcbb4b26f50d7322249fef62d1d950c161bab41b7b6274ce5e1bce217dfc129ac3da4cf2457c9641ee5668774e570b3b900468729eb47da89de6354819bdc68e00"}}, &(0x7f0000000340)={0x0, 0x3, 0x11, @string={0x11, 0x3, "ca29aec461056abc63a4ee948a3a3d"}}, &(0x7f0000000440)={0x0, 0xf, 0x21, {0x5, 0xf, 0x21, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x20, 0x0, 0x7955}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x8, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x1, 0x0, 0x9, 0x81}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x1, 0x5e, 0x81, "ba19340f", "3ec9df71"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x8, 0x40, 0x4, 0x3f, 0x401}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000540)={0x40, 0x13, 0x33, "f7042465094e29440dd9498245dc7a73ce7c3da38e729af3b35cacd1d84f3eb1dbb69c9032e9b4e56b65328aa56ce09494ecbc"}, &(0x7f0000000600)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x400, 0x8}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x3d8}, &(0x7f0000000740)={0x40, 0x9, 0x1}, &(0x7f0000000780)={0x40, 0xb, 0x2, '+`'}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x88e}, &(0x7f0000000800)={0x40, 0x13, 0x6, @local}, &(0x7f0000000840)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000880)={0x40, 0x19, 0x2, "f910"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x7f}}) 09:49:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8930, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:49:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 09:49:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x2}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x6, 0x1, 0x101}, 0x14}}, 0x0) 09:49:06 executing program 2: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)) [ 1094.749534][T19314] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000280)='GPL\x00', 0x4, 0xac, &(0x7f00000002c0)=""/172, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:49:06 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) epoll_pwait(0xffffffffffffffff, &(0x7f0000001100)=[{}], 0x1, 0x3, &(0x7f0000001140)={[0x4]}, 0x8) r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000100)={0x0, "c3da4be4863a3b627898c486b2069be9"}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x202, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3f}) 09:49:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x5452, &(0x7f0000000480)={'syztnl1\x00', 0x0}) [ 1094.854172][T19318] UDC core: couldn't find an available UDC or it's busy: -16 [ 1094.862615][T19318] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 09:49:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x3}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:07 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="120110ff2505a1a440000102030109027600020156303f0904000001020d00000724060001c2fe05240002000d240f0101040000f7ff3f0083080c241b0700ffff7f9a8000080c241b000401000106c909090905810300040242020904010000020d00000904010102024d000009058202b4c92405800905030200040604d300000000"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x20, 0x9, 0x1, 0x20, 0x9d}, 0xb, &(0x7f0000000140)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0xbe, &(0x7f0000000180)=@string={0xbe, 0x3, "9ee1585024688d1df017e83ccc4e54b2501427f0e05756591858311ca8185f2e743ac89d90fa0518f8a47348f900b2ab8c160fd663c3660d36f059bd40e0593693b59b419f9b9c9b4ece8adbcc34a1df72605ef210b770a42d108e40bfda3fda22572a15a2fd7aae5190c14cd9171244a130ac1f202002ac062e40d846c33459080b4b98b2ad0a2951905d6cac5fe55c0666294703edf0c438efe8161348a29b3f9cfcdc99fa853b4caf4bc23cc0eb9ad498a64cf9ac015aff3f3b87"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4fc}}, {0x60, &(0x7f0000000280)=@string={0x60, 0x3, "a9945de1dbb176872bf594f7d1412526d130fac68ca49136e52b5601b1efe649863f87bfe4ee4f7181920ea6cef0b39ce8543701decf6a67e7409206106bc6d9253804353ecd96a4008a1af6704749274bc2a44d3ee6b9b5e822c57cbff1"}}]}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400e4000000000904d800090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") (async, rerun: 64) syz_usb_control_io$hid(r2, &(0x7f0000000cc0)={0x24, &(0x7f0000000a80)={0x0, 0x22, 0x4e, {0x4e, 0x0, "5752f2c44e1dca5ce5f3c6aa5f683ead50b95f83d33e32778df935fad28cf4d950a5be823e1d059b86c2da8b6a680366edc1e4b3487a7e17efc7c452f77d5c279d7ccecfef86579d8bde08af"}}, &(0x7f0000000b00)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "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"}}, &(0x7f0000000c40)={0x0, 0x22, 0x19, {[@local=@item_4={0x3, 0x2, 0x1, "716637c0"}, @main=@item_4={0x3, 0x0, 0xc, "b4a72a6c"}, @global=@item_4={0x3, 0x1, 0x0, "96960e61"}, @main=@item_4={0x3, 0x0, 0xc, "50670fea"}, @global=@item_4={0x3, 0x1, 0x0, "00503982"}]}}, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x20, 0x1, {0x22, 0x97b}}}}, &(0x7f0000000f80)={0x2c, &(0x7f0000000d00)={0x20, 0x0, 0x82, "473baa9add141a642f3b037f509d1dfb070c1f96cdd7a86c311de1e7149b4774d2500a2d3ce6e22e20ae42816d7d94ecd74e0ea7c525feba864e3ec10750de800c067de7fdca13909898019eaad60e94c11edb9fcd1f3f9abb13ed291f463a0835e6a3d915ac0bb079030e7f285b414e6d948694e558c6be548110edcae2070c272b"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x3a}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000e40)={0x20, 0x1, 0xc6, "5ff0378e709c87a91d8b56b0fb430af837aa09371096297f9816b82cf552b6326a0edb5b1e5ff8aa8df7cf2a481f56a2a4ffebc7da01ff11c839bb6b7f4f0088b96b182c61e201764d07c8bfa3b58c58eec56191b6b0ed353272e70ba7d8ce37027137c8b06a6b88ae004e6b23d6bfd72a216e21057f0f054d0a3bce3183e3692a998a925ca744ed2ee1737cd8dfad6862573bc77ff3a3ce18558dabb8d5a5a8622c6d7dd46aaaa10adb377983f16aa0e804475029b59951d2e6dcece60326278790076dc954"}, &(0x7f0000000f40)={0x20, 0x3, 0x1, 0xfd}}) (async, rerun: 64) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) (rerun: 32) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r3], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r4, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") (async) syz_usb_control_io(r4, &(0x7f0000000500)={0x2c, &(0x7f00000003c0)={0x20, 0xa, 0x78, {0x78, 0x22, "3a65ac2e5a14de1c8188acfc063cb4594e85d39404d59a279cd26478b1442e578dcbccb5688e1fd73a087b4251654c88590f1564a6dcbb4b26f50d7322249fef62d1d950c161bab41b7b6274ce5e1bce217dfc129ac3da4cf2457c9641ee5668774e570b3b900468729eb47da89de6354819bdc68e00"}}, &(0x7f0000000340)={0x0, 0x3, 0x11, @string={0x11, 0x3, "ca29aec461056abc63a4ee948a3a3d"}}, &(0x7f0000000440)={0x0, 0xf, 0x21, {0x5, 0xf, 0x21, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x20, 0x0, 0x7955}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x8, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x1, 0x0, 0x9, 0x81}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x1, 0x5e, 0x81, "ba19340f", "3ec9df71"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x8, 0x40, 0x4, 0x3f, 0x401}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000540)={0x40, 0x13, 0x33, "f7042465094e29440dd9498245dc7a73ce7c3da38e729af3b35cacd1d84f3eb1dbb69c9032e9b4e56b65328aa56ce09494ecbc"}, &(0x7f0000000600)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x400, 0x8}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x3d8}, &(0x7f0000000740)={0x40, 0x9, 0x1}, &(0x7f0000000780)={0x40, 0xb, 0x2, '+`'}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x88e}, &(0x7f0000000800)={0x40, 0x13, 0x6, @local}, &(0x7f0000000840)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000880)={0x40, 0x19, 0x2, "f910"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x7f}}) 09:49:07 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 09:49:07 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 09:49:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x20}, 0x0) 09:49:07 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x11, 0x8003, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1095.165512][T19329] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1095.191864][T19330] UDC core: couldn't find an available UDC or it's busy: -16 [ 1095.199388][T19330] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 09:49:07 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @local}, 0x205}) 09:49:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast2}}) 09:49:07 executing program 0: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x1) 09:49:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, &(0x7f0000000180)=""/136, 0x1a, 0x88, 0x1}, 0x20) 09:49:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x4}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:07 executing program 2: bpf$MAP_CREATE(0x1e, &(0x7f0000003500)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 09:49:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) [ 1095.611868][ T3570] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1095.616407][T19351] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1095.982246][ T3570] usb 6-1: config 0 has too many interfaces: 228, using maximum allowed: 32 [ 1095.991198][ T3570] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 228 [ 1096.000743][ T3570] usb 6-1: config 0 has no interface number 0 [ 1096.007688][ T3570] usb 6-1: config 0 interface 216 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.019177][ T3570] usb 6-1: config 0 interface 216 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1096.032471][ T3570] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1096.041815][ T3570] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.059101][ T3570] usb 6-1: config 0 descriptor?? [ 1096.565058][ T3570] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 1096.580431][ T3570] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.216/0003:0926:3333.0019/input/input24 [ 1096.679833][ T3570] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input216 09:49:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)) 09:49:08 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x4, 0xdd, {0xdd, 0x30, "911eaa5785bda35ccd11833e7055df7d79758f9f789ad208884187aefe409ba23b1f5afe7f8dbf5e31ad181b11b8dcf1a634316f1eafeb55e548657961929d4e357a0a3ebdacd18f516e602c9952f79bb334ffe46682a8ca4f1a2895c533661e13b21ac62fa5c0de38ff177005b813e15bfed3d742543b255fb992a8751576cdae3a1fb53982d82fe7ebec5ee9f7f0a71636f93e7bd1dd633aa01495ab36aaef0c8fc8ed4057ffdd42e3eec287641dfcf4f531662427909d033ba2f436a9ccd448c55920b9d4810a04fb932444cda7e99454bcadc0b5b01164a25a"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x60, 0xf, 0xb, "c7ad019755e850f2b01cec"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000280)={0x20, 0x81, 0x2, '}q'}, &(0x7f00000002c0)={0x20, 0x82, 0x1, 's'}, &(0x7f0000000300)={0x20, 0x83, 0x2, "b7de"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "eee00845"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "6d1d27"}}) 09:49:08 executing program 0: pipe(&(0x7f00000005c0)) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 09:49:08 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x1c}}, 0x0) 09:49:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x5}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x1c, r1, 0x911, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x1c}}, 0x0) [ 1096.794781][ T3563] usb 6-1: USB disconnect, device number 66 [ 1096.906233][T19362] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 09:49:09 executing program 0: pipe(&(0x7f00000005c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x40049409, 0x0) 09:49:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={0x0, 0x2270}}, 0x0) 09:49:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000015c0)={'syztnl1\x00', &(0x7f0000001500)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @multicast1, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@local, 0x1000}]}]}}}}}) 09:49:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x6}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0xe, 0x4, 0x550, 0xffffffff, 0x188, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x480, 0x480, 0x480, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "c5ce"}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, @mcast1, [0x0, 0x0, 0xffffffff]}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@mcast1, @empty, [0x0, 0x0, 0x0, 0xff000000], [], 'pimreg1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xf0, 0x218, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:getty_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 09:49:09 executing program 2: bpf$BPF_BTF_LOAD(0x15, &(0x7f00000004c0)={0x0, 0x0, 0x40, 0x0, 0x1}, 0x20) [ 1097.391957][ T3563] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1097.398815][T19382] x_tables: duplicate underflow at hook 2 [ 1097.409182][T19381] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1097.652303][ T3563] usb 6-1: Using ep0 maxpacket: 32 [ 1097.772292][ T3563] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1097.781515][ T3563] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.798509][ T3563] usb 6-1: config 0 descriptor?? [ 1097.851772][ T3563] gspca_main: sonixb-2.14.0 probing 0c45:60b0 09:49:12 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x4, 0xdd, {0xdd, 0x30, "911eaa5785bda35ccd11833e7055df7d79758f9f789ad208884187aefe409ba23b1f5afe7f8dbf5e31ad181b11b8dcf1a634316f1eafeb55e548657961929d4e357a0a3ebdacd18f516e602c9952f79bb334ffe46682a8ca4f1a2895c533661e13b21ac62fa5c0de38ff177005b813e15bfed3d742543b255fb992a8751576cdae3a1fb53982d82fe7ebec5ee9f7f0a71636f93e7bd1dd633aa01495ab36aaef0c8fc8ed4057ffdd42e3eec287641dfcf4f531662427909d033ba2f436a9ccd448c55920b9d4810a04fb932444cda7e99454bcadc0b5b01164a25a"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x60, 0xf, 0xb, "c7ad019755e850f2b01cec"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000280)={0x20, 0x81, 0x2, '}q'}, &(0x7f00000002c0)={0x20, 0x82, 0x1, 's'}, &(0x7f0000000300)={0x20, 0x83, 0x2, "b7de"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "eee00845"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "6d1d27"}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x4, 0xdd, {0xdd, 0x30, "911eaa5785bda35ccd11833e7055df7d79758f9f789ad208884187aefe409ba23b1f5afe7f8dbf5e31ad181b11b8dcf1a634316f1eafeb55e548657961929d4e357a0a3ebdacd18f516e602c9952f79bb334ffe46682a8ca4f1a2895c533661e13b21ac62fa5c0de38ff177005b813e15bfed3d742543b255fb992a8751576cdae3a1fb53982d82fe7ebec5ee9f7f0a71636f93e7bd1dd633aa01495ab36aaef0c8fc8ed4057ffdd42e3eec287641dfcf4f531662427909d033ba2f436a9ccd448c55920b9d4810a04fb932444cda7e99454bcadc0b5b01164a25a"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x60, 0xf, 0xb, "c7ad019755e850f2b01cec"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000280)={0x20, 0x81, 0x2, '}q'}, &(0x7f00000002c0)={0x20, 0x82, 0x1, 's'}, &(0x7f0000000300)={0x20, 0x83, 0x2, "b7de"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "eee00845"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "6d1d27"}}) (async) [ 1099.988529][ T3570] usb 6-1: USB disconnect, device number 67 09:49:12 executing program 3: pipe(&(0x7f00000005c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x5450, 0x0) 09:49:12 executing program 4: socketpair(0x2, 0x1, 0x3, &(0x7f0000000000)) 09:49:12 executing program 0: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}, 0x38) 09:49:12 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x8940, 0x0) 09:49:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x7}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1100.105425][T19393] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, 0x9, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x12}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x4}]}, 0x34}}, 0x0) 09:49:12 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0xa0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 09:49:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa8201, 0x0) close(r0) 09:49:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x8}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1100.357694][T19402] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 09:49:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="c7ba2995e2a2a7033dbf4e4df85566ee0892f7e98701c35c5a5f310536b41c4756d8025367eac6559b8ecd935e5f3b74379a4061cb3b171c61fa01d03efeb75d3ea59563a20c6db4624b718654bd7e46bb58837739d123be4ba6d09ac48af97bea8bc0478d26f2d4615a6caaba7e21daa21761cc726e7ea0414ea064d07ab839", 0x80}, {&(0x7f0000002300)="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", 0xe41}], 0x2}, 0x0) recvmsg$unix(r1, &(0x7f0000000600)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000280)=""/104, 0x68}], 0x2, &(0x7f0000000580)}, 0x0) 09:49:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000580)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000080)="a4", 0x1}], 0x1}, 0x0) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) dup2(r1, r0) [ 1100.539168][T19408] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1100.553275][ T3570] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1100.802378][ T3570] usb 6-1: Using ep0 maxpacket: 32 [ 1100.932276][ T3570] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1100.941584][ T3570] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.953343][ T3570] usb 6-1: config 0 descriptor?? [ 1100.998122][ T3570] gspca_main: sonixb-2.14.0 probing 0c45:60b0 09:49:13 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x4, 0xdd, {0xdd, 0x30, "911eaa5785bda35ccd11833e7055df7d79758f9f789ad208884187aefe409ba23b1f5afe7f8dbf5e31ad181b11b8dcf1a634316f1eafeb55e548657961929d4e357a0a3ebdacd18f516e602c9952f79bb334ffe46682a8ca4f1a2895c533661e13b21ac62fa5c0de38ff177005b813e15bfed3d742543b255fb992a8751576cdae3a1fb53982d82fe7ebec5ee9f7f0a71636f93e7bd1dd633aa01495ab36aaef0c8fc8ed4057ffdd42e3eec287641dfcf4f531662427909d033ba2f436a9ccd448c55920b9d4810a04fb932444cda7e99454bcadc0b5b01164a25a"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x60, 0xf, 0xb, "c7ad019755e850f2b01cec"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000280)={0x20, 0x81, 0x2, '}q'}, &(0x7f00000002c0)={0x20, 0x82, 0x1, 's'}, &(0x7f0000000300)={0x20, 0x83, 0x2, "b7de"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "eee00845"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "6d1d27"}}) 09:49:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x9, &(0x7f0000000100)="521c4419", 0x4) 09:49:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000480)=0x100) 09:49:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x9}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:13 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 09:49:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) [ 1101.779720][T19416] UDC core: couldn't find an available UDC or it's busy: -16 [ 1101.787397][T19416] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1101.811386][ T3570] usb 6-1: USB disconnect, device number 68 09:49:14 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x80202000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1101.907751][T19423] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, 0x0, &(0x7f0000000300)) 09:49:14 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000700)={0x0, 0x0, 0x1, '/'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:49:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0xc}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:14 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$uinput_user_dev(r0, 0x0, 0x0) 09:49:14 executing program 0: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) write$P9_ROPEN(r0, 0x0, 0x0) [ 1102.309993][T19442] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1102.391975][ T3570] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1102.452144][ T9254] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1102.659344][ T3570] usb 6-1: Using ep0 maxpacket: 32 [ 1102.712103][ T9254] usb 5-1: Using ep0 maxpacket: 8 [ 1102.798156][ T3570] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1102.807654][ T3570] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.809951][T19432] not chained 1120000 origins [ 1102.820669][T19432] CPU: 1 PID: 19432 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16266-gfb61e40b30d1 #0 [ 1102.830854][T19432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.837266][ T3570] usb 6-1: config 0 descriptor?? [ 1102.840933][T19432] Call Trace: [ 1102.840949][T19432] [ 1102.840964][T19432] dump_stack_lvl+0x1c8/0x256 [ 1102.856777][T19432] dump_stack+0x1a/0x1c [ 1102.860979][T19432] kmsan_internal_chain_origin+0x78/0x120 [ 1102.866872][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1102.872038][T19432] ? ___sys_recvmsg+0xf4/0x870 [ 1102.876870][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1102.879540][ T9254] usb 5-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 1102.882034][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1102.882110][T19432] ? should_fail+0x3f/0x7e0 [ 1102.882155][T19432] ? __stack_depot_save+0x21/0x4b0 [ 1102.891281][ T9254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.897061][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1102.897127][T19432] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1102.897190][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1102.897248][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1102.911475][ T9254] usb 5-1: config 0 descriptor?? [ 1102.914846][T19432] __msan_chain_origin+0xbd/0x140 [ 1102.914913][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1102.914984][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1102.915044][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1102.915108][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1102.915165][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1102.915231][T19432] do_recvmmsg+0x55f/0x10a0 [ 1102.915303][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1102.915369][T19432] ? __x64_sys_recvmmsg+0x108/0x4b0 [ 1102.936789][ T3570] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1102.937716][T19432] ? do_syscall_64+0x3d/0xb0 [ 1102.999525][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1103.004594][T19432] do_syscall_64+0x3d/0xb0 [ 1103.009037][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.014984][T19432] RIP: 0033:0x7f153c889109 [ 1103.019506][T19432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1103.038916][ T9254] pwc: Philips PCA645VC USB webcam detected. [ 1103.039146][T19432] RSP: 002b:00007f153d97d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1103.039196][T19432] RAX: ffffffffffffffda RBX: 00007f153c99c030 RCX: 00007f153c889109 [ 1103.061547][T19432] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1103.069562][T19432] RBP: 00007f153c8e305d R08: 0000000000000000 R09: 0000000000000000 [ 1103.077567][T19432] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1103.085569][T19432] R13: 00007f153cecfb1f R14: 00007f153d97d300 R15: 0000000000022000 [ 1103.093587][T19432] [ 1103.099594][T19432] Uninit was stored to memory at: [ 1103.105291][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1103.110026][T19432] do_recvmmsg+0x55f/0x10a0 [ 1103.114769][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1103.119872][T19432] do_syscall_64+0x3d/0xb0 [ 1103.124554][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.130492][T19432] [ 1103.132988][T19432] Uninit was stored to memory at: [ 1103.138082][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1103.142925][T19432] do_recvmmsg+0x55f/0x10a0 [ 1103.147482][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1103.152750][T19432] do_syscall_64+0x3d/0xb0 [ 1103.157213][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.163362][T19432] [ 1103.165703][T19432] Uninit was stored to memory at: [ 1103.170820][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1103.175736][T19432] do_recvmmsg+0x55f/0x10a0 [ 1103.180293][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1103.185569][T19432] do_syscall_64+0x3d/0xb0 [ 1103.190036][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.196185][T19432] [ 1103.198520][T19432] Uninit was stored to memory at: [ 1103.203792][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1103.208520][T19432] do_recvmmsg+0x55f/0x10a0 [ 1103.213282][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1103.218370][T19432] do_syscall_64+0x3d/0xb0 [ 1103.223009][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.228948][T19432] [ 1103.231282][T19432] Uninit was stored to memory at: [ 1103.236566][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1103.241294][T19432] do_recvmmsg+0x55f/0x10a0 [ 1103.246038][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1103.251118][T19432] do_syscall_64+0x3d/0xb0 [ 1103.255773][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.261840][T19432] [ 1103.264170][T19432] Uninit was stored to memory at: [ 1103.269265][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1103.274165][T19432] do_recvmmsg+0x55f/0x10a0 [ 1103.278780][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1103.283985][T19432] do_syscall_64+0x3d/0xb0 [ 1103.288445][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.294544][T19432] [ 1103.296871][T19432] Uninit was stored to memory at: [ 1103.302175][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1103.306903][T19432] do_recvmmsg+0x55f/0x10a0 [ 1103.311456][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1103.316706][T19432] do_syscall_64+0x3d/0xb0 [ 1103.321167][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.327238][T19432] [ 1103.329571][T19432] Local variable msg_sys created at: [ 1103.335034][T19432] do_recvmmsg+0x5f/0x10a0 [ 1103.339526][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1103.442367][ T9254] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1103.502179][ T9254] pwc: recv_control_msg error -32 req 02 val 2700 [ 1103.567199][T19432] not chained 1130000 origins [ 1103.567226][T19432] CPU: 0 PID: 19432 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16266-gfb61e40b30d1 #0 [ 1103.567275][T19432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.567301][T19432] Call Trace: [ 1103.567314][T19432] [ 1103.598537][T19432] dump_stack_lvl+0x1c8/0x256 [ 1103.603277][T19432] dump_stack+0x1a/0x1c [ 1103.607481][T19432] kmsan_internal_chain_origin+0x78/0x120 [ 1103.613274][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1103.618447][T19432] ? ___sys_recvmsg+0xf4/0x870 [ 1103.623266][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1103.628437][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1103.634311][T19432] ? should_fail+0x3f/0x7e0 [ 1103.638874][T19432] ? __stack_depot_save+0x21/0x4b0 [ 1103.644063][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1103.649230][T19432] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1103.655540][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1103.660709][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1103.666681][T19432] __msan_chain_origin+0xbd/0x140 [ 1103.671741][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1103.676489][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1103.681651][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1103.687532][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1103.692695][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1103.698564][T19432] do_recvmmsg+0x55f/0x10a0 [ 1103.703214][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1103.708396][T19432] ? __x64_sys_recvmmsg+0x108/0x4b0 [ 1103.713656][T19432] ? do_syscall_64+0x3d/0xb0 [ 1103.718308][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1103.723403][T19432] do_syscall_64+0x3d/0xb0 [ 1103.727895][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.733819][T19432] RIP: 0033:0x7f153c889109 [ 1103.738256][T19432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1103.758037][T19432] RSP: 002b:00007f153d97d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1103.766662][T19432] RAX: ffffffffffffffda RBX: 00007f153c99c030 RCX: 00007f153c889109 [ 1103.774676][T19432] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1103.782684][T19432] RBP: 00007f153c8e305d R08: 0000000000000000 R09: 0000000000000000 [ 1103.790684][T19432] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1103.798685][T19432] R13: 00007f153cecfb1f R14: 00007f153d97d300 R15: 0000000000022000 [ 1103.806705][T19432] [ 1103.809944][ C0] vkms_vblank_simulate: vblank timer overrun [ 1103.817460][T19432] Uninit was stored to memory at: [ 1103.822734][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1103.827605][T19432] do_recvmmsg+0x55f/0x10a0 [ 1103.832249][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1103.837340][T19432] do_syscall_64+0x3d/0xb0 [ 1103.841939][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.847945][T19432] [ 1103.850284][T19432] Uninit was stored to memory at: [ 1103.855541][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1103.860335][T19432] do_recvmmsg+0x55f/0x10a0 [ 1103.865045][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1103.870125][T19432] do_syscall_64+0x3d/0xb0 [ 1103.874736][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.880738][T19432] [ 1103.883216][T19432] Uninit was stored to memory at: [ 1103.888331][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1103.893287][T19432] do_recvmmsg+0x55f/0x10a0 [ 1103.897839][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1103.903075][T19432] do_syscall_64+0x3d/0xb0 [ 1103.907544][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.913680][T19432] [ 1103.916015][T19432] Uninit was stored to memory at: [ 1103.921198][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1103.926128][T19432] do_recvmmsg+0x55f/0x10a0 [ 1103.930683][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1103.935875][T19432] do_syscall_64+0x3d/0xb0 [ 1103.940340][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.946461][T19432] [ 1103.948799][T19432] Uninit was stored to memory at: [ 1103.954044][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1103.958837][T19432] do_recvmmsg+0x55f/0x10a0 [ 1103.963524][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1103.968605][T19432] do_syscall_64+0x3d/0xb0 [ 1103.973221][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.979319][T19432] [ 1103.981850][T19432] Uninit was stored to memory at: [ 1103.986947][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1103.991822][T19432] do_recvmmsg+0x55f/0x10a0 [ 1103.996439][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1104.001524][T19432] do_syscall_64+0x3d/0xb0 [ 1104.006175][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1104.012237][T19432] [ 1104.014571][T19432] Uninit was stored to memory at: [ 1104.019660][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1104.024548][T19432] do_recvmmsg+0x55f/0x10a0 [ 1104.029142][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1104.034447][T19432] do_syscall_64+0x3d/0xb0 [ 1104.038912][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1104.045037][T19432] [ 1104.047373][T19432] Local variable msg_sys created at: [ 1104.052872][T19432] do_recvmmsg+0x5f/0x10a0 [ 1104.057344][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1104.074294][ T9254] pwc: recv_control_msg error -71 req 04 val 1000 [ 1104.092631][ T9254] pwc: recv_control_msg error -71 req 04 val 1300 [ 1104.122102][ T9254] pwc: recv_control_msg error -71 req 04 val 1400 [ 1104.142168][ T9254] pwc: recv_control_msg error -71 req 02 val 2000 [ 1104.172181][ T9254] pwc: recv_control_msg error -71 req 02 val 2100 [ 1104.202050][ T9254] pwc: recv_control_msg error -71 req 04 val 1500 [ 1104.222024][ T9254] pwc: recv_control_msg error -71 req 02 val 2500 [ 1104.242305][ T9254] pwc: recv_control_msg error -71 req 02 val 2400 [ 1104.262181][ T9254] pwc: recv_control_msg error -71 req 02 val 2600 [ 1104.286197][ T9254] pwc: recv_control_msg error -71 req 02 val 2900 [ 1104.322177][ T9254] pwc: recv_control_msg error -71 req 02 val 2800 [ 1104.331277][T19432] not chained 1140000 origins [ 1104.336236][T19432] CPU: 0 PID: 19432 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16266-gfb61e40b30d1 #0 [ 1104.346555][T19432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.356645][T19432] Call Trace: [ 1104.359951][T19432] [ 1104.362915][T19432] dump_stack_lvl+0x1c8/0x256 [ 1104.367733][T19432] dump_stack+0x1a/0x1c [ 1104.371933][T19432] kmsan_internal_chain_origin+0x78/0x120 [ 1104.377734][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1104.382902][T19432] ? ___sys_recvmsg+0xf4/0x870 [ 1104.387726][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1104.392890][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1104.398784][T19432] ? should_fail+0x3f/0x7e0 [ 1104.403324][T19432] ? __stack_depot_save+0x21/0x4b0 [ 1104.408492][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1104.413668][T19432] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1104.419974][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1104.425142][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1104.431129][T19432] __msan_chain_origin+0xbd/0x140 [ 1104.436219][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1104.440977][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1104.446150][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1104.452027][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1104.457197][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1104.463094][T19432] do_recvmmsg+0x55f/0x10a0 [ 1104.467803][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1104.472984][T19432] ? __x64_sys_recvmmsg+0x108/0x4b0 [ 1104.478241][T19432] ? do_syscall_64+0x3d/0xb0 [ 1104.482893][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1104.487989][T19432] do_syscall_64+0x3d/0xb0 [ 1104.492454][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1104.498386][T19432] RIP: 0033:0x7f153c889109 [ 1104.502844][T19432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1104.522581][T19432] RSP: 002b:00007f153d97d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1104.531029][T19432] RAX: ffffffffffffffda RBX: 00007f153c99c030 RCX: 00007f153c889109 [ 1104.539025][T19432] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1104.547030][T19432] RBP: 00007f153c8e305d R08: 0000000000000000 R09: 0000000000000000 [ 1104.555022][T19432] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1104.563007][T19432] R13: 00007f153cecfb1f R14: 00007f153d97d300 R15: 0000000000022000 [ 1104.571010][T19432] [ 1104.574207][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.582868][T19432] Uninit was stored to memory at: [ 1104.587985][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1104.593333][T19432] do_recvmmsg+0x55f/0x10a0 [ 1104.597894][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1104.603084][T19432] do_syscall_64+0x3d/0xb0 [ 1104.607569][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1104.613644][T19432] [ 1104.615978][T19432] Uninit was stored to memory at: [ 1104.621219][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1104.626198][T19432] do_recvmmsg+0x55f/0x10a0 [ 1104.630783][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1104.636025][T19432] do_syscall_64+0x3d/0xb0 [ 1104.640516][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1104.646650][T19432] [ 1104.648981][T19432] Uninit was stored to memory at: [ 1104.654227][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1104.659028][T19432] do_recvmmsg+0x55f/0x10a0 [ 1104.663740][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1104.668833][T19432] do_syscall_64+0x3d/0xb0 [ 1104.673460][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1104.679497][T19432] [ 1104.681981][T19432] Uninit was stored to memory at: [ 1104.687079][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1104.691945][T19432] do_recvmmsg+0x55f/0x10a0 [ 1104.696563][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1104.701834][T19432] do_syscall_64+0x3d/0xb0 [ 1104.706300][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1104.712460][T19432] [ 1104.714804][T19432] Uninit was stored to memory at: [ 1104.719896][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1104.724779][T19432] do_recvmmsg+0x55f/0x10a0 [ 1104.729400][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1104.734639][T19432] do_syscall_64+0x3d/0xb0 [ 1104.739109][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1104.745232][T19432] [ 1104.747571][T19432] Uninit was stored to memory at: [ 1104.752810][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1104.757543][T19432] do_recvmmsg+0x55f/0x10a0 [ 1104.762299][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1104.767395][T19432] do_syscall_64+0x3d/0xb0 [ 1104.772098][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1104.778113][T19432] [ 1104.780448][T19432] Uninit was stored to memory at: [ 1104.785645][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1104.790390][T19432] do_recvmmsg+0x55f/0x10a0 [ 1104.795208][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1104.800290][T19432] do_syscall_64+0x3d/0xb0 [ 1104.804985][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1104.811068][T19432] [ 1104.813550][T19432] Local variable msg_sys created at: [ 1104.818852][T19432] do_recvmmsg+0x5f/0x10a0 [ 1104.823482][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1104.828793][ T9254] pwc: recv_control_msg error -71 req 04 val 1100 [ 1104.862089][ T9254] pwc: recv_control_msg error -71 req 04 val 1200 [ 1104.870939][ T9254] pwc: Registered as video71. [ 1104.878137][ T9254] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 1104.908416][ T9254] usb 5-1: USB disconnect, device number 100 09:49:17 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000277f3120456007180000000d6ede69adc38e515dbab4d680f3e9fd010902"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, &(0x7f0000000480)={0x40, 0x2a, 0xde, {0xde, 0x22, "b08c36016f064735209f2ff64ea26eb53c25cd27b4e067f41c5e39ad2e01bd5b772b51fa3c4ad52668988d4f08b39583440bedfa50609e8f9fcef1289b4fb5a0a5ae7d83f83f64a26f71d0de2fe16b2d7a0b562677397718984108b63d0eb8e806eccf89f474062e7b6ceafd911252e4513cada3cd259c15f0cd513267efc7c80e8a5d54ad170c15cf4221b006ad23ad136a8feb1dbc274a55f7174b70c2d1f711ccc03cde2ca5640bfcde976c88f63027a8ead9e74abc53cd747acd5a2422bb7b061ff35f58325d98c68a480a2216b1ff792fb3d8e82619020ad83f"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, &(0x7f0000000600)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x8, "406283bd"}, @main=@item_4={0x3, 0x0, 0xc, "8e7efa03"}, @local]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x1f, 0x1, {0x22, 0x22d}}}}, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="400da9000000ecae91ef9d27fbf775ecb993facbd21314b792e68eec9dcc0e37c76710742d098f75013354eac08893d886c80c703f39d1f9c97a550dfdea6a0c3c2e3ad06894706cb599f6f0bc3e945322a6a253d7da30afe22d37db76988b2e2e03b34fe2c02175e59310e6a728a71c74bdde3b5c4d79b2b8ea20c326169bb15bcbceb2182144b69be97e401e2284bd58b70915076ac7fd31e76c89d7fb34697441daa062f23d72e3e227809a952b"], &(0x7f0000000780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000007c0)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x1, 0xa4, "ca923372ccd5beb756c8d1ef83d4bde141c0d4203e6f17c0b31342df38fe438fdd9230dc3c2a7901921affb6bd84ec6d459c688080dbe8fa3e319659d3c2ed3e7edd6329985f35664e7ebf7e342edf395d9ce32a2e95ccc31f5c43532f3ef3bd28f5191def164516f0210e05c0ff8509161f6d75199d72bcf6c4c9b4c0104d0025e2148912fe0edf4581071968a94b5ca058204962fc628448fc658814d2a41ebdfbefca"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x6}}) syz_usb_connect$uac1(0x5, 0xc5, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000106b1d01014000010203010902b300030180a0020904000000010100000a24010600000201020c2407010000001d05e6539f0b2406060502138e0500510c24070506004066965b587409240302000304025622240306ff0102028008240403008054960904010000010200000904010101010200000a240201c002e12085db0d24020109030000d3ce9a53fc0905010900028107b007250180010300090402000001020000090402010101020000098582090004816a1f072501c1078500"], &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x5, 0xf7, 0x1, 0x40, 0x8}, 0xef, &(0x7f0000000180)={0x5, 0xf, 0xef, 0x6, [@generic={0x95, 0x10, 0x6, "0432c0935ed54284ea2dbc8e929928fa882730cf983d2b813b4f85730883f8bf4f780289b347406ad7d4c5fa8daedc059875d3386a2fb041f19ecd698df407e0d30a650e91ab2dd845aae0679c0419ef1c70be9cf0d4ae83bfc8a6c2d85bcffff87df25c507b53caa4a27773e613afa125020f7415d83484596d2ead79bdb8cfb3fef202a596d6c7089e932a4cfc9c118c37"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x81, 0xbe}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "11f6c13cbee1c068fee45bd5337887c1"}, @generic={0x2d, 0x10, 0x9, "35851a509261b4c652f7ff3a606602e61623d6ceb938baba11ca000fb0d8595f41d0666cd2b1cc4b526f"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x3, 0x4b}, @ptm_cap={0x3}]}, 0x2, [{0x41, &(0x7f0000000280)=@string={0x41, 0x3, "60f789d02867c1c1b5d9b964d7e59b2d0c3a2bd101c0c5116ef9323d815daeb38757446abe9c6708513c3adbffbc6f8b9bfa1cdb1e6112341d544f487d2018"}}, {0x98, &(0x7f00000003c0)=@string={0x98, 0x3, "f4d0b1fef9cb9babd5508105669404371ebb47883626f9739f284807d714fb87c0f748472de9d08b83608cf963c8e17d11b3f877185527278f590c20c8d09097010332c342702dcbaecaf3fd8188105b1bd54588a3f0e8c86ad1b309024313dabe964856de5c6d69b34b70ece4a4ef7ab96cf838ae1bec46b88a65dec6a265f009a6dbeed015937f4e879fcfc88aed836d77190766b1"}}]}) 09:49:17 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAME(r0, &(0x7f0000000000)={0x7}, 0xfffffeaf) write$P9_RMKNOD(r0, 0x0, 0x0) 09:49:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0xe}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:17 executing program 3: r0 = getpgrp(0xffffffffffffffff) r1 = gettid() tgkill(r1, r0, 0x0) 09:49:17 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAME(r0, &(0x7f0000000000)={0x7}, 0xfffffeaf) write$P9_RAUTH(r0, 0x0, 0x0) [ 1105.021371][ T3570] usb 6-1: USB disconnect, device number 69 [ 1105.138514][T19455] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1105.517426][T19432] not chained 1150000 origins [ 1105.522435][T19432] CPU: 0 PID: 19432 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16266-gfb61e40b30d1 #0 [ 1105.532642][T19432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1105.542729][T19432] Call Trace: [ 1105.546034][T19432] [ 1105.548980][T19432] dump_stack_lvl+0x1c8/0x256 [ 1105.553711][T19432] dump_stack+0x1a/0x1c [ 1105.557912][T19432] kmsan_internal_chain_origin+0x78/0x120 [ 1105.563708][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1105.568874][T19432] ? ___sys_recvmsg+0xf4/0x870 [ 1105.573677][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1105.578862][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1105.584742][T19432] ? should_fail+0x3f/0x7e0 [ 1105.589324][T19432] ? __stack_depot_save+0x21/0x4b0 [ 1105.594492][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1105.599665][T19432] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1105.605969][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1105.611151][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1105.617027][T19432] __msan_chain_origin+0xbd/0x140 [ 1105.622113][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1105.626860][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1105.632025][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1105.637895][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1105.643069][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1105.648953][T19432] do_recvmmsg+0x55f/0x10a0 [ 1105.653525][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1105.658710][T19432] ? __x64_sys_recvmmsg+0x108/0x4b0 [ 1105.663975][T19432] ? do_syscall_64+0x3d/0xb0 [ 1105.668654][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1105.673755][T19432] do_syscall_64+0x3d/0xb0 [ 1105.678224][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1105.684162][T19432] RIP: 0033:0x7f153c889109 [ 1105.688603][T19432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1105.708255][T19432] RSP: 002b:00007f153d97d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1105.716719][T19432] RAX: ffffffffffffffda RBX: 00007f153c99c030 RCX: 00007f153c889109 [ 1105.724729][T19432] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1105.732745][T19432] RBP: 00007f153c8e305d R08: 0000000000000000 R09: 0000000000000000 [ 1105.740753][T19432] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1105.748765][T19432] R13: 00007f153cecfb1f R14: 00007f153d97d300 R15: 0000000000022000 [ 1105.756797][T19432] [ 1105.760118][ C0] vkms_vblank_simulate: vblank timer overrun [ 1105.767559][T19432] Uninit was stored to memory at: [ 1105.772859][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1105.777648][T19432] do_recvmmsg+0x55f/0x10a0 [ 1105.782302][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1105.787466][T19432] do_syscall_64+0x3d/0xb0 [ 1105.792064][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1105.798003][T19432] [ 1105.800333][T19432] Uninit was stored to memory at: [ 1105.805578][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1105.810363][T19432] do_recvmmsg+0x55f/0x10a0 [ 1105.815064][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1105.820142][T19432] do_syscall_64+0x3d/0xb0 [ 1105.824746][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1105.830749][T19432] [ 1105.833223][T19432] Uninit was stored to memory at: [ 1105.838309][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1105.843333][T19432] do_recvmmsg+0x55f/0x10a0 [ 1105.847886][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1105.853113][T19432] do_syscall_64+0x3d/0xb0 [ 1105.857574][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1105.863703][T19432] [ 1105.866034][T19432] Uninit was stored to memory at: [ 1105.871150][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1105.876093][T19432] do_recvmmsg+0x55f/0x10a0 [ 1105.880649][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1105.885868][T19432] do_syscall_64+0x3d/0xb0 [ 1105.890332][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1105.896454][T19432] [ 1105.898792][T19432] Uninit was stored to memory at: [ 1105.904033][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1105.908821][T19432] do_recvmmsg+0x55f/0x10a0 [ 1105.913530][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1105.918610][T19432] do_syscall_64+0x3d/0xb0 [ 1105.923215][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1105.929208][T19432] [ 1105.931536][T19432] Uninit was stored to memory at: [ 1105.936795][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1105.941525][T19432] do_recvmmsg+0x55f/0x10a0 [ 1105.946269][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1105.951352][T19432] do_syscall_64+0x3d/0xb0 [ 1105.955999][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1105.962119][T19432] [ 1105.964456][T19432] Uninit was stored to memory at: [ 1105.969548][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1105.974432][T19432] do_recvmmsg+0x55f/0x10a0 [ 1105.979050][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1105.984284][T19432] do_syscall_64+0x3d/0xb0 [ 1105.988747][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1105.994887][T19432] [ 1105.997220][T19432] Local variable msg_sys created at: [ 1106.002608][T19432] do_recvmmsg+0x5f/0x10a0 [ 1106.007079][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1106.012457][ T3570] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1106.237255][T19432] not chained 1160000 origins [ 1106.242839][T19432] CPU: 0 PID: 19432 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16266-gfb61e40b30d1 #0 [ 1106.253034][T19432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.263111][T19432] Call Trace: [ 1106.266401][T19432] [ 1106.269434][T19432] dump_stack_lvl+0x1c8/0x256 [ 1106.274143][T19432] dump_stack+0x1a/0x1c [ 1106.278336][T19432] kmsan_internal_chain_origin+0x78/0x120 [ 1106.284119][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1106.289282][T19432] ? ___sys_recvmsg+0xf4/0x870 [ 1106.294086][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1106.299248][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1106.305208][T19432] ? should_fail+0x3f/0x7e0 [ 1106.309724][T19432] ? __stack_depot_save+0x21/0x4b0 [ 1106.314867][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1106.320030][T19432] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1106.326331][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1106.331470][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1106.337319][T19432] __msan_chain_origin+0xbd/0x140 [ 1106.342405][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1106.347150][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1106.352315][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1106.358177][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1106.363344][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1106.369208][T19432] do_recvmmsg+0x55f/0x10a0 [ 1106.373778][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1106.378956][T19432] ? __x64_sys_recvmmsg+0x108/0x4b0 [ 1106.384215][T19432] ? do_syscall_64+0x3d/0xb0 [ 1106.388850][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1106.393934][T19432] do_syscall_64+0x3d/0xb0 [ 1106.398394][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1106.404311][T19432] RIP: 0033:0x7f153c889109 [ 1106.408774][T19432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1106.428412][T19432] RSP: 002b:00007f153d97d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1106.436850][T19432] RAX: ffffffffffffffda RBX: 00007f153c99c030 RCX: 00007f153c889109 [ 1106.444880][T19432] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1106.452881][T19432] RBP: 00007f153c8e305d R08: 0000000000000000 R09: 0000000000000000 [ 1106.460887][T19432] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1106.468889][T19432] R13: 00007f153cecfb1f R14: 00007f153d97d300 R15: 0000000000022000 [ 1106.476920][T19432] [ 1106.480153][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.487433][T19432] Uninit was stored to memory at: [ 1106.492834][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1106.497564][T19432] do_recvmmsg+0x55f/0x10a0 [ 1106.502252][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1106.507422][T19432] do_syscall_64+0x3d/0xb0 [ 1106.512060][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1106.518044][T19432] [ 1106.520376][T19432] Uninit was stored to memory at: [ 1106.525825][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1106.530553][T19432] do_recvmmsg+0x55f/0x10a0 [ 1106.535361][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1106.540460][T19432] do_syscall_64+0x3d/0xb0 [ 1106.545129][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1106.551090][T19432] [ 1106.553563][T19432] Uninit was stored to memory at: [ 1106.558722][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1106.563550][T19432] do_recvmmsg+0x55f/0x10a0 [ 1106.568102][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1106.573322][T19432] do_syscall_64+0x3d/0xb0 [ 1106.577845][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1106.583929][T19432] [ 1106.586271][T19432] Uninit was stored to memory at: [ 1106.591372][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1106.596403][T19432] do_recvmmsg+0x55f/0x10a0 [ 1106.600964][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1106.606294][T19432] do_syscall_64+0x3d/0xb0 [ 1106.610806][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1106.616893][T19432] [ 1106.619229][T19432] Uninit was stored to memory at: [ 1106.624502][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1106.629301][T19432] do_recvmmsg+0x55f/0x10a0 [ 1106.634005][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1106.639079][T19432] do_syscall_64+0x3d/0xb0 [ 1106.643708][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1106.649664][T19432] [ 1106.652119][T19432] Uninit was stored to memory at: [ 1106.657209][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1106.662139][T19432] do_recvmmsg+0x55f/0x10a0 [ 1106.666694][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1106.671915][T19432] do_syscall_64+0x3d/0xb0 [ 1106.676432][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1106.682512][T19432] [ 1106.684844][T19432] Uninit was stored to memory at: [ 1106.689938][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1106.694943][T19432] do_recvmmsg+0x55f/0x10a0 [ 1106.699499][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1106.704723][T19432] do_syscall_64+0x3d/0xb0 [ 1106.709230][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1106.715275][T19432] [ 1106.717612][T19432] Local variable msg_sys created at: [ 1106.723039][T19432] do_recvmmsg+0x5f/0x10a0 [ 1106.727560][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1106.771917][ T3570] usb 6-1: Using ep0 maxpacket: 32 [ 1106.832497][ T3570] usb 6-1: too many configurations: 222, using maximum allowed: 8 [ 1106.910576][T19432] not chained 1170000 origins [ 1106.915409][T19432] CPU: 0 PID: 19432 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16266-gfb61e40b30d1 #0 [ 1106.925597][T19432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.935674][T19432] Call Trace: [ 1106.938952][T19432] [ 1106.941881][T19432] dump_stack_lvl+0x1c8/0x256 [ 1106.946610][T19432] dump_stack+0x1a/0x1c [ 1106.950794][T19432] kmsan_internal_chain_origin+0x78/0x120 [ 1106.956555][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1106.961716][T19432] ? ___sys_recvmsg+0xf4/0x870 [ 1106.966540][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1106.971703][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1106.977588][T19432] ? should_fail+0x3f/0x7e0 [ 1106.982113][T19432] ? __stack_depot_save+0x21/0x4b0 [ 1106.987274][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1106.992415][T19432] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1106.998708][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1107.003855][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1107.009713][T19432] __msan_chain_origin+0xbd/0x140 [ 1107.014797][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1107.019538][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1107.024700][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1107.030584][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1107.035726][T19432] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1107.041590][T19432] do_recvmmsg+0x55f/0x10a0 [ 1107.046144][T19432] ? kmsan_get_metadata+0x33/0x220 [ 1107.051314][T19432] ? __x64_sys_recvmmsg+0x108/0x4b0 [ 1107.056571][T19432] ? do_syscall_64+0x3d/0xb0 [ 1107.061198][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1107.066275][T19432] do_syscall_64+0x3d/0xb0 [ 1107.070736][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1107.076674][T19432] RIP: 0033:0x7f153c889109 [ 1107.081098][T19432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1107.100771][T19432] RSP: 002b:00007f153d97d168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1107.109225][T19432] RAX: ffffffffffffffda RBX: 00007f153c99c030 RCX: 00007f153c889109 [ 1107.117215][T19432] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1107.125213][T19432] RBP: 00007f153c8e305d R08: 0000000000000000 R09: 0000000000000000 [ 1107.133222][T19432] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1107.141217][T19432] R13: 00007f153cecfb1f R14: 00007f153d97d300 R15: 0000000000022000 [ 1107.149209][T19432] [ 1107.152391][ C0] vkms_vblank_simulate: vblank timer overrun [ 1107.159801][T19432] Uninit was stored to memory at: [ 1107.165710][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1107.170480][T19432] do_recvmmsg+0x55f/0x10a0 [ 1107.175205][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1107.180342][T19432] do_syscall_64+0x3d/0xb0 [ 1107.184952][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1107.190891][T19432] [ 1107.193402][T19432] Uninit was stored to memory at: [ 1107.198607][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1107.203462][T19432] do_recvmmsg+0x55f/0x10a0 [ 1107.208009][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1107.213271][T19432] do_syscall_64+0x3d/0xb0 [ 1107.217734][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1107.223824][T19432] [ 1107.226211][T19432] Uninit was stored to memory at: [ 1107.231286][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1107.236196][T19432] do_recvmmsg+0x55f/0x10a0 [ 1107.240756][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1107.246021][T19432] do_syscall_64+0x3d/0xb0 [ 1107.250479][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1107.256559][T19432] [ 1107.258954][T19432] Uninit was stored to memory at: [ 1107.264185][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1107.269194][T19432] do_recvmmsg+0x55f/0x10a0 [ 1107.273891][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1107.279003][T19432] do_syscall_64+0x3d/0xb0 [ 1107.283650][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1107.289581][T19432] [ 1107.292068][T19432] Uninit was stored to memory at: [ 1107.297158][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1107.302027][T19432] do_recvmmsg+0x55f/0x10a0 [ 1107.306582][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1107.311846][T19432] do_syscall_64+0x3d/0xb0 [ 1107.316306][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1107.322577][T19432] [ 1107.324910][T19432] Uninit was stored to memory at: [ 1107.330027][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1107.334883][T19432] do_recvmmsg+0x55f/0x10a0 [ 1107.339434][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1107.344683][T19432] do_syscall_64+0x3d/0xb0 [ 1107.349175][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1107.355237][T19432] [ 1107.357565][T19432] Uninit was stored to memory at: [ 1107.362828][T19432] ___sys_recvmsg+0x5cf/0x870 [ 1107.367551][T19432] do_recvmmsg+0x55f/0x10a0 [ 1107.372311][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1107.377448][T19432] do_syscall_64+0x3d/0xb0 [ 1107.381998][T19432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1107.387947][T19432] [ 1107.390281][T19432] Local variable msg_sys created at: [ 1107.395742][T19432] do_recvmmsg+0x5f/0x10a0 [ 1107.400211][T19432] __x64_sys_recvmmsg+0x3a7/0x4b0 [ 1107.452061][ T3570] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1107.459894][ T3570] usb 6-1: can't read configurations, error -61 09:49:19 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 09:49:19 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x101000, 0x12c) 09:49:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0xf}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r2 = accept$inet6(r1, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x5451, 0x0) 09:49:19 executing program 4: pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003, 0xffffffffffffffff) [ 1107.662087][ T3570] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1107.692800][T19470] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1107.696091][ C1] net_ratelimit: 25 callbacks suppressed [ 1107.696155][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 09:49:19 executing program 3: request_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0) 09:49:19 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000100)={0x0, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @loopback}}}, 0x108) [ 1107.809273][T19474] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 1107.934481][ T3570] usb 6-1: Using ep0 maxpacket: 32 [ 1107.988251][ T3570] usb 6-1: too many configurations: 222, using maximum allowed: 8 09:49:20 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000277f3120456007180000000d6ede69adc38e515dbab4d680f3e9fd010902"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, &(0x7f0000000480)={0x40, 0x2a, 0xde, {0xde, 0x22, "b08c36016f064735209f2ff64ea26eb53c25cd27b4e067f41c5e39ad2e01bd5b772b51fa3c4ad52668988d4f08b39583440bedfa50609e8f9fcef1289b4fb5a0a5ae7d83f83f64a26f71d0de2fe16b2d7a0b562677397718984108b63d0eb8e806eccf89f474062e7b6ceafd911252e4513cada3cd259c15f0cd513267efc7c80e8a5d54ad170c15cf4221b006ad23ad136a8feb1dbc274a55f7174b70c2d1f711ccc03cde2ca5640bfcde976c88f63027a8ead9e74abc53cd747acd5a2422bb7b061ff35f58325d98c68a480a2216b1ff792fb3d8e82619020ad83f"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, &(0x7f0000000600)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x8, "406283bd"}, @main=@item_4={0x3, 0x0, 0xc, "8e7efa03"}, @local]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x1f, 0x1, {0x22, 0x22d}}}}, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="400da9000000ecae91ef9d27fbf775ecb993facbd21314b792e68eec9dcc0e37c76710742d098f75013354eac08893d886c80c703f39d1f9c97a550dfdea6a0c3c2e3ad06894706cb599f6f0bc3e945322a6a253d7da30afe22d37db76988b2e2e03b34fe2c02175e59310e6a728a71c74bdde3b5c4d79b2b8ea20c326169bb15bcbceb2182144b69be97e401e2284bd58b70915076ac7fd31e76c89d7fb34697441daa062f23d72e3e227809a952b"], &(0x7f0000000780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000007c0)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x1, 0xa4, "ca923372ccd5beb756c8d1ef83d4bde141c0d4203e6f17c0b31342df38fe438fdd9230dc3c2a7901921affb6bd84ec6d459c688080dbe8fa3e319659d3c2ed3e7edd6329985f35664e7ebf7e342edf395d9ce32a2e95ccc31f5c43532f3ef3bd28f5191def164516f0210e05c0ff8509161f6d75199d72bcf6c4c9b4c0104d0025e2148912fe0edf4581071968a94b5ca058204962fc628448fc658814d2a41ebdfbefca"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x6}}) (async) syz_usb_connect$uac1(0x5, 0xc5, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000106b1d01014000010203010902b300030180a0020904000000010100000a24010600000201020c2407010000001d05e6539f0b2406060502138e0500510c24070506004066965b587409240302000304025622240306ff0102028008240403008054960904010000010200000904010101010200000a240201c002e12085db0d24020109030000d3ce9a53fc0905010900028107b007250180010300090402000001020000090402010101020000098582090004816a1f072501c1078500"], &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x5, 0xf7, 0x1, 0x40, 0x8}, 0xef, &(0x7f0000000180)={0x5, 0xf, 0xef, 0x6, [@generic={0x95, 0x10, 0x6, "0432c0935ed54284ea2dbc8e929928fa882730cf983d2b813b4f85730883f8bf4f780289b347406ad7d4c5fa8daedc059875d3386a2fb041f19ecd698df407e0d30a650e91ab2dd845aae0679c0419ef1c70be9cf0d4ae83bfc8a6c2d85bcffff87df25c507b53caa4a27773e613afa125020f7415d83484596d2ead79bdb8cfb3fef202a596d6c7089e932a4cfc9c118c37"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x81, 0xbe}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "11f6c13cbee1c068fee45bd5337887c1"}, @generic={0x2d, 0x10, 0x9, "35851a509261b4c652f7ff3a606602e61623d6ceb938baba11ca000fb0d8595f41d0666cd2b1cc4b526f"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x3, 0x4b}, @ptm_cap={0x3}]}, 0x2, [{0x41, &(0x7f0000000280)=@string={0x41, 0x3, "60f789d02867c1c1b5d9b964d7e59b2d0c3a2bd101c0c5116ef9323d815daeb38757446abe9c6708513c3adbffbc6f8b9bfa1cdb1e6112341d544f487d2018"}}, {0x98, &(0x7f00000003c0)=@string={0x98, 0x3, "f4d0b1fef9cb9babd5508105669404371ebb47883626f9739f284807d714fb87c0f748472de9d08b83608cf963c8e17d11b3f877185527278f590c20c8d09097010332c342702dcbaecaf3fd8188105b1bd54588a3f0e8c86ad1b309024313dabe964856de5c6d69b34b70ece4a4ef7ab96cf838ae1bec46b88a65dec6a265f009a6dbeed015937f4e879fcfc88aed836d77190766b1"}}]}) 09:49:20 executing program 0: pipe(&(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 09:49:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x60}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:20 executing program 3: add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='syz', 0x0) 09:49:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000140)) 09:49:20 executing program 4: openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) [ 1108.149449][ T3570] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1108.157388][ T3570] usb 6-1: can't read configurations, error -71 09:49:20 executing program 2: add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) [ 1108.211482][T19485] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1108.225090][ T3570] usb usb6-port1: attempt power cycle 09:49:20 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='syz', r0) 09:49:20 executing program 0: socketpair(0x28, 0x0, 0x7fff, 0x0) 09:49:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x88}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=@gettclass={0x24}, 0x24}}, 0x0) 09:49:20 executing program 2: r0 = epoll_create(0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) [ 1108.582007][T19500] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1108.673082][ T3570] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1108.762934][ T3570] usb 6-1: Using ep0 maxpacket: 32 [ 1108.804340][ T3570] usb 6-1: too many configurations: 222, using maximum allowed: 8 [ 1108.952212][ T3570] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1108.960042][ T3570] usb 6-1: can't read configurations, error -61 [ 1109.119835][ T3570] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1109.222735][ T3570] usb 6-1: Using ep0 maxpacket: 32 [ 1109.262560][ T3570] usb 6-1: too many configurations: 222, using maximum allowed: 8 [ 1109.382233][ T3570] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1109.390075][ T3570] usb 6-1: can't read configurations, error -61 [ 1109.397180][ T3570] usb usb6-port1: unable to enumerate USB device 09:49:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) 09:49:23 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000277f3120456007180000000d6ede69adc38e515dbab4d680f3e9fd010902"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, &(0x7f0000000480)={0x40, 0x2a, 0xde, {0xde, 0x22, "b08c36016f064735209f2ff64ea26eb53c25cd27b4e067f41c5e39ad2e01bd5b772b51fa3c4ad52668988d4f08b39583440bedfa50609e8f9fcef1289b4fb5a0a5ae7d83f83f64a26f71d0de2fe16b2d7a0b562677397718984108b63d0eb8e806eccf89f474062e7b6ceafd911252e4513cada3cd259c15f0cd513267efc7c80e8a5d54ad170c15cf4221b006ad23ad136a8feb1dbc274a55f7174b70c2d1f711ccc03cde2ca5640bfcde976c88f63027a8ead9e74abc53cd747acd5a2422bb7b061ff35f58325d98c68a480a2216b1ff792fb3d8e82619020ad83f"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, &(0x7f0000000600)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x8, "406283bd"}, @main=@item_4={0x3, 0x0, 0xc, "8e7efa03"}, @local]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x1f, 0x1, {0x22, 0x22d}}}}, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="400da9000000ecae91ef9d27fbf775ecb993facbd21314b792e68eec9dcc0e37c76710742d098f75013354eac08893d886c80c703f39d1f9c97a550dfdea6a0c3c2e3ad06894706cb599f6f0bc3e945322a6a253d7da30afe22d37db76988b2e2e03b34fe2c02175e59310e6a728a71c74bdde3b5c4d79b2b8ea20c326169bb15bcbceb2182144b69be97e401e2284bd58b70915076ac7fd31e76c89d7fb34697441daa062f23d72e3e227809a952b"], &(0x7f0000000780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000007c0)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x1, 0xa4, "ca923372ccd5beb756c8d1ef83d4bde141c0d4203e6f17c0b31342df38fe438fdd9230dc3c2a7901921affb6bd84ec6d459c688080dbe8fa3e319659d3c2ed3e7edd6329985f35664e7ebf7e342edf395d9ce32a2e95ccc31f5c43532f3ef3bd28f5191def164516f0210e05c0ff8509161f6d75199d72bcf6c4c9b4c0104d0025e2148912fe0edf4581071968a94b5ca058204962fc628448fc658814d2a41ebdfbefca"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x6}}) (async) syz_usb_connect$uac1(0x5, 0xc5, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000106b1d01014000010203010902b300030180a0020904000000010100000a24010600000201020c2407010000001d05e6539f0b2406060502138e0500510c24070506004066965b587409240302000304025622240306ff0102028008240403008054960904010000010200000904010101010200000a240201c002e12085db0d24020109030000d3ce9a53fc0905010900028107b007250180010300090402000001020000090402010101020000098582090004816a1f072501c1078500"], &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x5, 0xf7, 0x1, 0x40, 0x8}, 0xef, &(0x7f0000000180)={0x5, 0xf, 0xef, 0x6, [@generic={0x95, 0x10, 0x6, "0432c0935ed54284ea2dbc8e929928fa882730cf983d2b813b4f85730883f8bf4f780289b347406ad7d4c5fa8daedc059875d3386a2fb041f19ecd698df407e0d30a650e91ab2dd845aae0679c0419ef1c70be9cf0d4ae83bfc8a6c2d85bcffff87df25c507b53caa4a27773e613afa125020f7415d83484596d2ead79bdb8cfb3fef202a596d6c7089e932a4cfc9c118c37"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x81, 0xbe}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "11f6c13cbee1c068fee45bd5337887c1"}, @generic={0x2d, 0x10, 0x9, "35851a509261b4c652f7ff3a606602e61623d6ceb938baba11ca000fb0d8595f41d0666cd2b1cc4b526f"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x3, 0x4b}, @ptm_cap={0x3}]}, 0x2, [{0x41, &(0x7f0000000280)=@string={0x41, 0x3, "60f789d02867c1c1b5d9b964d7e59b2d0c3a2bd101c0c5116ef9323d815daeb38757446abe9c6708513c3adbffbc6f8b9bfa1cdb1e6112341d544f487d2018"}}, {0x98, &(0x7f00000003c0)=@string={0x98, 0x3, "f4d0b1fef9cb9babd5508105669404371ebb47883626f9739f284807d714fb87c0f748472de9d08b83608cf963c8e17d11b3f877185527278f590c20c8d09097010332c342702dcbaecaf3fd8188105b1bd54588a3f0e8c86ad1b309024313dabe964856de5c6d69b34b70ece4a4ef7ab96cf838ae1bec46b88a65dec6a265f009a6dbeed015937f4e879fcfc88aed836d77190766b1"}}]}) 09:49:23 executing program 3: r0 = epoll_create(0x402) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)) 09:49:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r2 = accept$inet6(r1, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_CMAP(r4, 0x5451, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x5451, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x43, 0x0, &(0x7f0000000080)) 09:49:23 executing program 2: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 09:49:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x300}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1111.359929][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 1111.373987][T19514] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r0, 0x32c83) 09:49:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10021, 0x0) 09:49:23 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/block/loop0', 0x121a02, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x1, 0x12) 09:49:23 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:49:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x500}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:23 executing program 3: mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1) getxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 09:49:23 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f00000005c0)=@framed={{}, [@alu, @kfunc, @map_idx]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1111.702708][ T3557] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1111.856366][T19529] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1111.965499][ T3557] usb 6-1: Using ep0 maxpacket: 32 [ 1112.006168][ T3557] usb 6-1: too many configurations: 222, using maximum allowed: 8 [ 1112.146895][ T3557] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1112.154838][ T3557] usb 6-1: can't read configurations, error -61 [ 1112.312005][ T3557] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1112.551998][ T3557] usb 6-1: Using ep0 maxpacket: 32 [ 1112.596180][ T3557] usb 6-1: too many configurations: 222, using maximum allowed: 8 [ 1112.732259][ T3557] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1112.740195][ T3557] usb 6-1: can't read configurations, error -61 [ 1112.747896][ T3557] usb usb6-port1: attempt power cycle [ 1113.161988][ T3557] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1113.272262][ T3557] usb 6-1: Using ep0 maxpacket: 32 [ 1113.332440][ T3557] usb 6-1: too many configurations: 222, using maximum allowed: 8 [ 1113.462351][ T3557] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1113.470114][ T3557] usb 6-1: can't read configurations, error -61 [ 1113.635706][ T3557] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1113.742240][ T3557] usb 6-1: Using ep0 maxpacket: 32 [ 1113.782573][ T3557] usb 6-1: too many configurations: 222, using maximum allowed: 8 [ 1113.927157][ T3557] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1113.935113][ T3557] usb 6-1: can't read configurations, error -61 [ 1113.942100][ T3557] usb usb6-port1: unable to enumerate USB device 09:49:26 executing program 4: prctl$PR_SET_NAME(0xf, &(0x7f0000000580)='-+') 09:49:26 executing program 2: bpf$MAP_CREATE(0x15, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 09:49:26 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) 09:49:26 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0) 09:49:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x600}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:26 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000277f0902120001000000000904000000c03aca00"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_disconnect(r2) [ 1114.516163][T19537] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:26 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000002a00)='ns/user\x00') 09:49:26 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x62) 09:49:26 executing program 4: getresuid(&(0x7f0000000380), 0x0, 0x0) [ 1114.563564][T19542] binder: 19540:19542 unknown command 0 [ 1114.569500][T19542] binder: 19540:19542 ioctl c0306201 20000100 returned -22 09:49:26 executing program 3: socketpair(0x1, 0x0, 0x1f, &(0x7f00000000c0)) 09:49:26 executing program 0: io_uring_setup(0x0, &(0x7f0000000440)) 09:49:26 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x4402, 0x0) 09:49:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x700}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:26 executing program 2: r0 = syz_io_uring_setup(0x4027, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x12, r0, 0x8000000) [ 1114.902056][ T3557] usb 6-1: new high-speed USB device number 78 using dummy_hcd 09:49:27 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 09:49:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000a40)='highspeed\x00', 0xa) 09:49:27 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x1) [ 1115.053257][T19562] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1115.093973][ T3557] usb 6-1: device descriptor read/64, error 18 [ 1115.362122][ T3557] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1115.581972][ T3557] usb 6-1: device descriptor read/64, error 18 [ 1115.702476][ T3557] usb usb6-port1: attempt power cycle [ 1116.112189][ T3557] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1116.202381][ T3557] usb 6-1: Invalid ep0 maxpacket: 2 [ 1116.351938][ T3557] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1116.442291][ T3557] usb 6-1: Invalid ep0 maxpacket: 2 [ 1116.448345][ T3557] usb usb6-port1: unable to enumerate USB device 09:49:29 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x40000, 0x0) 09:49:29 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000277f0902120001000000000904000000c03aca00"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000277f0902120001000000000904000000c03aca00"], 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") (async) syz_usb_disconnect(r2) (async) 09:49:29 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r1 = getpid() r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)) 09:49:29 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, 0x0) 09:49:29 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x9, &(0x7f0000000100)=@framed={{}, [@map_val, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @call, @exit]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xea, &(0x7f0000000340)=""/234, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:49:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x800}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1117.674458][T19571] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:29 executing program 0: syz_clone(0xa140000, 0x0, 0x0, 0x0, 0x0, 0x0) 09:49:29 executing program 3: bpf$PROG_LOAD_XDP(0xf, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:49:29 executing program 4: syz_clone(0x4012000, 0x0, 0x0, 0x0, 0x0, 0x0) 09:49:29 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0x801c581f, 0x0) 09:49:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x900}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:30 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x5, 0xea, &(0x7f0000000100)=""/234, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:49:30 executing program 3: syz_clone(0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)="e9") sched_rr_get_interval(0x0, &(0x7f0000000000)) [ 1118.022335][ T3557] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1118.093397][T19591] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1118.212590][ T3557] usb 6-1: device descriptor read/64, error 18 [ 1118.482275][ T3557] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1118.671988][ T3557] usb 6-1: device descriptor read/64, error 18 [ 1118.792623][ T3557] usb usb6-port1: attempt power cycle [ 1119.222045][ T3557] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1119.312321][ T3557] usb 6-1: Invalid ep0 maxpacket: 2 [ 1119.471893][ T3557] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1119.582231][ T3557] usb 6-1: Invalid ep0 maxpacket: 2 [ 1119.588174][ T3557] usb usb6-port1: unable to enumerate USB device 09:49:32 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000277f0902120001000000000904000000c03aca00"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_disconnect(r2) 09:49:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0xc00}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:32 executing program 0: socketpair(0x9, 0x0, 0x0, &(0x7f00000005c0)) 09:49:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{}, "3823c8104ce9f75c", "7a05bb8f7d713618f2fbf68b39ed32ba", "d034a203", "d34f47c33c28d1fa"}, 0x28) 09:49:32 executing program 2: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) 09:49:32 executing program 3: r0 = epoll_create(0x5) epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0x9, &(0x7f0000000100)={[0x8001]}, 0x8) [ 1120.832367][T19604] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:32 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000240), 0x18) 09:49:32 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001540)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000016c0)) 09:49:32 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0xc41, 0x0) 09:49:32 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 09:49:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0xe00}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:33 executing program 0: bpf$PROG_LOAD_XDP(0x14, 0x0, 0x0) [ 1121.152034][ T3570] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1121.294802][T19621] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1121.341985][ T3570] usb 6-1: device descriptor read/64, error 18 [ 1121.612040][ T3570] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1121.801904][ T3570] usb 6-1: device descriptor read/64, error 18 [ 1121.922356][ T3570] usb usb6-port1: attempt power cycle [ 1122.331911][ T3570] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1122.422888][ T3570] usb 6-1: Invalid ep0 maxpacket: 2 [ 1122.572019][ T3570] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1122.662184][ T3570] usb 6-1: Invalid ep0 maxpacket: 2 [ 1122.667956][ T3570] usb usb6-port1: unable to enumerate USB device 09:49:35 executing program 5: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x11dc, &(0x7f0000000600)={[{0x1000, 0x4e00, "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"}, {0xd, 0x4e00, "e038f162e3b49165c0b477016d"}, {0xdd, 0x4e00, "9830fdc4963a102a2dca9d86930bfd5dc8d356a97357d2b754e67d335f4a2b6e1a5e2c7dbfa8a862807155b71c1a6283edbd641edf69d0e3816894e350dc7070050ece35d0166b7191458c0d3c889b99b6dd53e7527cbe52c646f1565de4474639c7d8230d583e058bc71d763de8010b7d500d69efe5bc94439fcd5d4729daff7f5ac03b7cb60f26b05e468fabce373d2e07aba15cc9584426b35e659cf621d261ff79d74b610cb498d5caed135c6fbce4aaebc7d94df0cb44746a66248b3d2323680799c730125f9ec8d6e1e28065adcc6fb60d1471b6cfcae84d93bb"}, {0x17, 0x4e00, "05bca29bce34f5cfebe32cad25da516d9d497f99f505d3"}, {0xbe, 0x4e00, "c2e2bc2bbade8204f7dfa973286f11879636e53eef7ba0ba6b14a8de92cac364b0b4c2247f105a91c2be08b7f7f8ce8f3ef374c6fb44555060e5d6712310459098b442f30db3f57f7d40ae41b3b373351a28aaf9750f55ad0a969e07bd74a0c566e2b53749cf391439562def98a7308c89f02c16ccb0c1caaa7fc279faa118f38ca7b5e4b3e7ba5b388f684d29f99e85fce4582cbaeb1954310ac708105eead52e63aadf554db7b8f5c0bd3541b3087c481dc5593819241f600b5fba9336"}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:49:35 executing program 3: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffb) keyctl$search(0x15, r0, 0x0, 0x0, 0xfffffffffffffffa) 09:49:35 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000004e00), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f00000050c0)) 09:49:35 executing program 4: r0 = syz_io_uring_setup(0x66e1, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) 09:49:35 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x80) 09:49:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0xf00}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1123.928903][T19627] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:36 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0xfb, &(0x7f0000000100)=""/251, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:49:36 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:49:36 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x0, 0xffffff9f}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0xfb, &(0x7f0000000100)=""/251, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:49:36 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000000100)=""/251, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:49:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {0x6000}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:36 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x1, 0xfb, &(0x7f0000000100)=""/251, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd09) [ 1124.298178][T19646] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:36 executing program 5: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x11dc, &(0x7f0000000600)={[{0x1000, 0x4e00, "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"}, {0xd, 0x4e00, "e038f162e3b49165c0b477016d"}, {0xdd, 0x4e00, "9830fdc4963a102a2dca9d86930bfd5dc8d356a97357d2b754e67d335f4a2b6e1a5e2c7dbfa8a862807155b71c1a6283edbd641edf69d0e3816894e350dc7070050ece35d0166b7191458c0d3c889b99b6dd53e7527cbe52c646f1565de4474639c7d8230d583e058bc71d763de8010b7d500d69efe5bc94439fcd5d4729daff7f5ac03b7cb60f26b05e468fabce373d2e07aba15cc9584426b35e659cf621d261ff79d74b610cb498d5caed135c6fbce4aaebc7d94df0cb44746a66248b3d2323680799c730125f9ec8d6e1e28065adcc6fb60d1471b6cfcae84d93bb"}, {0x17, 0x4e00, "05bca29bce34f5cfebe32cad25da516d9d497f99f505d3"}, {0xbe, 0x4e00, "c2e2bc2bbade8204f7dfa973286f11879636e53eef7ba0ba6b14a8de92cac364b0b4c2247f105a91c2be08b7f7f8ce8f3ef374c6fb44555060e5d6712310459098b442f30db3f57f7d40ae41b3b373351a28aaf9750f55ad0a969e07bd74a0c566e2b53749cf391439562def98a7308c89f02c16ccb0c1caaa7fc279faa118f38ca7b5e4b3e7ba5b388f684d29f99e85fce4582cbaeb1954310ac708105eead52e63aadf554db7b8f5c0bd3541b3087c481dc5593819241f600b5fba9336"}]}) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:49:36 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x1, 0xfb, &(0x7f0000000100)=""/251, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r0}, 0xc) 09:49:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001600)={&(0x7f0000000080)=@abs, 0x8, 0x0}, 0x0) 09:49:36 executing program 0: r0 = msgget(0x3, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff}}) 09:49:36 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000001640)=""/65, 0xfffffffffffffe70}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f00000002c0)=""/69, 0x45}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x5, 0x0, 0x0) 09:49:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:36 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) [ 1124.628983][T19654] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:36 executing program 0: open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file1\x00') 09:49:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{0x0}, {0x0}, {&(0x7f00000002c0)='\f', 0x1}], 0x3}, 0x0) 09:49:36 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x8000000) 09:49:36 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000080)=@raw=[@jmp], &(0x7f0000000000)='GPL\x00', 0x200, 0xd3, &(0x7f0000000100)=""/211, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:49:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x4}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1125.076998][T19675] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:37 executing program 5: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x11dc, &(0x7f0000000600)={[{0x1000, 0x4e00, "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"}, {0xd, 0x4e00, "e038f162e3b49165c0b477016d"}, {0xdd, 0x4e00, "9830fdc4963a102a2dca9d86930bfd5dc8d356a97357d2b754e67d335f4a2b6e1a5e2c7dbfa8a862807155b71c1a6283edbd641edf69d0e3816894e350dc7070050ece35d0166b7191458c0d3c889b99b6dd53e7527cbe52c646f1565de4474639c7d8230d583e058bc71d763de8010b7d500d69efe5bc94439fcd5d4729daff7f5ac03b7cb60f26b05e468fabce373d2e07aba15cc9584426b35e659cf621d261ff79d74b610cb498d5caed135c6fbce4aaebc7d94df0cb44746a66248b3d2323680799c730125f9ec8d6e1e28065adcc6fb60d1471b6cfcae84d93bb"}, {0x17, 0x4e00, "05bca29bce34f5cfebe32cad25da516d9d497f99f505d3"}, {0xbe, 0x4e00, "c2e2bc2bbade8204f7dfa973286f11879636e53eef7ba0ba6b14a8de92cac364b0b4c2247f105a91c2be08b7f7f8ce8f3ef374c6fb44555060e5d6712310459098b442f30db3f57f7d40ae41b3b373351a28aaf9750f55ad0a969e07bd74a0c566e2b53749cf391439562def98a7308c89f02c16ccb0c1caaa7fc279faa118f38ca7b5e4b3e7ba5b388f684d29f99e85fce4582cbaeb1954310ac708105eead52e63aadf554db7b8f5c0bd3541b3087c481dc5593819241f600b5fba9336"}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x11dc, &(0x7f0000000600)={[{0x1000, 0x4e00, "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"}, {0xd, 0x4e00, "e038f162e3b49165c0b477016d"}, {0xdd, 0x4e00, "9830fdc4963a102a2dca9d86930bfd5dc8d356a97357d2b754e67d335f4a2b6e1a5e2c7dbfa8a862807155b71c1a6283edbd641edf69d0e3816894e350dc7070050ece35d0166b7191458c0d3c889b99b6dd53e7527cbe52c646f1565de4474639c7d8230d583e058bc71d763de8010b7d500d69efe5bc94439fcd5d4729daff7f5ac03b7cb60f26b05e468fabce373d2e07aba15cc9584426b35e659cf621d261ff79d74b610cb498d5caed135c6fbce4aaebc7d94df0cb44746a66248b3d2323680799c730125f9ec8d6e1e28065adcc6fb60d1471b6cfcae84d93bb"}, {0x17, 0x4e00, "05bca29bce34f5cfebe32cad25da516d9d497f99f505d3"}, {0xbe, 0x4e00, "c2e2bc2bbade8204f7dfa973286f11879636e53eef7ba0ba6b14a8de92cac364b0b4c2247f105a91c2be08b7f7f8ce8f3ef374c6fb44555060e5d6712310459098b442f30db3f57f7d40ae41b3b373351a28aaf9750f55ad0a969e07bd74a0c566e2b53749cf391439562def98a7308c89f02c16ccb0c1caaa7fc279faa118f38ca7b5e4b3e7ba5b388f684d29f99e85fce4582cbaeb1954310ac708105eead52e63aadf554db7b8f5c0bd3541b3087c481dc5593819241f600b5fba9336"}]}) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="0016a6000000a9f418679f8c6c50cc729fd8b20f82a0ab6207e0d029e48ef358a43b27699424450aa858dd4c2a2e31dd08c81eb097c191edae89f228a9f007bcdb94310baa85a75624ff070000ea9e3df969427a927e073298327d99777590fbfb0c64740f31390c16689a7056df74801c7d9578f2d5780525c14ca21533a5aa1d773696b1337fb0f3290500367a1507969215ec2832e52b4288a3fc3ccde4ed0000000000000000000000000902406924027a365c37dab9026e3c6ae55e063398d4bafee556f9720a00d54295c62f0d895c4cdb9ede9289ddaf75bde8bcf433dec04f4cdba92486a06cf9c526a0247a5b7deb5f2baff8f58f2621e098bf3b612a95cc274a1904b8b65b8c28759adbf54484997be6c886c029c83bbfe1fd39d7153caf8f8157035fb63210256745d8f5cfa0ab66afedeede075a3442cd9ecd9004684942462d02e78fffa1476a5f857306238c61f71edb29d7fd8222a3049865e15fd1ff166aa7189cae47b6f9dc20ed91c7a8092b5c1e62ff40"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 09:49:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8}, 0x48) 09:49:37 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x13) ptrace(0x10, r0) ptrace(0x420e, r0) 09:49:37 executing program 4: socket$inet6(0xa, 0x0, 0x1ff) 09:49:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x3b}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) [ 1125.284595][T19680] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:37 executing program 0: r0 = syz_usb_connect(0x0, 0x5, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xaf, 0xce, 0x8f, 0x20, 0x1199, 0x68aa, 0xc8da, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbd, 0x0, 0x0, 0xff, 0xff, 0xff, 0x0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "bc1ac7"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x3f, 0x0, 0x401, 0x7c}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xff, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0xfa, 0x3}, @acm={0x4, 0x24, 0x2, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}]}]}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x40, 0x4, 0xae, {0xae, 0x9, "1faa2463521490554c93b11d72710815e1fbc333312f73f1428054db788fc0429010370b9258d4123bdc634152957a8a83060350e1f3d107724bfa411c015e5ed182f1080430dcc4af5c6a27ec57226ece8c7751355f326187642ba2d1d705023cd1f77c41950c4671f97c6eab963b8098bb5b8c85f4ce9d5aca45d4456bf0881ad00da04ebe930535dede5077523143f10c222eaa358e9961cbb86e939387c972a4fcdc875cc094f23512c1"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}, &(0x7f0000000680)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x4, 0x8, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x3, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x7, 0xffff}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x2, 0x0, 0x8, "fdb80652", "b62dce6f"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0xf2, 0x94, 0xaf, 0xab, 0x23, 0x3}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000780)={0x0, 0x15, 0xe4, "559b9366f14f9636cd1728af5e52263acb7f5e34253be05d0d1fa1a917e0d879cfd8b384599268be8ed7d2763ec13534583d2cd366bda8a0174637132654972cfa9995a076dfcda11ec6dd12487a1d724009d665c33f7f4327f2ba6b138b06a8b4e7d838ca3cca3b9f0b078945a03dab7f29e3a23f85dbf2e5749ebe6693e76ccaf1676cda87780da8901d6ac159e34e55754b89578b30877819cf4a07ece25f6e7f85ddd8a88ea481f483eac346f247f6d0f64082b2f06b178ef3c60b161a2d423f93669171c0fbebfbe48250ec1e7e6fd24966d83eecf9c60ed4c341cc58c2305465a7"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x6, 0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x1, 0xa7c29c916e57301e}}, 0xfffffffffffffffc, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "b627"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "f1c7"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x3a}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0xf8}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00170000000045901f609f6e690c8eb42fe63d755d4b08cc828e923df600ee6e3ce01891d0ce621fa586366ac3c19aa1208f6d8518c4069ad4a84764cf005103f517c3ec923345e0ba5762f3648c7ff1c5fbd7860ca8514b2bf8aa92a13ba25d2685867b14ac"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r3], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r4, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, &(0x7f00000001c0)={0x20, 0x21, 0x4f, {0x4f, 0xe, "871ffd63c2b8b65e97bd8339dd731e325fb4e38348031e4037abb928f9e36a95c98e8e19df2b0a56fd4ad62d2d077be462a6fc0ad7fb6c47f4b249181b0310e8d7757d339e2adaaddeea2bbac3"}}, &(0x7f0000000240)={0x0, 0x3, 0x55, @string={0x55, 0x3, "daa58f4dddc11aaf49058184935c0a6dcbdb7b4e440a8adab7c0e4a3f22069c6e490fd39d1e3153d2513e7a36faa386c8b8c2e1b2f39e9e0d7cc95b85d6517c38daa5196e281dc08bab3cee3a580ef767d2f20"}}, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "010ed3c6"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0xa83}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x40, 0x17, 0x21, "1f13209a365e41ca4611b2ff6d96141e68ff304aaf25ffb91bcb740841644c406b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000400)={0x20, 0x1, 0xc2, "35759181547c434db62ac4472e099dd250552a93be977b16f4a5570cc135ca33fcc0893e16624fbe6379c133c2453333dcaa275361ed564f74576110ebc0afb31291acbf0cc4886e47636cc457ca61e90d1dbcf860251c13024d1c0ac51b7280fe3a74e3591069ce7f5bef968006d5025ad8f38988383848b67335a3f7f0d0bdf6c1d94472776f87e5ebe7b74815fde62ea930aeb04ed2c9b234bafaf153670d38a2175993a487aa72a4febd53d9f2b046b80c13b297776b748555f85af8b19f7b87"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x99}}) 09:49:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x3b, 0x9}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x4c}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:37 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x13) ptrace(0x10, r0) ptrace(0x420e, r0) [ 1125.589409][T19696] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1125.634162][T19697] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1125.673278][T19700] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x3b, 0x9}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1125.813507][ T3570] usb 1-1: new high-speed USB device number 35 using dummy_hcd 09:49:38 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000002c0), 0x12) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:49:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{0x14}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:38 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x13) ptrace(0x10, r0) ptrace(0x420e, r0) 09:49:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x3b}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1125.915909][T19706] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1126.036922][T19711] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1126.076130][T19710] netlink: 'syz-executor.4': attribute type 11 has an invalid length. 09:49:38 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x13) ptrace(0x420e, r0) [ 1126.173597][ T3570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.185341][ T3570] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1126.198549][ T3570] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1126.207887][ T3570] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:49:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x3b}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1126.268665][ T3570] usb 1-1: config 0 descriptor?? [ 1126.392167][ T113] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1126.456753][T19723] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1126.637185][ T113] usb 6-1: Using ep0 maxpacket: 32 [ 1126.734865][ T3570] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 1126.751412][ T3570] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001A/input/input26 [ 1126.772341][ T113] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1126.781913][ T113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.795782][ T113] usb 6-1: config 0 descriptor?? [ 1126.838179][ T113] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1126.857192][ T3570] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1127.271016][ T113] usb 6-1: USB disconnect, device number 90 [ 1127.384998][T19693] UDC core: couldn't find an available UDC or it's busy: -16 [ 1127.392707][T19693] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1127.410325][ T3563] usb 1-1: USB disconnect, device number 35 09:49:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0xff600000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:40 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x13) ptrace(0x420e, r0) 09:49:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:40 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r2 = openat$cgroup_procs(r1, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000002c0), 0x12) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:49:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io(r2, &(0x7f0000000ac0)={0x2c, &(0x7f0000000940)={0x0, 0x1, 0x8f, {0x8f, 0xc, "483b229167f8c7ab61fe47e91a62b341dcac35db15527a32166d750706ec0079d28bcaf128198b8fa84712413311ff2a339c1328046287428bee2b2bfa5b9b9026dc10e5c6d6a41ad7e63d137bfbe872e18fe41960cfd5e0e861df4096741fa125fb1f14dca1ddf9111a71334f13dba24b93353cb2646b721bf52e118d6bc1ab0c60151cbcac754985a30da379"}}, &(0x7f0000000a00)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "e7f3c0c9667e82224eab3ec07a45580f1a73e2777172e82eef568e39000a35c892b16c290059879c193665a077d2fe3537eae09a5bb023c6aab68815b18b4a6d78a3e5cd26a70580b184a8c1f38c9fc16599455f259df25a715ca2bd0e1d751a0983c82023672f5aa6a4820b0d3241a805f57eb2f7b412235254641261"}}, &(0x7f0000000200)={0x0, 0xf, 0x3b, {0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x3, 0xf000, 0x4, [0x141b0, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "f133a62c78191fd12d487765bd16c8d1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3f, 0x7f, 0x5, 0x20}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x1f, 0x8, "86c3618b", "72eedd85"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x18, 0x6, 0xed, 0x7, 0x7d0, 0x1000}}}, &(0x7f0000002440)={0x84, &(0x7f0000000b40)={0x40, 0x13, 0x1b, "7c7b4e9008440cbdb12f9137f0776600869e3d511de58d46d16aa5"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000bc0)={0x0, 0x8, 0x1}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x100, 0x8}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x8001}, &(0x7f0000001d00)={0x40, 0x9, 0x1}, &(0x7f0000001d40)={0x40, 0xb, 0x2, "719c"}, &(0x7f0000002240)={0x40, 0xf, 0x2, 0x372}, &(0x7f0000002280)={0x40, 0x13, 0x6, @remote}, &(0x7f00000022c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000002300)={0x40, 0x19, 0x2, "3dd7"}, &(0x7f0000002340)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000002380)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000023c0)={0x40, 0x1e, 0x1}, &(0x7f0000002400)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000000c0)=0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000340)={0x20, 0x12, 0x7c, {0x7c, 0x7, "23e9d7e2c7ff4298d74ca16d4e6f4c596dd134b395c3337af98f9e2b51836d4b23222918249590b6145777b9ef82c6994746f19fdda6f29096d0712c085c589caec2e6a3c2128329c4ac0913cd4b52786b84dcb9e6ad66e2b11ff1d3df063d487611837ad8516f9fa7eaad6dcff956ebce9affceaec0e0abe19d"}}, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], &(0x7f00000001c0)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0xe, 0xfff7}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x45, 0x81, "a36a9db8", "dd64b5ec"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfe, 0x2, 0x65, 0x80, 0xa4, 0x0, 0x81}}}, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x20, 0x17, 0x11, "3187ac88f822c6be0f83f55b9c5eb5057e"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x400, 0x4, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000600)={0x40, 0xb, 0x2, "d7b5"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x13, 0x6, @random="9cdbbb265c3f"}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="04886c962d5c"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "d8ee"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x5}}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000220200000000000000000000800100000010000080001"], 0x2c}}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000d00)={{r4}, "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"}) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, &(0x7f0000001d80)={0x0, 0x24, 0xe7, {0xe7, 0x23, "41bc3c8b5a5cd80c90414cf9119a4e8556429d4eeab6be453a9bf72ea1848595711c68ef83ebd5a3e17ea169eabd899944bec5621028d748037fb37acc5fd21d73265307b76b8c08edf828a942f44aed45dc56b6de36b30ab83882ae33d8dec74a9ac1b89c1646795a89db78ffc3fc12b0b2f7ca2e1ea17e8876de38e0f805adcf048ab38d367b7a5f626cb9e0f01613d9e8e4d8c7d821f74b6db02cfc4e4a7d3b27933b1cb58b0c212056efbd581fa02c9f4bb7217a13a568b35b4cc4efc962275324e817315dbc64551da12638610f68874836944e1be7166ddf61f20032894b74c89664"}}, &(0x7f0000001e80)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "76176abb406e3c84e4daf17a6de4fe2d460115dea60835bde564d5bf15d94534ae09c4991956a1fed18815e9b4e0510dd011ca217f1c9bfd79c0a73849d5725f8a25d651bed9a54c1a4396541d3c5178cb6c2d84aa341083acc9858572b6dfadca8a39d2953152a6c905100b36fcc0ca55cfc42b479156222069bba3030d16b114eb9180cb67fe457d02d31a599916bee92f4b7d662c89f6cc463c341f05e8ef"}}, &(0x7f0000001f40)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0x7, "81ecf7fd"}, @global=@item_012={0x0, 0x1, 0x1}, @local=@item_4={0x3, 0x2, 0x5, "06127bf6"}, @global=@item_012={0x1, 0x1, 0x7, 'H'}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x2, 0x2, 0x3, "8731"}, @global=@item_4={0x3, 0x1, 0xbfb9416eb334e1a1, "ef230806"}]}}, &(0x7f0000001f80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0xc55}}}}, &(0x7f0000002200)={0x2c, &(0x7f0000002000)={0x40, 0xe, 0x9f, "c754f101e8b34baeae825d80064c1b1dda122e459ecb1ced49c1d9e7bc208d174f7c1df9af53a69affa49c42cbf0e34a6575b12806d9bb1b45d98dc9791db2ce38e196d5729443ffc292a66e6320fcad324b90bec934c845b0841e06713d4b34a4489287c70dd6ee8e322461e817c63d0cc3676912b09ed4f3700b2079e93da80ee0b66f16163c84663500eea9bd3a17b727d4ecd417abeb4f58dd6e147c23"}, &(0x7f00000020c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002100)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002140)={0x20, 0x1, 0x75, "89d9ef257ae5ee27eff2df5cad65562d07f4b9931959def0424175c64f3d62c28d5cb8244e13b8272ab942f6ca61a9eafcf599b2c7727f36b4212cf92859614869826b7348249c7e39f98576668ad3cc3dc4036029b9bb821db39310424656103c9ab469b6124a2189e0eafa65a3d793abb4ce7926"}, &(0x7f00000021c0)={0x20, 0x3, 0x1, 0x7}}) [ 1127.995311][T19725] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1128.050968][T19733] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1128.054011][T19730] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:40 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x13) ptrace(0x420e, r0) 09:49:40 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getpeername$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) mmap(&(0x7f0000809000/0x1000)=nil, 0x1000, 0x200000a, 0x10, r0, 0xb8479000) sendto$inet6(r0, &(0x7f0000000100)="cd", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @private0}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x6, 0x0, 0x3, 0x2, 0x1f, 0x5}, 0x20) close(r0) 09:49:40 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000002c0), 0x12) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) write$cgroup_pid(r4, &(0x7f00000002c0), 0x12) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 09:49:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0xff600000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x2}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1128.412193][ T9254] usb 1-1: new high-speed USB device number 36 using dummy_hcd 09:49:40 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) [ 1128.484123][T19753] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1128.521210][T19755] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:40 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getpeername$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) mmap(&(0x7f0000809000/0x1000)=nil, 0x1000, 0x200000a, 0x10, r0, 0xb8479000) sendto$inet6(r0, &(0x7f0000000100)="cd", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @private0}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x6, 0x0, 0x3, 0x2, 0x1f, 0x5}, 0x20) close(r0) socket$inet6(0xa, 0x1, 0x8010000400000084) (async) getpeername$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c) (async) shutdown(r0, 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) (async) mmap(&(0x7f0000809000/0x1000)=nil, 0x1000, 0x200000a, 0x10, r0, 0xb8479000) (async) sendto$inet6(r0, &(0x7f0000000100)="cd", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @private0}, 0x1c) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x6, 0x0, 0x3, 0x2, 0x1f, 0x5}, 0x20) (async) close(r0) (async) 09:49:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x3}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0xff600000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1128.782864][ T9254] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1128.794136][ T9254] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.805656][ T9254] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.815823][ T9254] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1128.829220][ T9254] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1128.838544][ T9254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.846428][T19766] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1128.901423][ T9254] usb 1-1: config 0 descriptor?? 09:49:40 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) [ 1128.933136][ T3570] usb 6-1: new high-speed USB device number 91 using dummy_hcd 09:49:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c00028005000100001400018008000100ac14140008000200ac1e00010c000280050001000000000008000740fffffffe000000000000005c923889fe820e310f117e92c21847222c3a58880d4e44fa999f0492eed869488627437e8a08eda3df5dea3530908e5c47a0906630061a10484d1879cfbe5492bb6cad9597bd93293adc97fb55df84f6cbd235dde54f06ef8aa764c25a908e605ed70c07f64b5d8bd2a75c5964ebab481e0a71309a60bc3e3f4359ddcebc76924b0143c7b2a31746046d7ac0e934313802f5f1bed7c5a77fefa844675c26e7"], 0x64}}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x5000) shmctl$SHM_LOCK(r1, 0xb) sigaltstack(&(0x7f0000ffe000)={0x0}, 0x0) shmctl$SHM_UNLOCK(r1, 0xc) [ 1129.172951][ T3570] usb 6-1: Using ep0 maxpacket: 32 [ 1129.200554][T19784] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1129.303044][ T3570] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1129.312894][ T3570] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.343694][ T3570] usb 6-1: config 0 descriptor?? [ 1129.367685][T19742] UDC core: couldn't find an available UDC or it's busy: -16 [ 1129.371057][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1129.375572][T19742] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1129.381872][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 1129.398335][ T3570] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1129.427407][ T9254] appleir 0003:05AC:8243.001B: No inputs registered, leaving [ 1129.446921][ T9254] appleir 0003:05AC:8243.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.0-1/input0 [ 1129.830222][T19748] UDC core: couldn't find an available UDC or it's busy: -16 [ 1129.837980][T19748] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1129.863591][ T3563] usb 6-1: USB disconnect, device number 91 [ 1130.732055][T19742] usb 1-1: string descriptor 0 read error: -108 09:49:43 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io(r2, &(0x7f0000000ac0)={0x2c, &(0x7f0000000940)={0x0, 0x1, 0x8f, {0x8f, 0xc, "483b229167f8c7ab61fe47e91a62b341dcac35db15527a32166d750706ec0079d28bcaf128198b8fa84712413311ff2a339c1328046287428bee2b2bfa5b9b9026dc10e5c6d6a41ad7e63d137bfbe872e18fe41960cfd5e0e861df4096741fa125fb1f14dca1ddf9111a71334f13dba24b93353cb2646b721bf52e118d6bc1ab0c60151cbcac754985a30da379"}}, &(0x7f0000000a00)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "e7f3c0c9667e82224eab3ec07a45580f1a73e2777172e82eef568e39000a35c892b16c290059879c193665a077d2fe3537eae09a5bb023c6aab68815b18b4a6d78a3e5cd26a70580b184a8c1f38c9fc16599455f259df25a715ca2bd0e1d751a0983c82023672f5aa6a4820b0d3241a805f57eb2f7b412235254641261"}}, &(0x7f0000000200)={0x0, 0xf, 0x3b, {0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x3, 0xf000, 0x4, [0x141b0, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "f133a62c78191fd12d487765bd16c8d1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3f, 0x7f, 0x5, 0x20}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x1f, 0x8, "86c3618b", "72eedd85"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x18, 0x6, 0xed, 0x7, 0x7d0, 0x1000}}}, &(0x7f0000002440)={0x84, &(0x7f0000000b40)={0x40, 0x13, 0x1b, "7c7b4e9008440cbdb12f9137f0776600869e3d511de58d46d16aa5"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000bc0)={0x0, 0x8, 0x1}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x100, 0x8}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x8001}, &(0x7f0000001d00)={0x40, 0x9, 0x1}, &(0x7f0000001d40)={0x40, 0xb, 0x2, "719c"}, &(0x7f0000002240)={0x40, 0xf, 0x2, 0x372}, &(0x7f0000002280)={0x40, 0x13, 0x6, @remote}, &(0x7f00000022c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000002300)={0x40, 0x19, 0x2, "3dd7"}, &(0x7f0000002340)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000002380)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000023c0)={0x40, 0x1e, 0x1}, &(0x7f0000002400)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000000c0)=0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000340)={0x20, 0x12, 0x7c, {0x7c, 0x7, "23e9d7e2c7ff4298d74ca16d4e6f4c596dd134b395c3337af98f9e2b51836d4b23222918249590b6145777b9ef82c6994746f19fdda6f29096d0712c085c589caec2e6a3c2128329c4ac0913cd4b52786b84dcb9e6ad66e2b11ff1d3df063d487611837ad8516f9fa7eaad6dcff956ebce9affceaec0e0abe19d"}}, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], &(0x7f00000001c0)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0xe, 0xfff7}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x45, 0x81, "a36a9db8", "dd64b5ec"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfe, 0x2, 0x65, 0x80, 0xa4, 0x0, 0x81}}}, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x20, 0x17, 0x11, "3187ac88f822c6be0f83f55b9c5eb5057e"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x400, 0x4, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000600)={0x40, 0xb, 0x2, "d7b5"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x13, 0x6, @random="9cdbbb265c3f"}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="04886c962d5c"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "d8ee"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x5}}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000220200000000000000000000800100000010000080001"], 0x2c}}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000d00)={{r4}, "49a291179af55896321e3ebb09012be5b23fa7aeb9693b0dab492c75842885f6c20064d258df02b26565fbecb617ea32b708bf14603e770a6e19988edf68344446707388ca4ecd7239c8b2e0debb817f108cfedcb9875c65b855d2d84a3d610a8a5bd057635758f23ba47ad391a8d109c02664e0b086a49f94a5d5b33c86ce7138fb5658536a850d651b5202bcf21e203dcc0e051db7e604bbb2a6c153b2ab9a7593dff239005b8b90beecee14d539098f7737ed486625eb0a9e0f76c118fcdfea471d8c237b63537da773975884ccf739bde579f4fe5dfbd106f1e057871aee49bd76b6aa532d492c7ad455f77907acbae3553237121948b7dc0d711d529c1e67a9d6f37265b690ec92a3206656f93cdcaf744cdee9e75408f6f9d154dac0368f1d3db3fdb5200c5cec9004fc19e185524399fba1025e44f1aabe9d938d7e4db5ff5f5cb8dc0c260088d89ab0f9b8988b4cf064e8d434a0e03be2b35b8326c7eeae99ba053f10afb6cd3343f9f9abe38098d52689b256545d50781a76da25893a96567b437dcc450a8646ada6203941d3d40be7dbce265a80e6a678aa1cd95188859871a313c6c99c939210086e81b0ce158a38edb44c47693b1c94bbd7752c82661cddda38dd473fe4d1803f5b1b6830774f70a5dd150f86bae7c531f50152bc30a38df4d5dacc8715aa2fef5c61fe84fa4ed94065e28b83637d84f85564f5207b305f4fffd0cacec770002d8708425371a1ef9aa4a207b2961a3cbb630c5a8ca8ca10ec1d90760e0ebda9f0e414590974238c30a20457edfe77c5959a1af4b5a39b16ebbabb3c1d96c5ea52003c30fcf7a932e882f3dba5198327fcbfe0023b1c648b5a406a67be1ef6ebb48668d906955d5224414dbcf8e242b86c7ff06de4e56b2e068c65bcb9593d2e31600cdd91f9aab7baba883a5ea2142616da647fb2465dd636a9405f2332c684332c9beadd866151f900787e1f6e6cdc4e69780b0b9f6dee9045a687ece40fad3d8ce03653e647cd637ed771ec15980d060dcd536486cfa3da2beb7b2bd8bca3b74f153f1eca35c045dbda967e2dd6fee29bf6d69163ec88da9bf1724a6f51925a315ef46d586879c574eadb68de3e32192966f28a70fdc46bfdf71faf262e72c0885a45187121bf0e4a18617c00ef14310bd25e17802acde05deb30d2c2536e3e9c47d5d70bd5d228040273182b07e23cee1fa3dad2eb1b989f12e06d493ae97df6fcbcb1af6842754195735db7ef4bc675bdf7f744495a08454daaa989e73fd14e0543b17ee00c3065d1566778f7d1bcb0aec1dcf1566394c6e189c2363dc51fce72efcba3aa45aa6a49219a06e5210759f389987741669109af2e4c52b266d6f94df9a3e1c6f7a0e69a04d864fe858762151acca9628a4b30c3e1f833c23e2e3f4fa027706eab7201866b61d15067c091a09ec4b73cd9d40ba57629103dde6d634bc5eb1b9cda3c26e35aae66040d69cf5ee05a893642b1a3bb2abf395e7d8e3492976ad9e1a3a2810d7ed996eb5f67c2da1676bbfe1695e9169f76272fde709209575865596b33c2e96e944f464cc3a3916850086a24d1f9ced13b892c3469453072147bc286c03aa7c5778885f64d8a5188647cc0555f05b8a3811a61e030dbcfc66c1ad079fc0c9d3ba8204e7cdaec42bbe64d94ccc7eca1eeed2c6249d2f8e0aab986243fe587a187a2465e3a8400d1ad0c2f2e058615d1084091f29aa86f33fa1ff5ca66a7dec6a7118f0a1ee5c66732de0e0fcc8305a2535d15932fe69440a71477611c45d36a21840c5ad91893bf01e78446a554b260a99e275583945b7b7e25260835d94c8ac4e596ed8c48e56e5665590a2c20e3aecf3ebe1441994905b1c7a25699c18914a83f5747648b5b87f61e397dbbce8efc3856963aa3af7d01f9e1ac7c43f16f7f94cc4d26127967699aba45ed3406243434dee6e2a17e2197fec0b9823099bcd437af79bb455ed038bae212402e84b85a56eba6fb457ea7d06afa863bcf9f776735a4702f92ec0339e64696e7b0d7e83d6ffdfb8e8d1922c11ac6bc20bdd0ca60ba19f40f9f38f19cba7da4a1bddef7680fd0dc30dc3180bc825d7572a3471b882fc030ddb81065672a3e694fd2abf5896f31f9cedc6ceb0919b0bf1b4032545c09cc55e64fdf94551c996bdaf5e2275c2d58c1d17aa88b838ba492caf00f9ed4fbaf84495cdd87e514f5678d9a3f887bd61797fcc38595df11372c50ab12bae886343d449ca4af64d25b292da1ca846a0cdb029675a4dafcaf678ce4efbd55fa5d09a6fefa34501cc6b11d85504f96e5a9a50a2c9375c52d55b656202a5bea7fe39ae2f34b71dc02f288f6fb34d355e694700ef74979f067a294c4b5e2af913634ecd706630859be4626f99cd1b8b516de5dd44fa025f55a924ca0021a72c056d1bf44485231aa8a122230e1f1b69f9c9b43452879e56963b136402b61f885bddf9755d27d66820921ff1ecbd1a9ffbf0a4922110d93df2cd3440ee34cdf4931318f7f76a9c8afa6f066448be22cd44249362e9eb848c03f0fa2bdaac07d84aefe73b6fc567a79398fbbd3975005e1a7158da11ff1cc10820509c0cd347805308d6521b6e189edc7bd2047f9d3b1b50e469cc86c2a30e4577949bc46727534a6ef1935dbaf0863dce334ad3139a21dff98855f2a9256b0ce42ecb9525e9dd95aca3f92967479e31b93aec082400e09babea1af238c95778ec994de90bdbde8fd25ecb87382a500e785dc127f8471abca8ccb277ab5e00a53a0f2a23d8d40374ae22b83e6c9088e9014d839d5083fa7f435b7a1e6c674c8a94bcba5617aae8bd64b15ff8a86491d2346c3766eaf1952dca885929b512536ed04a73bed6a491034637b79b5fd10cdc6726a2cbfba341cb82f2d1e0d8fcb8ac96dac86015bad8c8e5c3e45ced6aae57abdb4447b89b7e5937edba3922dd736fc96052d77de6c8e1067456b5a2f57343bc06e5992792a0275618633fe23cd9306777d3c872b270dbfda9b83184cbf8601f0e423b22999d162ffb1eaaf833a8bef8175fe9d41d77719ae1dcebb071a3cc5c4a9795491e718af71623b551c0a58f553bffe6b95faf690eefbe64bc83cfa49e9f3c1805b4228f4d827822d175da2af4e12c1023cd96b09d332c921af05fdd004bd77f38c2326e0efed57175b8e35e3476bf86430f3bf8b8f17abed57a276bb3142c7d934d09420465a0c490477b1bfb80a79591e415087c87f8cf5a4abe37d13fd430ca5205fee9137ca19daf26a6012136c47327b8bee777375713e39569cec9e8e78b8fb4928d2a266bfb33f0d96b0fddfa6730f75c52bd4ae21f9b0e057fbb4d0ff20de2c985a8a5778ee0e83077fcf51a572c25b3305e1fcddc7d273846cbc081eb4ff6a57f509393c600cff95a4ae8fe32fad48d0d6b6ad4129fc741baa540d4fa3237e8ca7503cc088189c41ce8476aecd9717a51493181ddf09d216169bb9d21c4a093c2cb668107cac937392a63934f58fe9180e0e0332367b3a85e3fc44faa45ad8038e325c5c785fd43fbdbe10d690657ef1208283cc903faac99208ee387239ad7e2d3e3b3882ce3040500fd384971ccdba0cfecd8fef045e379ccb8afdcac90bdc52f0fa41d6aefe8370b63ad14ddc6a421a151d932169837f384ce87586da6fc0a6195a3be507e2a16891ff082644d1953dd12ced09d163535a276c8fc0c6eb1e4bbe70ff46309de4ff37a13b4831139013d33f5489bbd4f672ac8f0cda8f7a8a6023ef8ba8519be131f2bd64cc418ec7963bd810e64687bc4ae829189b1541c6ab7a48da1860f80a20d7ccecbb3234e6d212aa6b18bc535db02817f0d8cf0c792c48913ceb730f4a935222e4fa2a0ae3d7afceb5d002ae8458b65862cec7f2e8c9f8bd866cc26abbfbe29a86d21c7487205dee6476b42498e83612a2bda915f0535cd79fd6e834fe899074843369c99b79138a03747c181a3312902ec6c011a6e28f2ce5ec91b4ad495dcdc7d735d3df0f1c12a947d37f0341e7aac6f573bd5a2f722c7922574dcaeb30b018684665ffd85106b2de5cc313e42f6b33d9bb6418ef4a1a3064ba901c5ed3808ad0104db49ed7b314ab2aadb1e24344475ba81fa5c8deed1947f41be609def3c187657df2fed5942ec5feee887fbf6a765f15696069fcfb8b50f3dc38b9298f9d2711da6c9b599b428bf9b7f4bff1d6eccae8ca8e71298b997a9bc4d32d02ce89b23402125b2826590e5ef77b069c71d6e46482ffec11eb2fc1cf985232e79a88101697c89e763ae683e0dd140f08313da951a81cd85d1e777c13f5f31d5fe5df39d54f2a836c79b7a8a9ff4a99426291cf3ca5f552e22406b008f0aac06c4686beafd81fb4e5c16260261798aa8e587222af3961126b798a091b133cc151be3b2c7364dddcb33fbdb8cc20dfd3da69235215c4923e138988810f9c1323b7b4034fa7757116bcd90935c3f22de7e8d14a54dbec9fa498188ac2aaae1d681c149123c6eb3abae5720e83ca735433f2537a9bf725240b59117a36a8a057197ec891ba31aaa73196e9045db447375f25b84f63122f252a0b59e27228ddb72c612c1e1dde78de62b07e14554e913680bc0ea8182dbf62354ab4ceabaa40286ec4003d17722c183bc521d275498be23b5cff359e51dd4342e75152477cebfeecdcf4ed6fdd377b2e83c83633d070a61c344fbeae464f7b7315a8652ab7f3929cbb275cbcd9207da52197f4095e8c486019cf154db098a118726c2e25cbe1127b44142a8e96375abf00d0f03e2eb4fb73d4f37ce44163b739b45316a6eccaa96f475e9c8c1bb13ea5c817fe059929cf25b4e67bc4614d580043a1c69bea713c8ab4afa88027bafbbcb6415f5e42adf00512e30904e1211bade75f9465d0955f84e30bbcc001f6fe75110befd6f9bc848785b2a14c1f499af24cc74ebfeed0a60adfaf885fb0c6cdfcde1f050c1fdabffa70a988c73d8340bd50cac50871359b14737d950e961fbd38ca7879cd9932bfe7d93a605381d29515365172c65281450bcaf9274779be789ddd29dc4bfe71abf0c3c8bfd63a6ca8a5ba1c42d2f7a49da8eabe01f2b058aaa3996eb7c32233fa2e0e920bc13ed80d8e915059c4a1b1bf30faa2df2ce57936185259f00f03e0f11bad81be7b37b30fb7dd784d033421d15b58b32d51336be724b36bfbbfa53763ecd2d82dd932110420cacfc806f643ea3c6c3aa52b9c80023dc1a602edb2831bcae326d158b989cd6735404a7b717e6f41c34d0f7d68befdceeca4176186af6939ed075dd284943412ff9a8cff720ddf3c3b890248c2906056cb56fc11b11bb88edc2a04644c506a651569e2afbb3d42dc0e01cc4fb2783d262f5e4d907cc5688d68ed198c33ba2b174944af216df14c3eaf6af591fd29042cff3bae260e89e06ac4195c3a769ee984f7bf9b0529b69d0d1de1e69d4e19cf5923ce7191632d2459b693d72eb1138ef458671962044ba1be2f4baa7eee5714d2b063c6a25084ec1b303040300929bb1d69a5a06cfa02cdcd109bf19cb3b2e2928014ab1d74da3e06aa176274a1aedefccc1896b3b337d41f132f9406f9afb725b7bed827923fa4040b818856c33e9875aaf0cbcecec5fe5fdf0eb5688f1448ce38257f78306df14335403151e120f8b121024a042b301fb0978a947984c23afd2afda0262941339323b74d63961a90a3f792f1e782eda66c3e84aa2b1f480c21a775c8245dab4254bf1806ae70cd252585c3c41d26db494c9925ae1b8332303d"}) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, &(0x7f0000001d80)={0x0, 0x24, 0xe7, {0xe7, 0x23, "41bc3c8b5a5cd80c90414cf9119a4e8556429d4eeab6be453a9bf72ea1848595711c68ef83ebd5a3e17ea169eabd899944bec5621028d748037fb37acc5fd21d73265307b76b8c08edf828a942f44aed45dc56b6de36b30ab83882ae33d8dec74a9ac1b89c1646795a89db78ffc3fc12b0b2f7ca2e1ea17e8876de38e0f805adcf048ab38d367b7a5f626cb9e0f01613d9e8e4d8c7d821f74b6db02cfc4e4a7d3b27933b1cb58b0c212056efbd581fa02c9f4bb7217a13a568b35b4cc4efc962275324e817315dbc64551da12638610f68874836944e1be7166ddf61f20032894b74c89664"}}, &(0x7f0000001e80)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "76176abb406e3c84e4daf17a6de4fe2d460115dea60835bde564d5bf15d94534ae09c4991956a1fed18815e9b4e0510dd011ca217f1c9bfd79c0a73849d5725f8a25d651bed9a54c1a4396541d3c5178cb6c2d84aa341083acc9858572b6dfadca8a39d2953152a6c905100b36fcc0ca55cfc42b479156222069bba3030d16b114eb9180cb67fe457d02d31a599916bee92f4b7d662c89f6cc463c341f05e8ef"}}, &(0x7f0000001f40)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0x7, "81ecf7fd"}, @global=@item_012={0x0, 0x1, 0x1}, @local=@item_4={0x3, 0x2, 0x5, "06127bf6"}, @global=@item_012={0x1, 0x1, 0x7, 'H'}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x2, 0x2, 0x3, "8731"}, @global=@item_4={0x3, 0x1, 0xbfb9416eb334e1a1, "ef230806"}]}}, &(0x7f0000001f80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0xc55}}}}, &(0x7f0000002200)={0x2c, &(0x7f0000002000)={0x40, 0xe, 0x9f, "c754f101e8b34baeae825d80064c1b1dda122e459ecb1ced49c1d9e7bc208d174f7c1df9af53a69affa49c42cbf0e34a6575b12806d9bb1b45d98dc9791db2ce38e196d5729443ffc292a66e6320fcad324b90bec934c845b0841e06713d4b34a4489287c70dd6ee8e322461e817c63d0cc3676912b09ed4f3700b2079e93da80ee0b66f16163c84663500eea9bd3a17b727d4ecd417abeb4f58dd6e147c23"}, &(0x7f00000020c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002100)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002140)={0x20, 0x1, 0x75, "89d9ef257ae5ee27eff2df5cad65562d07f4b9931959def0424175c64f3d62c28d5cb8244e13b8272ab942f6ca61a9eafcf599b2c7727f36b4212cf92859614869826b7348249c7e39f98576668ad3cc3dc4036029b9bb821db39310424656103c9ab469b6124a2189e0eafa65a3d793abb4ce7926"}, &(0x7f00000021c0)={0x20, 0x3, 0x1, 0x7}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") (async) syz_usb_control_io(r2, &(0x7f0000000ac0)={0x2c, &(0x7f0000000940)={0x0, 0x1, 0x8f, {0x8f, 0xc, "483b229167f8c7ab61fe47e91a62b341dcac35db15527a32166d750706ec0079d28bcaf128198b8fa84712413311ff2a339c1328046287428bee2b2bfa5b9b9026dc10e5c6d6a41ad7e63d137bfbe872e18fe41960cfd5e0e861df4096741fa125fb1f14dca1ddf9111a71334f13dba24b93353cb2646b721bf52e118d6bc1ab0c60151cbcac754985a30da379"}}, &(0x7f0000000a00)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "e7f3c0c9667e82224eab3ec07a45580f1a73e2777172e82eef568e39000a35c892b16c290059879c193665a077d2fe3537eae09a5bb023c6aab68815b18b4a6d78a3e5cd26a70580b184a8c1f38c9fc16599455f259df25a715ca2bd0e1d751a0983c82023672f5aa6a4820b0d3241a805f57eb2f7b412235254641261"}}, &(0x7f0000000200)={0x0, 0xf, 0x3b, {0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x3, 0xf000, 0x4, [0x141b0, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "f133a62c78191fd12d487765bd16c8d1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3f, 0x7f, 0x5, 0x20}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x1f, 0x8, "86c3618b", "72eedd85"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x18, 0x6, 0xed, 0x7, 0x7d0, 0x1000}}}, &(0x7f0000002440)={0x84, &(0x7f0000000b40)={0x40, 0x13, 0x1b, "7c7b4e9008440cbdb12f9137f0776600869e3d511de58d46d16aa5"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000bc0)={0x0, 0x8, 0x1}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x100, 0x8}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x8001}, &(0x7f0000001d00)={0x40, 0x9, 0x1}, &(0x7f0000001d40)={0x40, 0xb, 0x2, "719c"}, &(0x7f0000002240)={0x40, 0xf, 0x2, 0x372}, &(0x7f0000002280)={0x40, 0x13, 0x6, @remote}, &(0x7f00000022c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000002300)={0x40, 0x19, 0x2, "3dd7"}, &(0x7f0000002340)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000002380)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000023c0)={0x40, 0x1e, 0x1}, &(0x7f0000002400)={0x40, 0x21, 0x1, 0x8}}) (async) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) (async) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000000c0)=0x1) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000340)={0x20, 0x12, 0x7c, {0x7c, 0x7, "23e9d7e2c7ff4298d74ca16d4e6f4c596dd134b395c3337af98f9e2b51836d4b23222918249590b6145777b9ef82c6994746f19fdda6f29096d0712c085c589caec2e6a3c2128329c4ac0913cd4b52786b84dcb9e6ad66e2b11ff1d3df063d487611837ad8516f9fa7eaad6dcff956ebce9affceaec0e0abe19d"}}, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], &(0x7f00000001c0)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0xe, 0xfff7}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x45, 0x81, "a36a9db8", "dd64b5ec"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfe, 0x2, 0x65, 0x80, 0xa4, 0x0, 0x81}}}, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x20, 0x17, 0x11, "3187ac88f822c6be0f83f55b9c5eb5057e"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x400, 0x4, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000600)={0x40, 0xb, 0x2, "d7b5"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x13, 0x6, @random="9cdbbb265c3f"}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="04886c962d5c"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "d8ee"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x5}}) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000220200000000000000000000800100000010000080001"], 0x2c}}, 0x0) (async) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000d00)={{r4}, "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"}) (async) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, &(0x7f0000001d80)={0x0, 0x24, 0xe7, {0xe7, 0x23, "41bc3c8b5a5cd80c90414cf9119a4e8556429d4eeab6be453a9bf72ea1848595711c68ef83ebd5a3e17ea169eabd899944bec5621028d748037fb37acc5fd21d73265307b76b8c08edf828a942f44aed45dc56b6de36b30ab83882ae33d8dec74a9ac1b89c1646795a89db78ffc3fc12b0b2f7ca2e1ea17e8876de38e0f805adcf048ab38d367b7a5f626cb9e0f01613d9e8e4d8c7d821f74b6db02cfc4e4a7d3b27933b1cb58b0c212056efbd581fa02c9f4bb7217a13a568b35b4cc4efc962275324e817315dbc64551da12638610f68874836944e1be7166ddf61f20032894b74c89664"}}, &(0x7f0000001e80)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "76176abb406e3c84e4daf17a6de4fe2d460115dea60835bde564d5bf15d94534ae09c4991956a1fed18815e9b4e0510dd011ca217f1c9bfd79c0a73849d5725f8a25d651bed9a54c1a4396541d3c5178cb6c2d84aa341083acc9858572b6dfadca8a39d2953152a6c905100b36fcc0ca55cfc42b479156222069bba3030d16b114eb9180cb67fe457d02d31a599916bee92f4b7d662c89f6cc463c341f05e8ef"}}, &(0x7f0000001f40)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0x7, "81ecf7fd"}, @global=@item_012={0x0, 0x1, 0x1}, @local=@item_4={0x3, 0x2, 0x5, "06127bf6"}, @global=@item_012={0x1, 0x1, 0x7, 'H'}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x2, 0x2, 0x3, "8731"}, @global=@item_4={0x3, 0x1, 0xbfb9416eb334e1a1, "ef230806"}]}}, &(0x7f0000001f80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0xc55}}}}, &(0x7f0000002200)={0x2c, &(0x7f0000002000)={0x40, 0xe, 0x9f, "c754f101e8b34baeae825d80064c1b1dda122e459ecb1ced49c1d9e7bc208d174f7c1df9af53a69affa49c42cbf0e34a6575b12806d9bb1b45d98dc9791db2ce38e196d5729443ffc292a66e6320fcad324b90bec934c845b0841e06713d4b34a4489287c70dd6ee8e322461e817c63d0cc3676912b09ed4f3700b2079e93da80ee0b66f16163c84663500eea9bd3a17b727d4ecd417abeb4f58dd6e147c23"}, &(0x7f00000020c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002100)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002140)={0x20, 0x1, 0x75, "89d9ef257ae5ee27eff2df5cad65562d07f4b9931959def0424175c64f3d62c28d5cb8244e13b8272ab942f6ca61a9eafcf599b2c7727f36b4212cf92859614869826b7348249c7e39f98576668ad3cc3dc4036029b9bb821db39310424656103c9ab469b6124a2189e0eafa65a3d793abb4ce7926"}, &(0x7f00000021c0)={0x20, 0x3, 0x1, 0x7}}) (async) 09:49:43 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) getpeername$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c) (async) shutdown(r0, 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) mmap(&(0x7f0000809000/0x1000)=nil, 0x1000, 0x200000a, 0x10, r0, 0xb8479000) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000000100)="cd", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @private0}, 0x1c) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x6, 0x0, 0x3, 0x2, 0x1f, 0x5}, 0x20) (async, rerun: 32) close(r0) (rerun: 32) 09:49:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x4}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c00028005000100001400018008000100ac14140008000200ac1e00010c000280050001000000000008000740fffffffe000000000000005c923889fe820e310f117e92c21847222c3a58880d4e44fa999f0492eed869488627437e8a08eda3df5dea3530908e5c47a0906630061a10484d1879cfbe5492bb6cad9597bd93293adc97fb55df84f6cbd235dde54f06ef8aa764c25a908e605ed70c07f64b5d8bd2a75c5964ebab481e0a71309a60bc3e3f4359ddcebc76924b0143c7b2a31746046d7ac0e934313802f5f1bed7c5a77fefa844675c26e7"], 0x64}}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x5000) shmctl$SHM_LOCK(r1, 0xb) sigaltstack(&(0x7f0000ffe000)={0x0}, 0x0) shmctl$SHM_UNLOCK(r1, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c00028005000100001400018008000100ac14140008000200ac1e00010c000280050001000000000008000740fffffffe000000000000005c923889fe820e310f117e92c21847222c3a58880d4e44fa999f0492eed869488627437e8a08eda3df5dea3530908e5c47a0906630061a10484d1879cfbe5492bb6cad9597bd93293adc97fb55df84f6cbd235dde54f06ef8aa764c25a908e605ed70c07f64b5d8bd2a75c5964ebab481e0a71309a60bc3e3f4359ddcebc76924b0143c7b2a31746046d7ac0e934313802f5f1bed7c5a77fefa844675c26e7"], 0x64}}, 0x0) (async) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000) (async) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) (async) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x5000) (async) shmctl$SHM_LOCK(r1, 0xb) (async) sigaltstack(&(0x7f0000ffe000)={0x0}, 0x0) (async) shmctl$SHM_UNLOCK(r1, 0xc) (async) 09:49:43 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) 09:49:43 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x0, 0x2, 0x9d, {0x9d, 0x23, "71e89fd8cd91a1486041b17c56f44327e2b49d709748d2e0f5dea0a934aac200bc4f12a3c4c2ec29e03a84b249f9a012ea66436157180f2e9385742f97eda2762776e365d18aef6007d7087134db2d7392b74e13c468c74a31f299bf448ead7aa321d8657ca2c31f2449473088e5ad80a9033e9fa9ca36332acf171a33011150dae2aa2c531686aed178450774309ac0da13811cc326bc0cba370d"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, &(0x7f0000000140)={0x0, 0xf, 0x4f, {0x5, 0xf, 0x4f, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x5, 0x9, 0xfff9, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x9, 0xfe01}, @generic={0x21, 0x10, 0xb, "12f1acb34a9c1ef96665be0b5b9bb49939843d5f1371c97764a1bb8c0b5f"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "b89fed08756171e9d0d061d9055150d6"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x2, 0x5, "bbafc573", "37dd34df"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x60, 0x20, 0xff, 0x1, 0x3, 0x6}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x8, 0x6, "9135552d572c"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x60, 0x20}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000480)={0x40, 0xb, 0x2, "ece5"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @random="e10e3a9f7d1d"}, &(0x7f0000000600)={0x40, 0x19, 0x2, 'O\f'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x1f}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x31}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800)={0x0, 0x23, 0xdb, {0xdb, 0x30, "ebec60458c04515ae95edc9e72d1f15731b3033f71176aaafbc129815ab246df47e206aaa6d603e96ba5e6ad1701cb0b4b82fcf875d8cb392f6d7a7fae98a00bafe4605fef44feb031e990944440d2753e84c273d87e8d71f1dbb7b922fef940c00603b15d7b04eacba51f3dc491f1a440faf18414631aec30c4d3c5ad9974e14dfd2041dcf5c36201d7f8e6d22042072ba07833946dbc6b4a3715b13c4757ec836652b4a0897f1a28a19d1aff7fca9fc0aaff544541e96419c1a1ff965749572e8c8f8bdd98b254313f2dbe90dc00db8c3a8eb503cb5e6a12"}}, &(0x7f0000000900)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "18e0a5245a9e5a73338847f79be4de21f8c6e721cc5f2e53655cf3786d254da02e8b4934d6b6edd137ff6acb60bdc67a9e6f6771a7d92547ccf0415e8d441b67bb12779a5ca475582302660dfe2bf0809070f2398ebaf542f4fc50d164f108b3b56445d0c05b0ce7a2439ed128078a0de97a4181f3533d57fc9e9d3a5ff2062e10a3d6188a13c3ae541de60b3ff229c09b07b96121913efa1a92f1e23fd3a4b14ca16ab4d62a364c414fcc956112d8efa74d"}}, &(0x7f00000009c0)={0x0, 0xf, 0x9d, {0x5, 0xf, 0x9d, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x200, 0x0, 0x8001, [0xff0030, 0x5bfeddec6afdb5af]}, @generic={0x84, 0x10, 0xb, "2e5055ad21cb82d3398ef7ecfbeee5ce27891160e521565a56bcba2559b52a6fd7d921243c8235df9b6a970d244be77c97020c966c6ef1fd99ec820114e1d349a00c5b093e4899a2ed244925f7750d6044c5a28f1b710bdb3b3e72ea5bf9274bede4bf5cadaa07eec4661713323f4d9b2d82e88bc2a9ef38c21ec59106562072a6"}]}}, &(0x7f0000000a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x0, 0x3, "f76c8bcd", "47b5ca9e"}}, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x40, 0x0, 0x1, 0x3000, 0x8}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000b40)={0x0, 0x6, 0x4d, "03018671bc46140fab79fb5731d70cc8584224890368984daf1ad5ff73bd80af2cee359ff684c937eac0082af45c9e4e69c896802124f967bf42faee1cbd06e89da9e41cbfc2aa7bc1fdf3ade3"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x800}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x23}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "d6fa"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x133}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "d3f0"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x6b}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0xdd}}) [ 1131.343520][T19799] nla_validate_range_unsigned: 1 callbacks suppressed [ 1131.343585][T19799] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1131.348289][T19802] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1131.417573][T19809] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 09:49:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io(r2, &(0x7f0000000ac0)={0x2c, &(0x7f0000000940)={0x0, 0x1, 0x8f, {0x8f, 0xc, "483b229167f8c7ab61fe47e91a62b341dcac35db15527a32166d750706ec0079d28bcaf128198b8fa84712413311ff2a339c1328046287428bee2b2bfa5b9b9026dc10e5c6d6a41ad7e63d137bfbe872e18fe41960cfd5e0e861df4096741fa125fb1f14dca1ddf9111a71334f13dba24b93353cb2646b721bf52e118d6bc1ab0c60151cbcac754985a30da379"}}, &(0x7f0000000a00)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "e7f3c0c9667e82224eab3ec07a45580f1a73e2777172e82eef568e39000a35c892b16c290059879c193665a077d2fe3537eae09a5bb023c6aab68815b18b4a6d78a3e5cd26a70580b184a8c1f38c9fc16599455f259df25a715ca2bd0e1d751a0983c82023672f5aa6a4820b0d3241a805f57eb2f7b412235254641261"}}, &(0x7f0000000200)={0x0, 0xf, 0x3b, {0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x3, 0xf000, 0x4, [0x141b0, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "f133a62c78191fd12d487765bd16c8d1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3f, 0x7f, 0x5, 0x20}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x1f, 0x8, "86c3618b", "72eedd85"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x18, 0x6, 0xed, 0x7, 0x7d0, 0x1000}}}, &(0x7f0000002440)={0x84, &(0x7f0000000b40)={0x40, 0x13, 0x1b, "7c7b4e9008440cbdb12f9137f0776600869e3d511de58d46d16aa5"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000bc0)={0x0, 0x8, 0x1}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x100, 0x8}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x8001}, &(0x7f0000001d00)={0x40, 0x9, 0x1}, &(0x7f0000001d40)={0x40, 0xb, 0x2, "719c"}, &(0x7f0000002240)={0x40, 0xf, 0x2, 0x372}, &(0x7f0000002280)={0x40, 0x13, 0x6, @remote}, &(0x7f00000022c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000002300)={0x40, 0x19, 0x2, "3dd7"}, &(0x7f0000002340)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000002380)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000023c0)={0x40, 0x1e, 0x1}, &(0x7f0000002400)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000000c0)=0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000340)={0x20, 0x12, 0x7c, {0x7c, 0x7, "23e9d7e2c7ff4298d74ca16d4e6f4c596dd134b395c3337af98f9e2b51836d4b23222918249590b6145777b9ef82c6994746f19fdda6f29096d0712c085c589caec2e6a3c2128329c4ac0913cd4b52786b84dcb9e6ad66e2b11ff1d3df063d487611837ad8516f9fa7eaad6dcff956ebce9affceaec0e0abe19d"}}, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], &(0x7f00000001c0)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0xe, 0xfff7}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x45, 0x81, "a36a9db8", "dd64b5ec"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfe, 0x2, 0x65, 0x80, 0xa4, 0x0, 0x81}}}, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x20, 0x17, 0x11, "3187ac88f822c6be0f83f55b9c5eb5057e"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x400, 0x4, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000600)={0x40, 0xb, 0x2, "d7b5"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x13, 0x6, @random="9cdbbb265c3f"}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="04886c962d5c"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "d8ee"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x5}}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000220200000000000000000000800100000010000080001"], 0x2c}}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000d00)={{r4}, "49a291179af55896321e3ebb09012be5b23fa7aeb9693b0dab492c75842885f6c20064d258df02b26565fbecb617ea32b708bf14603e770a6e19988edf68344446707388ca4ecd7239c8b2e0debb817f108cfedcb9875c65b855d2d84a3d610a8a5bd057635758f23ba47ad391a8d109c02664e0b086a49f94a5d5b33c86ce7138fb5658536a850d651b5202bcf21e203dcc0e051db7e604bbb2a6c153b2ab9a7593dff239005b8b90beecee14d539098f7737ed486625eb0a9e0f76c118fcdfea471d8c237b63537da773975884ccf739bde579f4fe5dfbd106f1e057871aee49bd76b6aa532d492c7ad455f77907acbae3553237121948b7dc0d711d529c1e67a9d6f37265b690ec92a3206656f93cdcaf744cdee9e75408f6f9d154dac0368f1d3db3fdb5200c5cec9004fc19e185524399fba1025e44f1aabe9d938d7e4db5ff5f5cb8dc0c260088d89ab0f9b8988b4cf064e8d434a0e03be2b35b8326c7eeae99ba053f10afb6cd3343f9f9abe38098d52689b256545d50781a76da25893a96567b437dcc450a8646ada6203941d3d40be7dbce265a80e6a678aa1cd95188859871a313c6c99c939210086e81b0ce158a38edb44c47693b1c94bbd7752c82661cddda38dd473fe4d1803f5b1b6830774f70a5dd150f86bae7c531f50152bc30a38df4d5dacc8715aa2fef5c61fe84fa4ed94065e28b83637d84f85564f5207b305f4fffd0cacec770002d8708425371a1ef9aa4a207b2961a3cbb630c5a8ca8ca10ec1d90760e0ebda9f0e414590974238c30a20457edfe77c5959a1af4b5a39b16ebbabb3c1d96c5ea52003c30fcf7a932e882f3dba5198327fcbfe0023b1c648b5a406a67be1ef6ebb48668d906955d5224414dbcf8e242b86c7ff06de4e56b2e068c65bcb9593d2e31600cdd91f9aab7baba883a5ea2142616da647fb2465dd636a9405f2332c684332c9beadd866151f900787e1f6e6cdc4e69780b0b9f6dee9045a687ece40fad3d8ce03653e647cd637ed771ec15980d060dcd536486cfa3da2beb7b2bd8bca3b74f153f1eca35c045dbda967e2dd6fee29bf6d69163ec88da9bf1724a6f51925a315ef46d586879c574eadb68de3e32192966f28a70fdc46bfdf71faf262e72c0885a45187121bf0e4a18617c00ef14310bd25e17802acde05deb30d2c2536e3e9c47d5d70bd5d228040273182b07e23cee1fa3dad2eb1b989f12e06d493ae97df6fcbcb1af6842754195735db7ef4bc675bdf7f744495a08454daaa989e73fd14e0543b17ee00c3065d1566778f7d1bcb0aec1dcf1566394c6e189c2363dc51fce72efcba3aa45aa6a49219a06e5210759f389987741669109af2e4c52b266d6f94df9a3e1c6f7a0e69a04d864fe858762151acca9628a4b30c3e1f833c23e2e3f4fa027706eab7201866b61d15067c091a09ec4b73cd9d40ba57629103dde6d634bc5eb1b9cda3c26e35aae66040d69cf5ee05a893642b1a3bb2abf395e7d8e3492976ad9e1a3a2810d7ed996eb5f67c2da1676bbfe1695e9169f76272fde709209575865596b33c2e96e944f464cc3a3916850086a24d1f9ced13b892c3469453072147bc286c03aa7c5778885f64d8a5188647cc0555f05b8a3811a61e030dbcfc66c1ad079fc0c9d3ba8204e7cdaec42bbe64d94ccc7eca1eeed2c6249d2f8e0aab986243fe587a187a2465e3a8400d1ad0c2f2e058615d1084091f29aa86f33fa1ff5ca66a7dec6a7118f0a1ee5c66732de0e0fcc8305a2535d15932fe69440a71477611c45d36a21840c5ad91893bf01e78446a554b260a99e275583945b7b7e25260835d94c8ac4e596ed8c48e56e5665590a2c20e3aecf3ebe1441994905b1c7a25699c18914a83f5747648b5b87f61e397dbbce8efc3856963aa3af7d01f9e1ac7c43f16f7f94cc4d26127967699aba45ed3406243434dee6e2a17e2197fec0b9823099bcd437af79bb455ed038bae212402e84b85a56eba6fb457ea7d06afa863bcf9f776735a4702f92ec0339e64696e7b0d7e83d6ffdfb8e8d1922c11ac6bc20bdd0ca60ba19f40f9f38f19cba7da4a1bddef7680fd0dc30dc3180bc825d7572a3471b882fc030ddb81065672a3e694fd2abf5896f31f9cedc6ceb0919b0bf1b4032545c09cc55e64fdf94551c996bdaf5e2275c2d58c1d17aa88b838ba492caf00f9ed4fbaf84495cdd87e514f5678d9a3f887bd61797fcc38595df11372c50ab12bae886343d449ca4af64d25b292da1ca846a0cdb029675a4dafcaf678ce4efbd55fa5d09a6fefa34501cc6b11d85504f96e5a9a50a2c9375c52d55b656202a5bea7fe39ae2f34b71dc02f288f6fb34d355e694700ef74979f067a294c4b5e2af913634ecd706630859be4626f99cd1b8b516de5dd44fa025f55a924ca0021a72c056d1bf44485231aa8a122230e1f1b69f9c9b43452879e56963b136402b61f885bddf9755d27d66820921ff1ecbd1a9ffbf0a4922110d93df2cd3440ee34cdf4931318f7f76a9c8afa6f066448be22cd44249362e9eb848c03f0fa2bdaac07d84aefe73b6fc567a79398fbbd3975005e1a7158da11ff1cc10820509c0cd347805308d6521b6e189edc7bd2047f9d3b1b50e469cc86c2a30e4577949bc46727534a6ef1935dbaf0863dce334ad3139a21dff98855f2a9256b0ce42ecb9525e9dd95aca3f92967479e31b93aec082400e09babea1af238c95778ec994de90bdbde8fd25ecb87382a500e785dc127f8471abca8ccb277ab5e00a53a0f2a23d8d40374ae22b83e6c9088e9014d839d5083fa7f435b7a1e6c674c8a94bcba5617aae8bd64b15ff8a86491d2346c3766eaf1952dca885929b512536ed04a73bed6a491034637b79b5fd10cdc6726a2cbfba341cb82f2d1e0d8fcb8ac96dac86015bad8c8e5c3e45ced6aae57abdb4447b89b7e5937edba3922dd736fc96052d77de6c8e1067456b5a2f57343bc06e5992792a0275618633fe23cd9306777d3c872b270dbfda9b83184cbf8601f0e423b22999d162ffb1eaaf833a8bef8175fe9d41d77719ae1dcebb071a3cc5c4a9795491e718af71623b551c0a58f553bffe6b95faf690eefbe64bc83cfa49e9f3c1805b4228f4d827822d175da2af4e12c1023cd96b09d332c921af05fdd004bd77f38c2326e0efed57175b8e35e3476bf86430f3bf8b8f17abed57a276bb3142c7d934d09420465a0c490477b1bfb80a79591e415087c87f8cf5a4abe37d13fd430ca5205fee9137ca19daf26a6012136c47327b8bee777375713e39569cec9e8e78b8fb4928d2a266bfb33f0d96b0fddfa6730f75c52bd4ae21f9b0e057fbb4d0ff20de2c985a8a5778ee0e83077fcf51a572c25b3305e1fcddc7d273846cbc081eb4ff6a57f509393c600cff95a4ae8fe32fad48d0d6b6ad4129fc741baa540d4fa3237e8ca7503cc088189c41ce8476aecd9717a51493181ddf09d216169bb9d21c4a093c2cb668107cac937392a63934f58fe9180e0e0332367b3a85e3fc44faa45ad8038e325c5c785fd43fbdbe10d690657ef1208283cc903faac99208ee387239ad7e2d3e3b3882ce3040500fd384971ccdba0cfecd8fef045e379ccb8afdcac90bdc52f0fa41d6aefe8370b63ad14ddc6a421a151d932169837f384ce87586da6fc0a6195a3be507e2a16891ff082644d1953dd12ced09d163535a276c8fc0c6eb1e4bbe70ff46309de4ff37a13b4831139013d33f5489bbd4f672ac8f0cda8f7a8a6023ef8ba8519be131f2bd64cc418ec7963bd810e64687bc4ae829189b1541c6ab7a48da1860f80a20d7ccecbb3234e6d212aa6b18bc535db02817f0d8cf0c792c48913ceb730f4a935222e4fa2a0ae3d7afceb5d002ae8458b65862cec7f2e8c9f8bd866cc26abbfbe29a86d21c7487205dee6476b42498e83612a2bda915f0535cd79fd6e834fe899074843369c99b79138a03747c181a3312902ec6c011a6e28f2ce5ec91b4ad495dcdc7d735d3df0f1c12a947d37f0341e7aac6f573bd5a2f722c7922574dcaeb30b018684665ffd85106b2de5cc313e42f6b33d9bb6418ef4a1a3064ba901c5ed3808ad0104db49ed7b314ab2aadb1e24344475ba81fa5c8deed1947f41be609def3c187657df2fed5942ec5feee887fbf6a765f15696069fcfb8b50f3dc38b9298f9d2711da6c9b599b428bf9b7f4bff1d6eccae8ca8e71298b997a9bc4d32d02ce89b23402125b2826590e5ef77b069c71d6e46482ffec11eb2fc1cf985232e79a88101697c89e763ae683e0dd140f08313da951a81cd85d1e777c13f5f31d5fe5df39d54f2a836c79b7a8a9ff4a99426291cf3ca5f552e22406b008f0aac06c4686beafd81fb4e5c16260261798aa8e587222af3961126b798a091b133cc151be3b2c7364dddcb33fbdb8cc20dfd3da69235215c4923e138988810f9c1323b7b4034fa7757116bcd90935c3f22de7e8d14a54dbec9fa498188ac2aaae1d681c149123c6eb3abae5720e83ca735433f2537a9bf725240b59117a36a8a057197ec891ba31aaa73196e9045db447375f25b84f63122f252a0b59e27228ddb72c612c1e1dde78de62b07e14554e913680bc0ea8182dbf62354ab4ceabaa40286ec4003d17722c183bc521d275498be23b5cff359e51dd4342e75152477cebfeecdcf4ed6fdd377b2e83c83633d070a61c344fbeae464f7b7315a8652ab7f3929cbb275cbcd9207da52197f4095e8c486019cf154db098a118726c2e25cbe1127b44142a8e96375abf00d0f03e2eb4fb73d4f37ce44163b739b45316a6eccaa96f475e9c8c1bb13ea5c817fe059929cf25b4e67bc4614d580043a1c69bea713c8ab4afa88027bafbbcb6415f5e42adf00512e30904e1211bade75f9465d0955f84e30bbcc001f6fe75110befd6f9bc848785b2a14c1f499af24cc74ebfeed0a60adfaf885fb0c6cdfcde1f050c1fdabffa70a988c73d8340bd50cac50871359b14737d950e961fbd38ca7879cd9932bfe7d93a605381d29515365172c65281450bcaf9274779be789ddd29dc4bfe71abf0c3c8bfd63a6ca8a5ba1c42d2f7a49da8eabe01f2b058aaa3996eb7c32233fa2e0e920bc13ed80d8e915059c4a1b1bf30faa2df2ce57936185259f00f03e0f11bad81be7b37b30fb7dd784d033421d15b58b32d51336be724b36bfbbfa53763ecd2d82dd932110420cacfc806f643ea3c6c3aa52b9c80023dc1a602edb2831bcae326d158b989cd6735404a7b717e6f41c34d0f7d68befdceeca4176186af6939ed075dd284943412ff9a8cff720ddf3c3b890248c2906056cb56fc11b11bb88edc2a04644c506a651569e2afbb3d42dc0e01cc4fb2783d262f5e4d907cc5688d68ed198c33ba2b174944af216df14c3eaf6af591fd29042cff3bae260e89e06ac4195c3a769ee984f7bf9b0529b69d0d1de1e69d4e19cf5923ce7191632d2459b693d72eb1138ef458671962044ba1be2f4baa7eee5714d2b063c6a25084ec1b303040300929bb1d69a5a06cfa02cdcd109bf19cb3b2e2928014ab1d74da3e06aa176274a1aedefccc1896b3b337d41f132f9406f9afb725b7bed827923fa4040b818856c33e9875aaf0cbcecec5fe5fdf0eb5688f1448ce38257f78306df14335403151e120f8b121024a042b301fb0978a947984c23afd2afda0262941339323b74d63961a90a3f792f1e782eda66c3e84aa2b1f480c21a775c8245dab4254bf1806ae70cd252585c3c41d26db494c9925ae1b8332303d"}) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, &(0x7f0000001d80)={0x0, 0x24, 0xe7, {0xe7, 0x23, "41bc3c8b5a5cd80c90414cf9119a4e8556429d4eeab6be453a9bf72ea1848595711c68ef83ebd5a3e17ea169eabd899944bec5621028d748037fb37acc5fd21d73265307b76b8c08edf828a942f44aed45dc56b6de36b30ab83882ae33d8dec74a9ac1b89c1646795a89db78ffc3fc12b0b2f7ca2e1ea17e8876de38e0f805adcf048ab38d367b7a5f626cb9e0f01613d9e8e4d8c7d821f74b6db02cfc4e4a7d3b27933b1cb58b0c212056efbd581fa02c9f4bb7217a13a568b35b4cc4efc962275324e817315dbc64551da12638610f68874836944e1be7166ddf61f20032894b74c89664"}}, &(0x7f0000001e80)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "76176abb406e3c84e4daf17a6de4fe2d460115dea60835bde564d5bf15d94534ae09c4991956a1fed18815e9b4e0510dd011ca217f1c9bfd79c0a73849d5725f8a25d651bed9a54c1a4396541d3c5178cb6c2d84aa341083acc9858572b6dfadca8a39d2953152a6c905100b36fcc0ca55cfc42b479156222069bba3030d16b114eb9180cb67fe457d02d31a599916bee92f4b7d662c89f6cc463c341f05e8ef"}}, &(0x7f0000001f40)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0x7, "81ecf7fd"}, @global=@item_012={0x0, 0x1, 0x1}, @local=@item_4={0x3, 0x2, 0x5, "06127bf6"}, @global=@item_012={0x1, 0x1, 0x7, 'H'}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x2, 0x2, 0x3, "8731"}, @global=@item_4={0x3, 0x1, 0xbfb9416eb334e1a1, "ef230806"}]}}, &(0x7f0000001f80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0xc55}}}}, &(0x7f0000002200)={0x2c, &(0x7f0000002000)={0x40, 0xe, 0x9f, "c754f101e8b34baeae825d80064c1b1dda122e459ecb1ced49c1d9e7bc208d174f7c1df9af53a69affa49c42cbf0e34a6575b12806d9bb1b45d98dc9791db2ce38e196d5729443ffc292a66e6320fcad324b90bec934c845b0841e06713d4b34a4489287c70dd6ee8e322461e817c63d0cc3676912b09ed4f3700b2079e93da80ee0b66f16163c84663500eea9bd3a17b727d4ecd417abeb4f58dd6e147c23"}, &(0x7f00000020c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002100)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002140)={0x20, 0x1, 0x75, "89d9ef257ae5ee27eff2df5cad65562d07f4b9931959def0424175c64f3d62c28d5cb8244e13b8272ab942f6ca61a9eafcf599b2c7727f36b4212cf92859614869826b7348249c7e39f98576668ad3cc3dc4036029b9bb821db39310424656103c9ab469b6124a2189e0eafa65a3d793abb4ce7926"}, &(0x7f00000021c0)={0x20, 0x3, 0x1, 0x7}}) 09:49:43 executing program 3: tkill(0x0, 0x13) ptrace(0x10, 0x0) ptrace(0x420e, 0x0) [ 1131.505054][T19795] cgroup: fork rejected by pids controller in /syz4 09:49:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x5}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1131.612857][ T113] usb 6-1: new high-speed USB device number 92 using dummy_hcd 09:49:43 executing program 3: tkill(0x0, 0x13) ptrace(0x10, 0x0) ptrace(0x420e, 0x0) [ 1131.739520][T19917] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) (async) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000) (async) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x5000) shmctl$SHM_LOCK(r1, 0xb) (async) sigaltstack(&(0x7f0000ffe000)={0x0}, 0x0) (async) shmctl$SHM_UNLOCK(r1, 0xc) [ 1131.843508][ T3570] usb 1-1: reset high-speed USB device number 36 using dummy_hcd [ 1131.882489][ T113] usb 6-1: Using ep0 maxpacket: 32 09:49:44 executing program 3: tkill(0x0, 0x13) ptrace(0x10, 0x0) ptrace(0x420e, 0x0) [ 1131.952642][T11580] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1131.990996][T19925] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1132.034615][ T113] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1132.044068][ T113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.073536][ T113] usb 6-1: config 0 descriptor?? [ 1132.120042][ T113] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1132.362382][T11580] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1132.373718][T11580] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.384974][T11580] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.394994][T11580] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1132.408370][T11580] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1132.417823][T11580] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.437575][T19813] UDC core: couldn't find an available UDC or it's busy: -16 [ 1132.438803][T11580] usb 3-1: config 0 descriptor?? [ 1132.445495][T19813] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1132.544225][T19796] UDC core: couldn't find an available UDC or it's busy: -16 [ 1132.551921][T19796] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1132.924878][T19881] UDC core: couldn't find an available UDC or it's busy: -16 [ 1132.932642][T19881] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1132.967242][T11580] appleir 0003:05AC:8243.001C: No inputs registered, leaving [ 1132.998184][T11580] appleir 0003:05AC:8243.001C: hiddev1,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 09:49:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x6}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:46 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) 09:49:46 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io(r2, &(0x7f0000000ac0)={0x2c, &(0x7f0000000940)={0x0, 0x1, 0x8f, {0x8f, 0xc, "483b229167f8c7ab61fe47e91a62b341dcac35db15527a32166d750706ec0079d28bcaf128198b8fa84712413311ff2a339c1328046287428bee2b2bfa5b9b9026dc10e5c6d6a41ad7e63d137bfbe872e18fe41960cfd5e0e861df4096741fa125fb1f14dca1ddf9111a71334f13dba24b93353cb2646b721bf52e118d6bc1ab0c60151cbcac754985a30da379"}}, &(0x7f0000000a00)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "e7f3c0c9667e82224eab3ec07a45580f1a73e2777172e82eef568e39000a35c892b16c290059879c193665a077d2fe3537eae09a5bb023c6aab68815b18b4a6d78a3e5cd26a70580b184a8c1f38c9fc16599455f259df25a715ca2bd0e1d751a0983c82023672f5aa6a4820b0d3241a805f57eb2f7b412235254641261"}}, &(0x7f0000000200)={0x0, 0xf, 0x3b, {0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x3, 0xf000, 0x4, [0x141b0, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "f133a62c78191fd12d487765bd16c8d1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3f, 0x7f, 0x5, 0x20}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x1f, 0x8, "86c3618b", "72eedd85"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x18, 0x6, 0xed, 0x7, 0x7d0, 0x1000}}}, &(0x7f0000002440)={0x84, &(0x7f0000000b40)={0x40, 0x13, 0x1b, "7c7b4e9008440cbdb12f9137f0776600869e3d511de58d46d16aa5"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000bc0)={0x0, 0x8, 0x1}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x100, 0x8}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x8001}, &(0x7f0000001d00)={0x40, 0x9, 0x1}, &(0x7f0000001d40)={0x40, 0xb, 0x2, "719c"}, &(0x7f0000002240)={0x40, 0xf, 0x2, 0x372}, &(0x7f0000002280)={0x40, 0x13, 0x6, @remote}, &(0x7f00000022c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000002300)={0x40, 0x19, 0x2, "3dd7"}, &(0x7f0000002340)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000002380)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000023c0)={0x40, 0x1e, 0x1}, &(0x7f0000002400)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000000c0)=0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000340)={0x20, 0x12, 0x7c, {0x7c, 0x7, "23e9d7e2c7ff4298d74ca16d4e6f4c596dd134b395c3337af98f9e2b51836d4b23222918249590b6145777b9ef82c6994746f19fdda6f29096d0712c085c589caec2e6a3c2128329c4ac0913cd4b52786b84dcb9e6ad66e2b11ff1d3df063d487611837ad8516f9fa7eaad6dcff956ebce9affceaec0e0abe19d"}}, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], &(0x7f00000001c0)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0xe, 0xfff7}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x45, 0x81, "a36a9db8", "dd64b5ec"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfe, 0x2, 0x65, 0x80, 0xa4, 0x0, 0x81}}}, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x20, 0x17, 0x11, "3187ac88f822c6be0f83f55b9c5eb5057e"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x400, 0x4, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000600)={0x40, 0xb, 0x2, "d7b5"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x13, 0x6, @random="9cdbbb265c3f"}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="04886c962d5c"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "d8ee"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x5}}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000220200000000000000000000800100000010000080001"], 0x2c}}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000d00)={{r4}, "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"}) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, &(0x7f0000001d80)={0x0, 0x24, 0xe7, {0xe7, 0x23, "41bc3c8b5a5cd80c90414cf9119a4e8556429d4eeab6be453a9bf72ea1848595711c68ef83ebd5a3e17ea169eabd899944bec5621028d748037fb37acc5fd21d73265307b76b8c08edf828a942f44aed45dc56b6de36b30ab83882ae33d8dec74a9ac1b89c1646795a89db78ffc3fc12b0b2f7ca2e1ea17e8876de38e0f805adcf048ab38d367b7a5f626cb9e0f01613d9e8e4d8c7d821f74b6db02cfc4e4a7d3b27933b1cb58b0c212056efbd581fa02c9f4bb7217a13a568b35b4cc4efc962275324e817315dbc64551da12638610f68874836944e1be7166ddf61f20032894b74c89664"}}, &(0x7f0000001e80)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "76176abb406e3c84e4daf17a6de4fe2d460115dea60835bde564d5bf15d94534ae09c4991956a1fed18815e9b4e0510dd011ca217f1c9bfd79c0a73849d5725f8a25d651bed9a54c1a4396541d3c5178cb6c2d84aa341083acc9858572b6dfadca8a39d2953152a6c905100b36fcc0ca55cfc42b479156222069bba3030d16b114eb9180cb67fe457d02d31a599916bee92f4b7d662c89f6cc463c341f05e8ef"}}, &(0x7f0000001f40)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0x7, "81ecf7fd"}, @global=@item_012={0x0, 0x1, 0x1}, @local=@item_4={0x3, 0x2, 0x5, "06127bf6"}, @global=@item_012={0x1, 0x1, 0x7, 'H'}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x2, 0x2, 0x3, "8731"}, @global=@item_4={0x3, 0x1, 0xbfb9416eb334e1a1, "ef230806"}]}}, &(0x7f0000001f80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0xc55}}}}, &(0x7f0000002200)={0x2c, &(0x7f0000002000)={0x40, 0xe, 0x9f, "c754f101e8b34baeae825d80064c1b1dda122e459ecb1ced49c1d9e7bc208d174f7c1df9af53a69affa49c42cbf0e34a6575b12806d9bb1b45d98dc9791db2ce38e196d5729443ffc292a66e6320fcad324b90bec934c845b0841e06713d4b34a4489287c70dd6ee8e322461e817c63d0cc3676912b09ed4f3700b2079e93da80ee0b66f16163c84663500eea9bd3a17b727d4ecd417abeb4f58dd6e147c23"}, &(0x7f00000020c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002100)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002140)={0x20, 0x1, 0x75, "89d9ef257ae5ee27eff2df5cad65562d07f4b9931959def0424175c64f3d62c28d5cb8244e13b8272ab942f6ca61a9eafcf599b2c7727f36b4212cf92859614869826b7348249c7e39f98576668ad3cc3dc4036029b9bb821db39310424656103c9ab469b6124a2189e0eafa65a3d793abb4ce7926"}, &(0x7f00000021c0)={0x20, 0x3, 0x1, 0x7}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") (async) syz_usb_control_io(r2, &(0x7f0000000ac0)={0x2c, &(0x7f0000000940)={0x0, 0x1, 0x8f, {0x8f, 0xc, "483b229167f8c7ab61fe47e91a62b341dcac35db15527a32166d750706ec0079d28bcaf128198b8fa84712413311ff2a339c1328046287428bee2b2bfa5b9b9026dc10e5c6d6a41ad7e63d137bfbe872e18fe41960cfd5e0e861df4096741fa125fb1f14dca1ddf9111a71334f13dba24b93353cb2646b721bf52e118d6bc1ab0c60151cbcac754985a30da379"}}, &(0x7f0000000a00)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "e7f3c0c9667e82224eab3ec07a45580f1a73e2777172e82eef568e39000a35c892b16c290059879c193665a077d2fe3537eae09a5bb023c6aab68815b18b4a6d78a3e5cd26a70580b184a8c1f38c9fc16599455f259df25a715ca2bd0e1d751a0983c82023672f5aa6a4820b0d3241a805f57eb2f7b412235254641261"}}, &(0x7f0000000200)={0x0, 0xf, 0x3b, {0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x3, 0xf000, 0x4, [0x141b0, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "f133a62c78191fd12d487765bd16c8d1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3f, 0x7f, 0x5, 0x20}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x1f, 0x8, "86c3618b", "72eedd85"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x18, 0x6, 0xed, 0x7, 0x7d0, 0x1000}}}, &(0x7f0000002440)={0x84, &(0x7f0000000b40)={0x40, 0x13, 0x1b, "7c7b4e9008440cbdb12f9137f0776600869e3d511de58d46d16aa5"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000bc0)={0x0, 0x8, 0x1}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x100, 0x8}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x8001}, &(0x7f0000001d00)={0x40, 0x9, 0x1}, &(0x7f0000001d40)={0x40, 0xb, 0x2, "719c"}, &(0x7f0000002240)={0x40, 0xf, 0x2, 0x372}, &(0x7f0000002280)={0x40, 0x13, 0x6, @remote}, &(0x7f00000022c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000002300)={0x40, 0x19, 0x2, "3dd7"}, &(0x7f0000002340)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000002380)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000023c0)={0x40, 0x1e, 0x1}, &(0x7f0000002400)={0x40, 0x21, 0x1, 0x8}}) (async) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) (async) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000000c0)=0x1) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000340)={0x20, 0x12, 0x7c, {0x7c, 0x7, "23e9d7e2c7ff4298d74ca16d4e6f4c596dd134b395c3337af98f9e2b51836d4b23222918249590b6145777b9ef82c6994746f19fdda6f29096d0712c085c589caec2e6a3c2128329c4ac0913cd4b52786b84dcb9e6ad66e2b11ff1d3df063d487611837ad8516f9fa7eaad6dcff956ebce9affceaec0e0abe19d"}}, &(0x7f0000000900)=ANY=[@ANYBLOB="00030600004b"], &(0x7f00000001c0)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0xe, 0xfff7}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x45, 0x81, "a36a9db8", "dd64b5ec"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfe, 0x2, 0x65, 0x80, 0xa4, 0x0, 0x81}}}, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x20, 0x17, 0x11, "3187ac88f822c6be0f83f55b9c5eb5057e"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x400, 0x4, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000600)={0x40, 0xb, 0x2, "d7b5"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x13, 0x6, @random="9cdbbb265c3f"}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="04886c962d5c"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "d8ee"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x5}}) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000220200000000000000000000800100000010000080001"], 0x2c}}, 0x0) (async) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000d00)={{r4}, "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"}) (async) syz_usb_control_io$hid(r0, &(0x7f0000001fc0)={0x24, &(0x7f0000001d80)={0x0, 0x24, 0xe7, {0xe7, 0x23, "41bc3c8b5a5cd80c90414cf9119a4e8556429d4eeab6be453a9bf72ea1848595711c68ef83ebd5a3e17ea169eabd899944bec5621028d748037fb37acc5fd21d73265307b76b8c08edf828a942f44aed45dc56b6de36b30ab83882ae33d8dec74a9ac1b89c1646795a89db78ffc3fc12b0b2f7ca2e1ea17e8876de38e0f805adcf048ab38d367b7a5f626cb9e0f01613d9e8e4d8c7d821f74b6db02cfc4e4a7d3b27933b1cb58b0c212056efbd581fa02c9f4bb7217a13a568b35b4cc4efc962275324e817315dbc64551da12638610f68874836944e1be7166ddf61f20032894b74c89664"}}, &(0x7f0000001e80)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "76176abb406e3c84e4daf17a6de4fe2d460115dea60835bde564d5bf15d94534ae09c4991956a1fed18815e9b4e0510dd011ca217f1c9bfd79c0a73849d5725f8a25d651bed9a54c1a4396541d3c5178cb6c2d84aa341083acc9858572b6dfadca8a39d2953152a6c905100b36fcc0ca55cfc42b479156222069bba3030d16b114eb9180cb67fe457d02d31a599916bee92f4b7d662c89f6cc463c341f05e8ef"}}, &(0x7f0000001f40)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0x7, "81ecf7fd"}, @global=@item_012={0x0, 0x1, 0x1}, @local=@item_4={0x3, 0x2, 0x5, "06127bf6"}, @global=@item_012={0x1, 0x1, 0x7, 'H'}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x2, 0x2, 0x3, "8731"}, @global=@item_4={0x3, 0x1, 0xbfb9416eb334e1a1, "ef230806"}]}}, &(0x7f0000001f80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0xc55}}}}, &(0x7f0000002200)={0x2c, &(0x7f0000002000)={0x40, 0xe, 0x9f, "c754f101e8b34baeae825d80064c1b1dda122e459ecb1ced49c1d9e7bc208d174f7c1df9af53a69affa49c42cbf0e34a6575b12806d9bb1b45d98dc9791db2ce38e196d5729443ffc292a66e6320fcad324b90bec934c845b0841e06713d4b34a4489287c70dd6ee8e322461e817c63d0cc3676912b09ed4f3700b2079e93da80ee0b66f16163c84663500eea9bd3a17b727d4ecd417abeb4f58dd6e147c23"}, &(0x7f00000020c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002100)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002140)={0x20, 0x1, 0x75, "89d9ef257ae5ee27eff2df5cad65562d07f4b9931959def0424175c64f3d62c28d5cb8244e13b8272ab942f6ca61a9eafcf599b2c7727f36b4212cf92859614869826b7348249c7e39f98576668ad3cc3dc4036029b9bb821db39310424656103c9ab469b6124a2189e0eafa65a3d793abb4ce7926"}, &(0x7f00000021c0)={0x20, 0x3, 0x1, 0x7}}) (async) 09:49:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000005a01060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x94, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x653a6fa49c093ac9}]}], {0x14}}, 0x110}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\t\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000c000000080001007533320034090200400006003c0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000440105"], 0x960}}, 0x0) sendto(r2, &(0x7f0000000400)="dd8a4a56a4261b849d613d1e9b2d70fc79e1aac0d7fbdc85a79e48035dfd8927d11d97c1f592976f37de45e109654a38db3945bbe5fcce1e6783b986dbe8705ae369ba25809a188c1317c5524719a5aa9c2f5095d0e43653a2ab491f49aa1067ea1aa15172a9aa81a37e0feefbbbb6dea2e2a9d9131c27802a08388df037b7e3e43aba9bead70b0c56785dad92a2e1bee2d34fc15c964bb108acc5473348880867f0314a", 0xa4, 0x0, &(0x7f00000004c0)=@in={0x2, 0x4e24, @local}, 0x80) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)={0x3, 'bond0\x00', {0x9}, 0x7f}) [ 1134.002184][ T9254] usb 1-1: reset high-speed USB device number 36 using dummy_hcd 09:49:46 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) [ 1134.166276][T20045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1134.204963][T20044] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1134.284114][T20045] netlink: 1936 bytes leftover after parsing attributes in process `syz-executor.4'. 09:49:46 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") (async) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x0, 0x2, 0x9d, {0x9d, 0x23, "71e89fd8cd91a1486041b17c56f44327e2b49d709748d2e0f5dea0a934aac200bc4f12a3c4c2ec29e03a84b249f9a012ea66436157180f2e9385742f97eda2762776e365d18aef6007d7087134db2d7392b74e13c468c74a31f299bf448ead7aa321d8657ca2c31f2449473088e5ad80a9033e9fa9ca36332acf171a33011150dae2aa2c531686aed178450774309ac0da13811cc326bc0cba370d"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, &(0x7f0000000140)={0x0, 0xf, 0x4f, {0x5, 0xf, 0x4f, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x5, 0x9, 0xfff9, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x9, 0xfe01}, @generic={0x21, 0x10, 0xb, "12f1acb34a9c1ef96665be0b5b9bb49939843d5f1371c97764a1bb8c0b5f"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "b89fed08756171e9d0d061d9055150d6"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x2, 0x5, "bbafc573", "37dd34df"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x60, 0x20, 0xff, 0x1, 0x3, 0x6}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x8, 0x6, "9135552d572c"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x60, 0x20}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000480)={0x40, 0xb, 0x2, "ece5"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @random="e10e3a9f7d1d"}, &(0x7f0000000600)={0x40, 0x19, 0x2, 'O\f'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x1f}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x31}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x9}}) (async) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800)={0x0, 0x23, 0xdb, {0xdb, 0x30, "ebec60458c04515ae95edc9e72d1f15731b3033f71176aaafbc129815ab246df47e206aaa6d603e96ba5e6ad1701cb0b4b82fcf875d8cb392f6d7a7fae98a00bafe4605fef44feb031e990944440d2753e84c273d87e8d71f1dbb7b922fef940c00603b15d7b04eacba51f3dc491f1a440faf18414631aec30c4d3c5ad9974e14dfd2041dcf5c36201d7f8e6d22042072ba07833946dbc6b4a3715b13c4757ec836652b4a0897f1a28a19d1aff7fca9fc0aaff544541e96419c1a1ff965749572e8c8f8bdd98b254313f2dbe90dc00db8c3a8eb503cb5e6a12"}}, &(0x7f0000000900)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "18e0a5245a9e5a73338847f79be4de21f8c6e721cc5f2e53655cf3786d254da02e8b4934d6b6edd137ff6acb60bdc67a9e6f6771a7d92547ccf0415e8d441b67bb12779a5ca475582302660dfe2bf0809070f2398ebaf542f4fc50d164f108b3b56445d0c05b0ce7a2439ed128078a0de97a4181f3533d57fc9e9d3a5ff2062e10a3d6188a13c3ae541de60b3ff229c09b07b96121913efa1a92f1e23fd3a4b14ca16ab4d62a364c414fcc956112d8efa74d"}}, &(0x7f00000009c0)={0x0, 0xf, 0x9d, {0x5, 0xf, 0x9d, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x200, 0x0, 0x8001, [0xff0030, 0x5bfeddec6afdb5af]}, @generic={0x84, 0x10, 0xb, "2e5055ad21cb82d3398ef7ecfbeee5ce27891160e521565a56bcba2559b52a6fd7d921243c8235df9b6a970d244be77c97020c966c6ef1fd99ec820114e1d349a00c5b093e4899a2ed244925f7750d6044c5a28f1b710bdb3b3e72ea5bf9274bede4bf5cadaa07eec4661713323f4d9b2d82e88bc2a9ef38c21ec59106562072a6"}]}}, &(0x7f0000000a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x0, 0x3, "f76c8bcd", "47b5ca9e"}}, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x40, 0x0, 0x1, 0x3000, 0x8}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000b40)={0x0, 0x6, 0x4d, "03018671bc46140fab79fb5731d70cc8584224890368984daf1ad5ff73bd80af2cee359ff684c937eac0082af45c9e4e69c896802124f967bf42faee1cbd06e89da9e41cbfc2aa7bc1fdf3ade3"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x800}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x23}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "d6fa"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x133}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "d3f0"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x6b}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0xdd}}) [ 1134.369559][T11117] usb 6-1: USB disconnect, device number 92 [ 1134.712085][ T9254] usb 1-1: device descriptor read/64, error -71 [ 1134.871962][T11117] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1134.982077][ T9254] usb 1-1: reset high-speed USB device number 36 using dummy_hcd [ 1135.111908][T11117] usb 6-1: Using ep0 maxpacket: 32 [ 1135.232245][T11117] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1135.241634][T11117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.254012][T11117] usb 6-1: config 0 descriptor?? 09:49:47 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) 09:49:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}}, 0x0) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000005a01060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x94, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x653a6fa49c093ac9}]}], {0x14}}, 0x110}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\t\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000c000000080001007533320034090200400006003c0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000440105"], 0x960}}, 0x0) (async, rerun: 32) sendto(r2, &(0x7f0000000400)="dd8a4a56a4261b849d613d1e9b2d70fc79e1aac0d7fbdc85a79e48035dfd8927d11d97c1f592976f37de45e109654a38db3945bbe5fcce1e6783b986dbe8705ae369ba25809a188c1317c5524719a5aa9c2f5095d0e43653a2ab491f49aa1067ea1aa15172a9aa81a37e0feefbbbb6dea2e2a9d9131c27802a08388df037b7e3e43aba9bead70b0c56785dad92a2e1bee2d34fc15c964bb108acc5473348880867f0314a", 0xa4, 0x0, &(0x7f00000004c0)=@in={0x2, 0x4e24, @local}, 0x80) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)={0x3, 'bond0\x00', {0x9}, 0x7f}) 09:49:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x7}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:47 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0xffffffffffffffff, r0) ptrace(0x420e, r0) [ 1135.299980][T11117] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1135.330255][T18214] usb 3-1: USB disconnect, device number 85 [ 1135.449904][T20062] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1135.498156][T20071] UDC core: couldn't find an available UDC or it's busy: -16 [ 1135.506015][T20071] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 09:49:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x8}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1135.549419][T20047] UDC core: couldn't find an available UDC or it's busy: -16 [ 1135.557373][T20047] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 09:49:47 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0xffffffffffffffff, r0) ptrace(0x420e, r0) 09:49:47 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) [ 1135.725262][T20146] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1135.747217][T11580] usb 6-1: USB disconnect, device number 93 [ 1137.251979][T18214] usb 1-1: reset high-speed USB device number 36 using dummy_hcd 09:49:49 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x8000000000000001, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x31) 09:49:49 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x7f, 0x31, 0x20, 0xc45, 0x60b0, 0x1807, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3a, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r2, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") (async) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x0, 0x2, 0x9d, {0x9d, 0x23, "71e89fd8cd91a1486041b17c56f44327e2b49d709748d2e0f5dea0a934aac200bc4f12a3c4c2ec29e03a84b249f9a012ea66436157180f2e9385742f97eda2762776e365d18aef6007d7087134db2d7392b74e13c468c74a31f299bf448ead7aa321d8657ca2c31f2449473088e5ad80a9033e9fa9ca36332acf171a33011150dae2aa2c531686aed178450774309ac0da13811cc326bc0cba370d"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, &(0x7f0000000140)={0x0, 0xf, 0x4f, {0x5, 0xf, 0x4f, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x5, 0x9, 0xfff9, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0x9, 0xfe01}, @generic={0x21, 0x10, 0xb, "12f1acb34a9c1ef96665be0b5b9bb49939843d5f1371c97764a1bb8c0b5f"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "b89fed08756171e9d0d061d9055150d6"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x2, 0x5, "bbafc573", "37dd34df"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x60, 0x20, 0xff, 0x1, 0x3, 0x6}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x8, 0x6, "9135552d572c"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x60, 0x20}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000480)={0x40, 0xb, 0x2, "ece5"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @random="e10e3a9f7d1d"}, &(0x7f0000000600)={0x40, 0x19, 0x2, 'O\f'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x1f}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x31}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x9}}) (async) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000800)={0x0, 0x23, 0xdb, {0xdb, 0x30, "ebec60458c04515ae95edc9e72d1f15731b3033f71176aaafbc129815ab246df47e206aaa6d603e96ba5e6ad1701cb0b4b82fcf875d8cb392f6d7a7fae98a00bafe4605fef44feb031e990944440d2753e84c273d87e8d71f1dbb7b922fef940c00603b15d7b04eacba51f3dc491f1a440faf18414631aec30c4d3c5ad9974e14dfd2041dcf5c36201d7f8e6d22042072ba07833946dbc6b4a3715b13c4757ec836652b4a0897f1a28a19d1aff7fca9fc0aaff544541e96419c1a1ff965749572e8c8f8bdd98b254313f2dbe90dc00db8c3a8eb503cb5e6a12"}}, &(0x7f0000000900)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "18e0a5245a9e5a73338847f79be4de21f8c6e721cc5f2e53655cf3786d254da02e8b4934d6b6edd137ff6acb60bdc67a9e6f6771a7d92547ccf0415e8d441b67bb12779a5ca475582302660dfe2bf0809070f2398ebaf542f4fc50d164f108b3b56445d0c05b0ce7a2439ed128078a0de97a4181f3533d57fc9e9d3a5ff2062e10a3d6188a13c3ae541de60b3ff229c09b07b96121913efa1a92f1e23fd3a4b14ca16ab4d62a364c414fcc956112d8efa74d"}}, &(0x7f00000009c0)={0x0, 0xf, 0x9d, {0x5, 0xf, 0x9d, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x200, 0x0, 0x8001, [0xff0030, 0x5bfeddec6afdb5af]}, @generic={0x84, 0x10, 0xb, "2e5055ad21cb82d3398ef7ecfbeee5ce27891160e521565a56bcba2559b52a6fd7d921243c8235df9b6a970d244be77c97020c966c6ef1fd99ec820114e1d349a00c5b093e4899a2ed244925f7750d6044c5a28f1b710bdb3b3e72ea5bf9274bede4bf5cadaa07eec4661713323f4d9b2d82e88bc2a9ef38c21ec59106562072a6"}]}}, &(0x7f0000000a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x0, 0x3, "f76c8bcd", "47b5ca9e"}}, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x40, 0x0, 0x1, 0x3000, 0x8}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000b40)={0x0, 0x6, 0x4d, "03018671bc46140fab79fb5731d70cc8584224890368984daf1ad5ff73bd80af2cee359ff684c937eac0082af45c9e4e69c896802124f967bf42faee1cbd06e89da9e41cbfc2aa7bc1fdf3ade3"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x800}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x23}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "d6fa"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x133}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "d3f0"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x6b}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0xdd}}) 09:49:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000005a01060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x94, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x653a6fa49c093ac9}]}], {0x14}}, 0x110}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\t\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000c000000080001007533320034090200400006003c0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000440105"], 0x960}}, 0x0) sendto(r2, &(0x7f0000000400)="dd8a4a56a4261b849d613d1e9b2d70fc79e1aac0d7fbdc85a79e48035dfd8927d11d97c1f592976f37de45e109654a38db3945bbe5fcce1e6783b986dbe8705ae369ba25809a188c1317c5524719a5aa9c2f5095d0e43653a2ab491f49aa1067ea1aa15172a9aa81a37e0feefbbbb6dea2e2a9d9131c27802a08388df037b7e3e43aba9bead70b0c56785dad92a2e1bee2d34fc15c964bb108acc5473348880867f0314a", 0xa4, 0x0, &(0x7f00000004c0)=@in={0x2, 0x4e24, @local}, 0x80) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)={0x3, 'bond0\x00', {0x9}, 0x7f}) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000005a01060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x94, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x653a6fa49c093ac9}]}], {0x14}}, 0x110}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\t\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000c000000080001007533320034090200400006003c0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000440105"], 0x960}}, 0x0) (async) sendto(r2, &(0x7f0000000400)="dd8a4a56a4261b849d613d1e9b2d70fc79e1aac0d7fbdc85a79e48035dfd8927d11d97c1f592976f37de45e109654a38db3945bbe5fcce1e6783b986dbe8705ae369ba25809a188c1317c5524719a5aa9c2f5095d0e43653a2ab491f49aa1067ea1aa15172a9aa81a37e0feefbbbb6dea2e2a9d9131c27802a08388df037b7e3e43aba9bead70b0c56785dad92a2e1bee2d34fc15c964bb108acc5473348880867f0314a", 0xa4, 0x0, &(0x7f00000004c0)=@in={0x2, 0x4e24, @local}, 0x80) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)={0x3, 'bond0\x00', {0x9}, 0x7f}) (async) 09:49:49 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4000080) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d01014000010303010902900003010000000904000000010100000a2401000000020202072407050000020b240600000200000000000a2408200000004d859c09040100000102000009040101010102000009050109400000000007250100000000090c020000010200000904020601010200000e240201aa00000047f9efa1529d072401000005000905820900020000000725018f"], 0x0) 09:49:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x9}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:49 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0xffffffffffffffff, r0) ptrace(0x420e, r0) [ 1137.405604][T20195] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1137.427903][T20197] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 09:49:49 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, 0x0) ptrace(0x420e, r0) 09:49:49 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x8000000000000001, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x31) [ 1137.506275][T20197] netlink: 1936 bytes leftover after parsing attributes in process `syz-executor.4'. 09:49:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0xc}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1137.655045][T20069] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1137.663126][ T9254] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1137.720887][T20252] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:49 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x8000000000000001, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x31) 09:49:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0xe}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:49 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, 0x0) ptrace(0x420e, r0) 09:49:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001900090000000000000000001c140000fe000001000000000c0012000a000000", @ANYRES32=0x0, @ANYBLOB="c6c246cdf1743b975bead045db463aab855f2dc0b5486f50d680a1242aef6fcc30796eb46023ef351a42fca72c700bb903a2669d69a3c2bfdf3fbed7502f7613d1c7c8a0017c68fdf5696aa7022677df8bbdff7a48d3805c92ab4799e7a87d731485df17"], 0x28}}, 0x0) [ 1137.902842][T20069] usb 6-1: Using ep0 maxpacket: 32 [ 1137.908595][ T9254] usb 3-1: Using ep0 maxpacket: 8 [ 1138.023258][T20069] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=18.07 [ 1138.033114][T20069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.042865][ T9254] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1138.051263][T20316] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1138.054105][ T9254] usb 3-1: config 1 interface 2 altsetting 6 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1138.054251][ T9254] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1138.054351][ T9254] usb 3-1: config 1 interface 2 has no altsetting 0 [ 1138.151897][T20069] usb 6-1: config 0 descriptor?? [ 1138.199302][T20069] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 1138.215487][ T3570] usb 1-1: USB disconnect, device number 36 [ 1138.322683][ T9254] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1138.332473][ T9254] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1138.340698][ T9254] usb 3-1: Product: syz [ 1138.345194][ T9254] usb 3-1: Manufacturer: syz [ 1138.349951][ T9254] usb 3-1: SerialNumber: syz 09:49:50 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x7e66, 0x2, 0x7, 0x81, &(0x7f00000000c0)=[{}, {}]}) r0 = syz_usb_connect(0x6, 0x3e0, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0xe5, 0x14, 0x49, 0x20, 0x944, 0x200, 0x52b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x3ce, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0xd4, 0x0, 0x7, 0xff, 0xfa, 0xdc, 0x0, [], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x81, 0x20, 0x7, [@generic={0x64, 0x8, "35e1911d787b010a5c3e34579dc9980a8ad40168e5c1b833a5452442e44d9f1d94f33dd8242b4a1f55e0c1c3625b9f7bc0bdac17fdd1435e810b1cab3677f3f886c8c28c16eedc49845b886360f89d190ce364a2f3e73c35dff8b1b120d5826b694b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x3, 0xff, 0xff, [@generic={0xd8, 0xc, "4ad7e7a3e559ad3e9ecdf8c64bbc817ce01b089d23883e9508fcf51b1402575373f84a7c460afec0fcee211c1dc7d328899de9cd0d1d9a8e7f24073722e49d7b1637662fac489211acd027e794f59fac82c057a1e9ed21b3af97588e5ae0709657281ec6f091d5e93ca1e9663935d3e203db58bf41dfb740ddc341b3ed14759d92e55587e0d0842c562e67c6bb27c074d1f271aefc1704d8290f5a34a360514d869220cd6cf7afecece86a5adf9fa584d9d23adc3b9c341f96010115876ff9fd72b7d2ea2c38d01c63986ab28298dd551d2d0a9360f2"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x7f, 0x1, 0x6}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x80, 0x8}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x14, 0x1, 0xfe, [@generic={0x6f, 0x11, "b4611cae9a91b2e8a69a102f82ddceba30ff10b8f5e4bdc2a955008ff19943871e44b9ecd76d9fced78ad19ff72763a78501f8c2cc5346dca6f428b77ba7abefe0bf5479e5204b14f529ba77445f5bd4fdcefe8bea250b15475f5f69fc458e10535b66b57274f428a81ab1695b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0x8f, 0x9, [@generic={0xbe, 0x21, "626130298bc257e3d70ded8c08739084e0929945664e15efa399a16db2a304fe90f0ffb963038d3023d07bb321c358c38b006ecc24a1bee94afe539c805c9d8c69bb69c07cda7a64fc5e086b8fdafe1e75eae835506f69de660493b387e3486d864ab548afecafe6499cb3c14f7591925d5cb77c0656c131c9439fa831cd98cf5747755cd8307fe06de6cdb0febde9c2cd2399f78becb9b8c56902e7440d3cd19b8ac3ea976a8df0f3a799731fb10091520e155d5ad36ae4de160c55"}, @generic={0xdf, 0x21, "f6cd1c3cddbeaf16f1e11c2b9eb7ecad9dd5a36ed5ba40da939db62f194cf88a5bb096120f53e63c3d8f480119075f1e3a6e31e054ebf23ea4ce33a12b58ff4d950c18b90ae5afeb736bda230a5e783502b5d2b1177b6e3fd98e06b1514d8a483152367f4a823946f28c753fdbcb8c33d9f9048f45ab3f75b0947a2aaeb8393ee98739289ccd9731f19d89a720caae218d8baf1f6cc7ad4856ce964ed36db119b64cd62a5ba86c1762a5b2750ae40e3c15216368642c79179807e3e6cab38d60b427de336e78e7b2c163aff0d81f2636ca59c93bf5f13972cf2482228a"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xbe, 0x40, 0x80, [@generic={0x35, 0x22, "bfd7de8f15de724472bf062ebddf74b74d0d408de4ab121b3c56add06b5f7ff86e65acd91e1abbfbe90523652a2a8720e4ae4b"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ecm(0x3, 0x87, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x1, 0x45, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x42, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x8, 0x24, 0x6, 0x0, 0x0, "e7397f"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x20, 0x3, 0x81}, [@mdlm={0x15, 0x24, 0x12, 0xffff}, @ncm={0x6, 0x24, 0x1a, 0x5, 0xd8acfd520ae18dd}, @mbim={0xc, 0x24, 0x1b, 0x7, 0xffff, 0x2, 0x8, 0x1, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3f, 0x9, 0xc0}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb2, 0x81, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x7, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7, 0x4}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x1f, 0x7, 0x1f, 0x20}, 0x19, &(0x7f0000000280)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "9e624a59c4b6fb42f5d7495fb33f9cf3"}]}, 0x4, [{0xf6, &(0x7f00000003c0)=@string={0xf6, 0x3, "f6efb59685029b992d43c298a3c46ab5e5699f4c85fcfd4308ab2fa57e0df33e776a433297327855902f551b7927217768383c9badf6c9f30605980610e35a636e2ec063298d4647b396e31c1666bd8c1a8ee38b58f7d53b3743d0499009b43e24b25ffabe05e2b966862fc7cc50dfeeb3e220cbe38dd41141730c9f86e9b31fe5382778b5d2d78d8d63cef1f80e30734557a488a86677acd80985b6381d67bcd22e5f830987f65371da00964de80cfb1073d178baca1aa4763bca115d7f65c06e13616d33ec40b17dc6037fb05d0edeae46f2dcf437982b78250c7f0300d175bb4636f451b9ef268f00684598da18cfc615a0f7"}}, {0xff, &(0x7f00000004c0)=@string={0xff, 0x3, "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"}}, {0x87, &(0x7f00000002c0)=@string={0x87, 0x3, "3077cf9ca814485596109333745ab25201d6ba4926b7bd671346dc858df28e5f5efa0cfef6df7a92ac94bdd4f96085a0eb3120d2c03c9f17c7ac6f949528f516f34290ae8021d19cb146f334fef03c3f0f2bc993cfb5fe0be39adce9aa280297007105cf90e9ce83fde9214a2c1d0e3fc7348c1e6738fe3f94324e594c9916a025426421a2"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81d}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000780)={0x14, &(0x7f0000000680)={0x20, 0x30, 0xb1, {0xb1, 0x3, "c69aa842b8a77509a62b3785f08d1f7a58fce336be77bc2dbbf88c006431adeac60772589bf51eb2117851a9185e463ecf64bbfbce19a7edc8ca9aa95d72cc74392b8b9e0dc46f7e5064807d46248915e2dc38e3cb3d2cf1eefaf19e3f5c069cb6115d92978a4a816c6dc3baa3f76938b3234c34e7c7c5b7a8a324bb260ecb5d4d18d1ee1d133339aee625d1c8807ac8c63e705462ddaa6a0dd48dc0848889f56c24d9aaad6b3421a335f7e64ebbfe"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x1c, &(0x7f0000000bc0)={0x20, 0xe, 0xea, "a8a6ed88f8252739f9bfd11b49125f076804355d1822889c9e59a163afb1dc6ee49127c57b842565ebe536a2d02c3ea383af87330f90ba3190a625f3b3b70d9508993ffea00c021432e8bb0ee01eddcecd0c1503c0a752423db7d7e03a728a21381ea35b54007f1f18743f4690ed72c9c28003f8bafd103fafa5b95a37f619adff91e5234df8124c6cc8adbd59bbc09da76f7216764b2d02330f3747a794aa7333363d4582b79389913b9863607b97f3334cd3d7cbdc092141e784ad63262742dce3148e28c29d1085b0a09f6fe0cca30d73e4a7781af6d7b2b179d4f405d1a40c8bc872463bbc88469b"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x3}}) 09:49:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r1}, 0x10) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x26}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x10000000001) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1138.615722][T20194] UDC core: couldn't find an available UDC or it's busy: -16 [ 1138.623739][T20194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1138.653105][T11580] usb 6-1: USB disconnect, device number 94 [ 1138.729611][T20328] input: syz1 as /devices/virtual/input/input27 [ 1138.763636][ T9254] usb 3-1: selecting invalid altsetting 0 [ 1138.782911][ T9254] usb 3-1: failed to enable PITCH for EP 0x82 [ 1138.807023][ T9254] usb 3-1: 2:6: cannot set freq 10310305 to ep 0x82 [ 1138.832393][ T9254] usb 3-1: selecting invalid altsetting 0 [ 1138.838307][ T9254] usb 3-1: 0:7 : does not exist [ 1138.885111][ T9254] usb 3-1: USB disconnect, device number 86 [ 1138.981628][T16275] udevd[16275]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1139.132190][T11580] usb 6-1: new high-speed USB device number 95 using dummy_hcd 09:49:51 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4000080) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d01014000010303010902900003010000000904000000010100000a2401000000020202072407050000020b240600000200000000000a2408200000004d859c09040100000102000009040101010102000009050109400000000007250100000000090c020000010200000904020601010200000e240201aa00000047f9efa1529d072401000005000905820900020000000725018f"], 0x0) 09:49:51 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, 0x0) ptrace(0x420e, r0) 09:49:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001900090000000000000000001c140000fe000001000000000c0012000a000000", @ANYRES32=0x0, @ANYBLOB="c6c246cdf1743b975bead045db463aab855f2dc0b5486f50d680a1242aef6fcc30796eb46023ef351a42fca72c700bb903a2669d69a3c2bfdf3fbed7502f7613d1c7c8a0017c68fdf5696aa7022677df8bbdff7a48d3805c92ab4799e7a87d731485df17"], 0x28}}, 0x0) 09:49:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0xf}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r1}, 0x10) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x26}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x10000000001) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1139.278846][T20336] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001900090000000000000000001c140000fe000001000000000c0012000a000000", @ANYRES32=0x0, @ANYBLOB="c6c246cdf1743b975bead045db463aab855f2dc0b5486f50d680a1242aef6fcc30796eb46023ef351a42fca72c700bb903a2669d69a3c2bfdf3fbed7502f7613d1c7c8a0017c68fdf5696aa7022677df8bbdff7a48d3805c92ab4799e7a87d731485df17"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001900090000000000000000001c140000fe000001000000000c0012000a000000", @ANYRES32=0x0, @ANYBLOB="c6c246cdf1743b975bead045db463aab855f2dc0b5486f50d680a1242aef6fcc30796eb46023ef351a42fca72c700bb903a2669d69a3c2bfdf3fbed7502f7613d1c7c8a0017c68fdf5696aa7022677df8bbdff7a48d3805c92ab4799e7a87d731485df17"], 0x28}}, 0x0) (async) 09:49:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r1}, 0x10) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x26}) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x10000000001) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1139.381946][T11580] usb 6-1: Using ep0 maxpacket: 8 09:49:51 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0xffffffffffffffff, r0) 09:49:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x60}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010002d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r1}, 0x10) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x26}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x10000000001) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1139.602489][ T9254] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1139.603598][T11580] usb 6-1: config 1 interface 0 altsetting 66 endpoint 0x81 has an invalid bInterval 178, changing to 11 [ 1139.621559][T11580] usb 6-1: config 1 interface 0 altsetting 66 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1139.634923][T11580] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1139.703179][T20357] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1139.736434][T20360] input: syz1 as /devices/virtual/input/input28 [ 1139.843107][ T9254] usb 3-1: Using ep0 maxpacket: 8 [ 1139.894700][T11580] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1139.904389][T11580] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.912733][T11580] usb 6-1: Product: 眰鳏ᒨ啈႖㎓婴劲혁䦺뜦枽䘓藜徎艹︌鉺钬풽惹ꂅ㇫툠㳀ស곇鑯⢕ᛵ䋳꺐ↀ鳑䚱㓳㼼⬏鏉뗏௾髣⢪霂焀켅菎䨡ᴬ㼎㓇Ẍ㡧㿾㊔奎饌ꀖ䈥Ⅴ [ 1139.936480][T11580] usb 6-1: Manufacturer: ޔ禈恝蓼奩湳蛺鴅鯨ᾔ໇֧佺ᝧ␥ꪰ榄㿳㡽싙ꓷ殑쁣გ䘅꒟贘䡧၈꒡ꀅ瑋輸ꨍ萀戏铗升䢜莐ﯠ鬄嫨菼픙巉問鷵Ꮶ骯▧졽鸳緥垔鹑֯郐⛰䧳꛽㲡ꄠ╤졋囉⤯됑鼯寚욦毽牱ꚁ쳰ᔻ곊ꦎ㩝撸㢈ꫬ畕冟鷛웧ꜽᥥ⩊␁铩䖝䖚꬞䏓下羪䳼蚾䞫펚㙞放覄팒挑뀅賱獄녠 [ 1139.974045][T11580] usb 6-1: SerialNumber: ࠝ [ 1140.022697][ T9254] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1140.023541][T20330] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1140.033930][ T9254] usb 3-1: config 1 interface 2 altsetting 6 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1140.051780][ T9254] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1140.058594][ T9254] usb 3-1: config 1 interface 2 has no altsetting 0 [ 1140.222541][ T9254] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1140.231998][ T9254] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1140.240724][ T9254] usb 3-1: Product: syz [ 1140.245248][ T9254] usb 3-1: Manufacturer: syz [ 1140.249970][ T9254] usb 3-1: SerialNumber: syz [ 1140.524194][T11580] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1140.540490][T11580] usb 6-1: USB disconnect, device number 95 [ 1140.583103][ T9254] usb 3-1: selecting invalid altsetting 0 [ 1140.602159][ T9254] usb 3-1: failed to enable PITCH for EP 0x82 [ 1140.624228][ T9254] usb 3-1: 2:6: cannot set freq 10310305 to ep 0x82 [ 1140.642200][ T9254] usb 3-1: selecting invalid altsetting 0 [ 1140.648099][ T9254] usb 3-1: 0:7 : does not exist [ 1140.688752][ T9254] usb 3-1: USB disconnect, device number 87 [ 1140.765873][T16275] udevd[16275]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 09:49:53 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x7e66, 0x2, 0x7, 0x81, &(0x7f00000000c0)=[{}, {}]}) r0 = syz_usb_connect(0x6, 0x3e0, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0xe5, 0x14, 0x49, 0x20, 0x944, 0x200, 0x52b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x3ce, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0xd4, 0x0, 0x7, 0xff, 0xfa, 0xdc, 0x0, [], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x81, 0x20, 0x7, [@generic={0x64, 0x8, "35e1911d787b010a5c3e34579dc9980a8ad40168e5c1b833a5452442e44d9f1d94f33dd8242b4a1f55e0c1c3625b9f7bc0bdac17fdd1435e810b1cab3677f3f886c8c28c16eedc49845b886360f89d190ce364a2f3e73c35dff8b1b120d5826b694b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x3, 0xff, 0xff, [@generic={0xd8, 0xc, "4ad7e7a3e559ad3e9ecdf8c64bbc817ce01b089d23883e9508fcf51b1402575373f84a7c460afec0fcee211c1dc7d328899de9cd0d1d9a8e7f24073722e49d7b1637662fac489211acd027e794f59fac82c057a1e9ed21b3af97588e5ae0709657281ec6f091d5e93ca1e9663935d3e203db58bf41dfb740ddc341b3ed14759d92e55587e0d0842c562e67c6bb27c074d1f271aefc1704d8290f5a34a360514d869220cd6cf7afecece86a5adf9fa584d9d23adc3b9c341f96010115876ff9fd72b7d2ea2c38d01c63986ab28298dd551d2d0a9360f2"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x7f, 0x1, 0x6}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x80, 0x8}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x14, 0x1, 0xfe, [@generic={0x6f, 0x11, "b4611cae9a91b2e8a69a102f82ddceba30ff10b8f5e4bdc2a955008ff19943871e44b9ecd76d9fced78ad19ff72763a78501f8c2cc5346dca6f428b77ba7abefe0bf5479e5204b14f529ba77445f5bd4fdcefe8bea250b15475f5f69fc458e10535b66b57274f428a81ab1695b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0x8f, 0x9, [@generic={0xbe, 0x21, "626130298bc257e3d70ded8c08739084e0929945664e15efa399a16db2a304fe90f0ffb963038d3023d07bb321c358c38b006ecc24a1bee94afe539c805c9d8c69bb69c07cda7a64fc5e086b8fdafe1e75eae835506f69de660493b387e3486d864ab548afecafe6499cb3c14f7591925d5cb77c0656c131c9439fa831cd98cf5747755cd8307fe06de6cdb0febde9c2cd2399f78becb9b8c56902e7440d3cd19b8ac3ea976a8df0f3a799731fb10091520e155d5ad36ae4de160c55"}, @generic={0xdf, 0x21, "f6cd1c3cddbeaf16f1e11c2b9eb7ecad9dd5a36ed5ba40da939db62f194cf88a5bb096120f53e63c3d8f480119075f1e3a6e31e054ebf23ea4ce33a12b58ff4d950c18b90ae5afeb736bda230a5e783502b5d2b1177b6e3fd98e06b1514d8a483152367f4a823946f28c753fdbcb8c33d9f9048f45ab3f75b0947a2aaeb8393ee98739289ccd9731f19d89a720caae218d8baf1f6cc7ad4856ce964ed36db119b64cd62a5ba86c1762a5b2750ae40e3c15216368642c79179807e3e6cab38d60b427de336e78e7b2c163aff0d81f2636ca59c93bf5f13972cf2482228a"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xbe, 0x40, 0x80, [@generic={0x35, 0x22, "bfd7de8f15de724472bf062ebddf74b74d0d408de4ab121b3c56add06b5f7ff86e65acd91e1abbfbe90523652a2a8720e4ae4b"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ecm(0x3, 0x87, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x1, 0x45, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x42, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x8, 0x24, 0x6, 0x0, 0x0, "e7397f"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x20, 0x3, 0x81}, [@mdlm={0x15, 0x24, 0x12, 0xffff}, @ncm={0x6, 0x24, 0x1a, 0x5, 0xd8acfd520ae18dd}, @mbim={0xc, 0x24, 0x1b, 0x7, 0xffff, 0x2, 0x8, 0x1, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3f, 0x9, 0xc0}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb2, 0x81, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x7, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7, 0x4}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x1f, 0x7, 0x1f, 0x20}, 0x19, &(0x7f0000000280)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "9e624a59c4b6fb42f5d7495fb33f9cf3"}]}, 0x4, [{0xf6, &(0x7f00000003c0)=@string={0xf6, 0x3, "f6efb59685029b992d43c298a3c46ab5e5699f4c85fcfd4308ab2fa57e0df33e776a433297327855902f551b7927217768383c9badf6c9f30605980610e35a636e2ec063298d4647b396e31c1666bd8c1a8ee38b58f7d53b3743d0499009b43e24b25ffabe05e2b966862fc7cc50dfeeb3e220cbe38dd41141730c9f86e9b31fe5382778b5d2d78d8d63cef1f80e30734557a488a86677acd80985b6381d67bcd22e5f830987f65371da00964de80cfb1073d178baca1aa4763bca115d7f65c06e13616d33ec40b17dc6037fb05d0edeae46f2dcf437982b78250c7f0300d175bb4636f451b9ef268f00684598da18cfc615a0f7"}}, {0xff, &(0x7f00000004c0)=@string={0xff, 0x3, "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"}}, {0x87, &(0x7f00000002c0)=@string={0x87, 0x3, "3077cf9ca814485596109333745ab25201d6ba4926b7bd671346dc858df28e5f5efa0cfef6df7a92ac94bdd4f96085a0eb3120d2c03c9f17c7ac6f949528f516f34290ae8021d19cb146f334fef03c3f0f2bc993cfb5fe0be39adce9aa280297007105cf90e9ce83fde9214a2c1d0e3fc7348c1e6738fe3f94324e594c9916a025426421a2"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81d}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000780)={0x14, &(0x7f0000000680)={0x20, 0x30, 0xb1, {0xb1, 0x3, "c69aa842b8a77509a62b3785f08d1f7a58fce336be77bc2dbbf88c006431adeac60772589bf51eb2117851a9185e463ecf64bbfbce19a7edc8ca9aa95d72cc74392b8b9e0dc46f7e5064807d46248915e2dc38e3cb3d2cf1eefaf19e3f5c069cb6115d92978a4a816c6dc3baa3f76938b3234c34e7c7c5b7a8a324bb260ecb5d4d18d1ee1d133339aee625d1c8807ac8c63e705462ddaa6a0dd48dc0848889f56c24d9aaad6b3421a335f7e64ebbfe"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x1c, &(0x7f0000000bc0)={0x20, 0xe, 0xea, "a8a6ed88f8252739f9bfd11b49125f076804355d1822889c9e59a163afb1dc6ee49127c57b842565ebe536a2d02c3ea383af87330f90ba3190a625f3b3b70d9508993ffea00c021432e8bb0ee01eddcecd0c1503c0a752423db7d7e03a728a21381ea35b54007f1f18743f4690ed72c9c28003f8bafd103fafa5b95a37f619adff91e5234df8124c6cc8adbd59bbc09da76f7216764b2d02330f3747a794aa7333363d4582b79389913b9863607b97f3334cd3d7cbdc092141e784ad63262742dce3148e28c29d1085b0a09f6fe0cca30d73e4a7781af6d7b2b179d4f405d1a40c8bc872463bbc88469b"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x3}}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x7e66, 0x2, 0x7, 0x81, &(0x7f00000000c0)=[{}, {}]}) (async) syz_usb_connect(0x6, 0x3e0, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0xe5, 0x14, 0x49, 0x20, 0x944, 0x200, 0x52b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x3ce, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0xd4, 0x0, 0x7, 0xff, 0xfa, 0xdc, 0x0, [], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x81, 0x20, 0x7, [@generic={0x64, 0x8, "35e1911d787b010a5c3e34579dc9980a8ad40168e5c1b833a5452442e44d9f1d94f33dd8242b4a1f55e0c1c3625b9f7bc0bdac17fdd1435e810b1cab3677f3f886c8c28c16eedc49845b886360f89d190ce364a2f3e73c35dff8b1b120d5826b694b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x3, 0xff, 0xff, [@generic={0xd8, 0xc, "4ad7e7a3e559ad3e9ecdf8c64bbc817ce01b089d23883e9508fcf51b1402575373f84a7c460afec0fcee211c1dc7d328899de9cd0d1d9a8e7f24073722e49d7b1637662fac489211acd027e794f59fac82c057a1e9ed21b3af97588e5ae0709657281ec6f091d5e93ca1e9663935d3e203db58bf41dfb740ddc341b3ed14759d92e55587e0d0842c562e67c6bb27c074d1f271aefc1704d8290f5a34a360514d869220cd6cf7afecece86a5adf9fa584d9d23adc3b9c341f96010115876ff9fd72b7d2ea2c38d01c63986ab28298dd551d2d0a9360f2"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x7f, 0x1, 0x6}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x80, 0x8}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x14, 0x1, 0xfe, [@generic={0x6f, 0x11, "b4611cae9a91b2e8a69a102f82ddceba30ff10b8f5e4bdc2a955008ff19943871e44b9ecd76d9fced78ad19ff72763a78501f8c2cc5346dca6f428b77ba7abefe0bf5479e5204b14f529ba77445f5bd4fdcefe8bea250b15475f5f69fc458e10535b66b57274f428a81ab1695b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0x8f, 0x9, [@generic={0xbe, 0x21, "626130298bc257e3d70ded8c08739084e0929945664e15efa399a16db2a304fe90f0ffb963038d3023d07bb321c358c38b006ecc24a1bee94afe539c805c9d8c69bb69c07cda7a64fc5e086b8fdafe1e75eae835506f69de660493b387e3486d864ab548afecafe6499cb3c14f7591925d5cb77c0656c131c9439fa831cd98cf5747755cd8307fe06de6cdb0febde9c2cd2399f78becb9b8c56902e7440d3cd19b8ac3ea976a8df0f3a799731fb10091520e155d5ad36ae4de160c55"}, @generic={0xdf, 0x21, "f6cd1c3cddbeaf16f1e11c2b9eb7ecad9dd5a36ed5ba40da939db62f194cf88a5bb096120f53e63c3d8f480119075f1e3a6e31e054ebf23ea4ce33a12b58ff4d950c18b90ae5afeb736bda230a5e783502b5d2b1177b6e3fd98e06b1514d8a483152367f4a823946f28c753fdbcb8c33d9f9048f45ab3f75b0947a2aaeb8393ee98739289ccd9731f19d89a720caae218d8baf1f6cc7ad4856ce964ed36db119b64cd62a5ba86c1762a5b2750ae40e3c15216368642c79179807e3e6cab38d60b427de336e78e7b2c163aff0d81f2636ca59c93bf5f13972cf2482228a"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xbe, 0x40, 0x80, [@generic={0x35, 0x22, "bfd7de8f15de724472bf062ebddf74b74d0d408de4ab121b3c56add06b5f7ff86e65acd91e1abbfbe90523652a2a8720e4ae4b"}]}}]}}]}}]}}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ecm(0x3, 0x87, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x1, 0x45, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x42, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x8, 0x24, 0x6, 0x0, 0x0, "e7397f"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x20, 0x3, 0x81}, [@mdlm={0x15, 0x24, 0x12, 0xffff}, @ncm={0x6, 0x24, 0x1a, 0x5, 0xd8acfd520ae18dd}, @mbim={0xc, 0x24, 0x1b, 0x7, 0xffff, 0x2, 0x8, 0x1, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3f, 0x9, 0xc0}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb2, 0x81, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x7, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7, 0x4}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x1f, 0x7, 0x1f, 0x20}, 0x19, &(0x7f0000000280)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "9e624a59c4b6fb42f5d7495fb33f9cf3"}]}, 0x4, [{0xf6, &(0x7f00000003c0)=@string={0xf6, 0x3, "f6efb59685029b992d43c298a3c46ab5e5699f4c85fcfd4308ab2fa57e0df33e776a433297327855902f551b7927217768383c9badf6c9f30605980610e35a636e2ec063298d4647b396e31c1666bd8c1a8ee38b58f7d53b3743d0499009b43e24b25ffabe05e2b966862fc7cc50dfeeb3e220cbe38dd41141730c9f86e9b31fe5382778b5d2d78d8d63cef1f80e30734557a488a86677acd80985b6381d67bcd22e5f830987f65371da00964de80cfb1073d178baca1aa4763bca115d7f65c06e13616d33ec40b17dc6037fb05d0edeae46f2dcf437982b78250c7f0300d175bb4636f451b9ef268f00684598da18cfc615a0f7"}}, {0xff, &(0x7f00000004c0)=@string={0xff, 0x3, "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"}}, {0x87, &(0x7f00000002c0)=@string={0x87, 0x3, "3077cf9ca814485596109333745ab25201d6ba4926b7bd671346dc858df28e5f5efa0cfef6df7a92ac94bdd4f96085a0eb3120d2c03c9f17c7ac6f949528f516f34290ae8021d19cb146f334fef03c3f0f2bc993cfb5fe0be39adce9aa280297007105cf90e9ce83fde9214a2c1d0e3fc7348c1e6738fe3f94324e594c9916a025426421a2"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81d}}]}) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000780)={0x14, &(0x7f0000000680)={0x20, 0x30, 0xb1, {0xb1, 0x3, "c69aa842b8a77509a62b3785f08d1f7a58fce336be77bc2dbbf88c006431adeac60772589bf51eb2117851a9185e463ecf64bbfbce19a7edc8ca9aa95d72cc74392b8b9e0dc46f7e5064807d46248915e2dc38e3cb3d2cf1eefaf19e3f5c069cb6115d92978a4a816c6dc3baa3f76938b3234c34e7c7c5b7a8a324bb260ecb5d4d18d1ee1d133339aee625d1c8807ac8c63e705462ddaa6a0dd48dc0848889f56c24d9aaad6b3421a335f7e64ebbfe"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x1c, &(0x7f0000000bc0)={0x20, 0xe, 0xea, "a8a6ed88f8252739f9bfd11b49125f076804355d1822889c9e59a163afb1dc6ee49127c57b842565ebe536a2d02c3ea383af87330f90ba3190a625f3b3b70d9508993ffea00c021432e8bb0ee01eddcecd0c1503c0a752423db7d7e03a728a21381ea35b54007f1f18743f4690ed72c9c28003f8bafd103fafa5b95a37f619adff91e5234df8124c6cc8adbd59bbc09da76f7216764b2d02330f3747a794aa7333363d4582b79389913b9863607b97f3334cd3d7cbdc092141e784ad63262742dce3148e28c29d1085b0a09f6fe0cca30d73e4a7781af6d7b2b179d4f405d1a40c8bc872463bbc88469b"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x3}}) (async) 09:49:53 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0xffffffffffffffff, r0) 09:49:53 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4000080) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d01014000010303010902900003010000000904000000010100000a2401000000020202072407050000020b240600000200000000000a2408200000004d859c09040100000102000009040101010102000009050109400000000007250100000000090c020000010200000904020601010200000e240201aa00000047f9efa1529d072401000005000905820900020000000725018f"], 0x0) 09:49:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x44400) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x91004}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@delchain={0x64, 0x65, 0xc06, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9}, {0x3, 0x3}, {0x10}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x3f}}, @filter_kind_options=@f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x7ff, 0x3ff}, {0x800, 0x7, 0x2}, 0xa7, 0xff, 0x3}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x34ee595147be9f31) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x7) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r4, 0x3, 0x6, @broadcast}, 0x10) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 09:49:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5421, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2, &(0x7f00000024c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f00000034c0)=""/213, 0xd5}], 0x3, &(0x7f0000004080)=""/241, 0xf1}, 0xee3}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003940)=""/175, 0xaf}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {&(0x7f0000003b80)=""/32, 0x20}], 0x4, &(0x7f0000003c00)=""/73, 0x49}, 0x80000000}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003dc0)=[{0x0}, {&(0x7f0000003d40)=""/30, 0x1e}, {&(0x7f0000003d80)=""/33, 0x21}], 0x3, &(0x7f0000003e00)=""/48, 0x30}, 0x1f}], 0x5, 0x40000121, &(0x7f0000003fc0)) sendmsg$nl_route_sched(r2, &(0x7f00000058c0)={&(0x7f0000003680), 0xc, &(0x7f0000003d00)={&(0x7f0000004300)=ANY=[@ANYBLOB="18170000640080dec2ea327ba70200f9", @ANYRES32=0x0, @ANYBLOB="f3ff05000400f2ff002800020008000600"/28, @ANYBLOB="1c0002000c00080002000000000000002209000001000000000000800800010062706600b80002000800080000000000880002003c00010000800000080000000080000007000000da0000000100fb000180020006000000000007000700ff7fff030000d400000004000000060000003c000100060000000100000000010000040000000000b8011502f1c10183ba538842624be70200000001a190080000000001040040000600e10700007f00000004000000010000000c0008000000000000b84400080008000000000008000600e79aa3b9311202de37ff19f772c476e9542083fb5cacf8", @ANYRES32, @ANYBLOB="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"], 0x1718}, 0x1, 0x0, 0x0, 0x40800}, 0x4040080) sendto$inet(r2, &(0x7f00000000c0)="971fd3b81812971a5cc71c405ee994a7bb5be2202c1fa08c53518eb558e80fcc250eebf439", 0x25, 0x8000, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x6b5c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000100800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000a000200bbbbbbbbbbbb0000"], 0x2c}}, 0x20008894) io_uring_enter(0xffffffffffffffff, 0x0, 0xe923, 0x2, &(0x7f0000000000)={[0x2]}, 0x8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 09:49:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x88}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1141.114784][T20366] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1141.136682][T20369] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 09:49:53 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0xffffffffffffffff, r0) 09:49:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1141.482615][ T9254] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1141.512338][ T3563] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1141.609201][T20465] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:53 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, 0x0) 09:49:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x2}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x44400) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x91004}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@delchain={0x64, 0x65, 0xc06, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9}, {0x3, 0x3}, {0x10}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x3f}}, @filter_kind_options=@f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x7ff, 0x3ff}, {0x800, 0x7, 0x2}, 0xa7, 0xff, 0x3}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x34ee595147be9f31) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x7) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r4, 0x3, 0x6, @broadcast}, 0x10) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) socket(0x11, 0x800000003, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x44400) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x91004}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@delchain={0x64, 0x65, 0xc06, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9}, {0x3, 0x3}, {0x10}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x3f}}, @filter_kind_options=@f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x7ff, 0x3ff}, {0x800, 0x7, 0x2}, 0xa7, 0xff, 0x3}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x34ee595147be9f31) (async) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x7) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r4, 0x3, 0x6, @broadcast}, 0x10) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) (async) [ 1141.722125][ T9254] usb 3-1: Using ep0 maxpacket: 8 [ 1141.762795][ T3563] usb 6-1: Using ep0 maxpacket: 8 [ 1141.842466][ T9254] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1141.853849][ T9254] usb 3-1: config 1 interface 2 altsetting 6 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1141.865214][ T9254] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1141.872163][ T9254] usb 3-1: config 1 interface 2 has no altsetting 0 [ 1141.914797][T20493] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1141.968446][T20494] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5421, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2, &(0x7f00000024c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f00000034c0)=""/213, 0xd5}], 0x3, &(0x7f0000004080)=""/241, 0xf1}, 0xee3}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003940)=""/175, 0xaf}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {&(0x7f0000003b80)=""/32, 0x20}], 0x4, &(0x7f0000003c00)=""/73, 0x49}, 0x80000000}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003dc0)=[{0x0}, {&(0x7f0000003d40)=""/30, 0x1e}, {&(0x7f0000003d80)=""/33, 0x21}], 0x3, &(0x7f0000003e00)=""/48, 0x30}, 0x1f}], 0x5, 0x40000121, &(0x7f0000003fc0)) sendmsg$nl_route_sched(r2, &(0x7f00000058c0)={&(0x7f0000003680), 0xc, &(0x7f0000003d00)={&(0x7f0000004300)=ANY=[@ANYBLOB="18170000640080dec2ea327ba70200f9", @ANYRES32=0x0, @ANYBLOB="f3ff05000400f2ff002800020008000600"/28, @ANYBLOB="1c0002000c00080002000000000000002209000001000000000000800800010062706600b80002000800080000000000880002003c00010000800000080000000080000007000000da0000000100fb000180020006000000000007000700ff7fff030000d400000004000000060000003c000100060000000100000000010000040000000000b8011502f1c10183ba538842624be70200000001a190080000000001040040000600e10700007f00000004000000010000000c0008000000000000b84400080008000000000008000600e79aa3b9311202de37ff19f772c476e9542083fb5cacf8", @ANYRES32, @ANYBLOB="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"], 0x1718}, 0x1, 0x0, 0x0, 0x40800}, 0x4040080) sendto$inet(r2, &(0x7f00000000c0)="971fd3b81812971a5cc71c405ee994a7bb5be2202c1fa08c53518eb558e80fcc250eebf439", 0x25, 0x8000, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x6b5c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000100800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000a000200bbbbbbbbbbbb0000"], 0x2c}}, 0x20008894) io_uring_enter(0xffffffffffffffff, 0x0, 0xe923, 0x2, &(0x7f0000000000)={[0x2]}, 0x8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$int_in(r1, 0x5421, 0x0) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2, &(0x7f00000024c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f00000034c0)=""/213, 0xd5}], 0x3, &(0x7f0000004080)=""/241, 0xf1}, 0xee3}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003940)=""/175, 0xaf}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {&(0x7f0000003b80)=""/32, 0x20}], 0x4, &(0x7f0000003c00)=""/73, 0x49}, 0x80000000}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003dc0)=[{0x0}, {&(0x7f0000003d40)=""/30, 0x1e}, {&(0x7f0000003d80)=""/33, 0x21}], 0x3, &(0x7f0000003e00)=""/48, 0x30}, 0x1f}], 0x5, 0x40000121, &(0x7f0000003fc0)) (async) sendmsg$nl_route_sched(r2, &(0x7f00000058c0)={&(0x7f0000003680), 0xc, &(0x7f0000003d00)={&(0x7f0000004300)=ANY=[@ANYBLOB="18170000640080dec2ea327ba70200f9", @ANYRES32=0x0, @ANYBLOB="f3ff05000400f2ff002800020008000600"/28, @ANYBLOB="1c0002000c00080002000000000000002209000001000000000000800800010062706600b80002000800080000000000880002003c00010000800000080000000080000007000000da0000000100fb000180020006000000000007000700ff7fff030000d400000004000000060000003c000100060000000100000000010000040000000000b8011502f1c10183ba538842624be70200000001a190080000000001040040000600e10700007f00000004000000010000000c0008000000000000b84400080008000000000008000600e79aa3b9311202de37ff19f772c476e9542083fb5cacf8", @ANYRES32, @ANYBLOB="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"], 0x1718}, 0x1, 0x0, 0x0, 0x40800}, 0x4040080) (async) sendto$inet(r2, &(0x7f00000000c0)="971fd3b81812971a5cc71c405ee994a7bb5be2202c1fa08c53518eb558e80fcc250eebf439", 0x25, 0x8000, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x6b5c, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000100800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000a000200bbbbbbbbbbbb0000"], 0x2c}}, 0x20008894) (async) io_uring_enter(0xffffffffffffffff, 0x0, 0xe923, 0x2, &(0x7f0000000000)={[0x2]}, 0x8) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async) [ 1142.009413][T20493] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1142.022624][T20493] device lo entered promiscuous mode [ 1142.034331][ T3563] usb 6-1: config 1 interface 0 altsetting 66 endpoint 0x81 has an invalid bInterval 178, changing to 11 [ 1142.045985][ T3563] usb 6-1: config 1 interface 0 altsetting 66 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1142.059409][ T3563] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1142.078755][T20495] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1142.085547][ T9254] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1142.096174][ T9254] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1142.104424][ T9254] usb 3-1: Product: syz [ 1142.108791][ T9254] usb 3-1: Manufacturer: syz [ 1142.113633][ T9254] usb 3-1: SerialNumber: syz [ 1142.232364][ T3563] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1142.241614][ T3563] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.250229][ T3563] usb 6-1: Product: 眰鳏ᒨ啈႖㎓婴劲혁䦺뜦枽䘓藜徎艹︌鉺钬풽惹ꂅ㇫툠㳀ស곇鑯⢕ᛵ䋳꺐ↀ鳑䚱㓳㼼⬏鏉뗏௾髣⢪霂焀켅菎䨡ᴬ㼎㓇Ẍ㡧㿾㊔奎饌ꀖ䈥Ⅴ [ 1142.271484][ T3563] usb 6-1: Manufacturer: ޔ禈恝蓼奩湳蛺鴅鯨ᾔ໇֧佺ᝧ␥ꪰ榄㿳㡽싙ꓷ殑쁣გ䘅꒟贘䡧၈꒡ꀅ瑋輸ꨍ萀戏铗升䢜莐ﯠ鬄嫨菼픙巉問鷵Ꮶ骯▧졽鸳緥垔鹑֯郐⛰䧳꛽㲡ꄠ╤졋囉⤯됑鼯寚욦毽牱ꚁ쳰ᔻ곊ꦎ㩝撸㢈ꫬ畕冟鷛웧ꜽᥥ⩊␁铩䖝䖚꬞䏓下羪䳼蚾䞫펚㙞放覄팒挑뀅賱獄녠 [ 1142.308553][ T3563] usb 6-1: SerialNumber: ࠝ [ 1142.403546][T20371] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1142.513254][ T9254] usb 3-1: selecting invalid altsetting 0 [ 1142.533366][ T9254] usb 3-1: failed to enable PITCH for EP 0x82 [ 1142.552898][ T9254] usb 3-1: 2:6: cannot set freq 10310305 to ep 0x82 [ 1142.572803][ T9254] usb 3-1: selecting invalid altsetting 0 [ 1142.578898][ T9254] usb 3-1: 0:7 : does not exist [ 1142.635313][ T9254] usb 3-1: USB disconnect, device number 88 [ 1142.748849][T16275] udevd[16275]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 09:49:54 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x7e66, 0x2, 0x7, 0x81, &(0x7f00000000c0)=[{}, {}]}) r0 = syz_usb_connect(0x6, 0x3e0, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0xe5, 0x14, 0x49, 0x20, 0x944, 0x200, 0x52b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x3ce, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0xd4, 0x0, 0x7, 0xff, 0xfa, 0xdc, 0x0, [], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x81, 0x20, 0x7, [@generic={0x64, 0x8, "35e1911d787b010a5c3e34579dc9980a8ad40168e5c1b833a5452442e44d9f1d94f33dd8242b4a1f55e0c1c3625b9f7bc0bdac17fdd1435e810b1cab3677f3f886c8c28c16eedc49845b886360f89d190ce364a2f3e73c35dff8b1b120d5826b694b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x3, 0xff, 0xff, [@generic={0xd8, 0xc, "4ad7e7a3e559ad3e9ecdf8c64bbc817ce01b089d23883e9508fcf51b1402575373f84a7c460afec0fcee211c1dc7d328899de9cd0d1d9a8e7f24073722e49d7b1637662fac489211acd027e794f59fac82c057a1e9ed21b3af97588e5ae0709657281ec6f091d5e93ca1e9663935d3e203db58bf41dfb740ddc341b3ed14759d92e55587e0d0842c562e67c6bb27c074d1f271aefc1704d8290f5a34a360514d869220cd6cf7afecece86a5adf9fa584d9d23adc3b9c341f96010115876ff9fd72b7d2ea2c38d01c63986ab28298dd551d2d0a9360f2"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x7f, 0x1, 0x6}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x80, 0x8}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x14, 0x1, 0xfe, [@generic={0x6f, 0x11, "b4611cae9a91b2e8a69a102f82ddceba30ff10b8f5e4bdc2a955008ff19943871e44b9ecd76d9fced78ad19ff72763a78501f8c2cc5346dca6f428b77ba7abefe0bf5479e5204b14f529ba77445f5bd4fdcefe8bea250b15475f5f69fc458e10535b66b57274f428a81ab1695b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0x8f, 0x9, [@generic={0xbe, 0x21, "626130298bc257e3d70ded8c08739084e0929945664e15efa399a16db2a304fe90f0ffb963038d3023d07bb321c358c38b006ecc24a1bee94afe539c805c9d8c69bb69c07cda7a64fc5e086b8fdafe1e75eae835506f69de660493b387e3486d864ab548afecafe6499cb3c14f7591925d5cb77c0656c131c9439fa831cd98cf5747755cd8307fe06de6cdb0febde9c2cd2399f78becb9b8c56902e7440d3cd19b8ac3ea976a8df0f3a799731fb10091520e155d5ad36ae4de160c55"}, @generic={0xdf, 0x21, "f6cd1c3cddbeaf16f1e11c2b9eb7ecad9dd5a36ed5ba40da939db62f194cf88a5bb096120f53e63c3d8f480119075f1e3a6e31e054ebf23ea4ce33a12b58ff4d950c18b90ae5afeb736bda230a5e783502b5d2b1177b6e3fd98e06b1514d8a483152367f4a823946f28c753fdbcb8c33d9f9048f45ab3f75b0947a2aaeb8393ee98739289ccd9731f19d89a720caae218d8baf1f6cc7ad4856ce964ed36db119b64cd62a5ba86c1762a5b2750ae40e3c15216368642c79179807e3e6cab38d60b427de336e78e7b2c163aff0d81f2636ca59c93bf5f13972cf2482228a"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xbe, 0x40, 0x80, [@generic={0x35, 0x22, "bfd7de8f15de724472bf062ebddf74b74d0d408de4ab121b3c56add06b5f7ff86e65acd91e1abbfbe90523652a2a8720e4ae4b"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ecm(0x3, 0x87, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x1, 0x45, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x42, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x8, 0x24, 0x6, 0x0, 0x0, "e7397f"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x20, 0x3, 0x81}, [@mdlm={0x15, 0x24, 0x12, 0xffff}, @ncm={0x6, 0x24, 0x1a, 0x5, 0xd8acfd520ae18dd}, @mbim={0xc, 0x24, 0x1b, 0x7, 0xffff, 0x2, 0x8, 0x1, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3f, 0x9, 0xc0}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb2, 0x81, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x7, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7, 0x4}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x1f, 0x7, 0x1f, 0x20}, 0x19, &(0x7f0000000280)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "9e624a59c4b6fb42f5d7495fb33f9cf3"}]}, 0x4, [{0xf6, &(0x7f00000003c0)=@string={0xf6, 0x3, "f6efb59685029b992d43c298a3c46ab5e5699f4c85fcfd4308ab2fa57e0df33e776a433297327855902f551b7927217768383c9badf6c9f30605980610e35a636e2ec063298d4647b396e31c1666bd8c1a8ee38b58f7d53b3743d0499009b43e24b25ffabe05e2b966862fc7cc50dfeeb3e220cbe38dd41141730c9f86e9b31fe5382778b5d2d78d8d63cef1f80e30734557a488a86677acd80985b6381d67bcd22e5f830987f65371da00964de80cfb1073d178baca1aa4763bca115d7f65c06e13616d33ec40b17dc6037fb05d0edeae46f2dcf437982b78250c7f0300d175bb4636f451b9ef268f00684598da18cfc615a0f7"}}, {0xff, &(0x7f00000004c0)=@string={0xff, 0x3, "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"}}, {0x87, &(0x7f00000002c0)=@string={0x87, 0x3, "3077cf9ca814485596109333745ab25201d6ba4926b7bd671346dc858df28e5f5efa0cfef6df7a92ac94bdd4f96085a0eb3120d2c03c9f17c7ac6f949528f516f34290ae8021d19cb146f334fef03c3f0f2bc993cfb5fe0be39adce9aa280297007105cf90e9ce83fde9214a2c1d0e3fc7348c1e6738fe3f94324e594c9916a025426421a2"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81d}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000780)={0x14, &(0x7f0000000680)={0x20, 0x30, 0xb1, {0xb1, 0x3, "c69aa842b8a77509a62b3785f08d1f7a58fce336be77bc2dbbf88c006431adeac60772589bf51eb2117851a9185e463ecf64bbfbce19a7edc8ca9aa95d72cc74392b8b9e0dc46f7e5064807d46248915e2dc38e3cb3d2cf1eefaf19e3f5c069cb6115d92978a4a816c6dc3baa3f76938b3234c34e7c7c5b7a8a324bb260ecb5d4d18d1ee1d133339aee625d1c8807ac8c63e705462ddaa6a0dd48dc0848889f56c24d9aaad6b3421a335f7e64ebbfe"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x1c, &(0x7f0000000bc0)={0x20, 0xe, 0xea, "a8a6ed88f8252739f9bfd11b49125f076804355d1822889c9e59a163afb1dc6ee49127c57b842565ebe536a2d02c3ea383af87330f90ba3190a625f3b3b70d9508993ffea00c021432e8bb0ee01eddcecd0c1503c0a752423db7d7e03a728a21381ea35b54007f1f18743f4690ed72c9c28003f8bafd103fafa5b95a37f619adff91e5234df8124c6cc8adbd59bbc09da76f7216764b2d02330f3747a794aa7333363d4582b79389913b9863607b97f3334cd3d7cbdc092141e784ad63262742dce3148e28c29d1085b0a09f6fe0cca30d73e4a7781af6d7b2b179d4f405d1a40c8bc872463bbc88469b"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x3}}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x7e66, 0x2, 0x7, 0x81, &(0x7f00000000c0)=[{}, {}]}) (async) syz_usb_connect(0x6, 0x3e0, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0xe5, 0x14, 0x49, 0x20, 0x944, 0x200, 0x52b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x3ce, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0xd4, 0x0, 0x7, 0xff, 0xfa, 0xdc, 0x0, [], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x81, 0x20, 0x7, [@generic={0x64, 0x8, "35e1911d787b010a5c3e34579dc9980a8ad40168e5c1b833a5452442e44d9f1d94f33dd8242b4a1f55e0c1c3625b9f7bc0bdac17fdd1435e810b1cab3677f3f886c8c28c16eedc49845b886360f89d190ce364a2f3e73c35dff8b1b120d5826b694b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x3, 0xff, 0xff, [@generic={0xd8, 0xc, "4ad7e7a3e559ad3e9ecdf8c64bbc817ce01b089d23883e9508fcf51b1402575373f84a7c460afec0fcee211c1dc7d328899de9cd0d1d9a8e7f24073722e49d7b1637662fac489211acd027e794f59fac82c057a1e9ed21b3af97588e5ae0709657281ec6f091d5e93ca1e9663935d3e203db58bf41dfb740ddc341b3ed14759d92e55587e0d0842c562e67c6bb27c074d1f271aefc1704d8290f5a34a360514d869220cd6cf7afecece86a5adf9fa584d9d23adc3b9c341f96010115876ff9fd72b7d2ea2c38d01c63986ab28298dd551d2d0a9360f2"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x7f, 0x1, 0x6}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x80, 0x8}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x14, 0x1, 0xfe, [@generic={0x6f, 0x11, "b4611cae9a91b2e8a69a102f82ddceba30ff10b8f5e4bdc2a955008ff19943871e44b9ecd76d9fced78ad19ff72763a78501f8c2cc5346dca6f428b77ba7abefe0bf5479e5204b14f529ba77445f5bd4fdcefe8bea250b15475f5f69fc458e10535b66b57274f428a81ab1695b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0x8f, 0x9, [@generic={0xbe, 0x21, "626130298bc257e3d70ded8c08739084e0929945664e15efa399a16db2a304fe90f0ffb963038d3023d07bb321c358c38b006ecc24a1bee94afe539c805c9d8c69bb69c07cda7a64fc5e086b8fdafe1e75eae835506f69de660493b387e3486d864ab548afecafe6499cb3c14f7591925d5cb77c0656c131c9439fa831cd98cf5747755cd8307fe06de6cdb0febde9c2cd2399f78becb9b8c56902e7440d3cd19b8ac3ea976a8df0f3a799731fb10091520e155d5ad36ae4de160c55"}, @generic={0xdf, 0x21, "f6cd1c3cddbeaf16f1e11c2b9eb7ecad9dd5a36ed5ba40da939db62f194cf88a5bb096120f53e63c3d8f480119075f1e3a6e31e054ebf23ea4ce33a12b58ff4d950c18b90ae5afeb736bda230a5e783502b5d2b1177b6e3fd98e06b1514d8a483152367f4a823946f28c753fdbcb8c33d9f9048f45ab3f75b0947a2aaeb8393ee98739289ccd9731f19d89a720caae218d8baf1f6cc7ad4856ce964ed36db119b64cd62a5ba86c1762a5b2750ae40e3c15216368642c79179807e3e6cab38d60b427de336e78e7b2c163aff0d81f2636ca59c93bf5f13972cf2482228a"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xbe, 0x40, 0x80, [@generic={0x35, 0x22, "bfd7de8f15de724472bf062ebddf74b74d0d408de4ab121b3c56add06b5f7ff86e65acd91e1abbfbe90523652a2a8720e4ae4b"}]}}]}}]}}]}}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ecm(0x3, 0x87, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x1, 0x45, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x42, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x8, 0x24, 0x6, 0x0, 0x0, "e7397f"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x20, 0x3, 0x81}, [@mdlm={0x15, 0x24, 0x12, 0xffff}, @ncm={0x6, 0x24, 0x1a, 0x5, 0xd8acfd520ae18dd}, @mbim={0xc, 0x24, 0x1b, 0x7, 0xffff, 0x2, 0x8, 0x1, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3f, 0x9, 0xc0}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb2, 0x81, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x7, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7, 0x4}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x1f, 0x7, 0x1f, 0x20}, 0x19, &(0x7f0000000280)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "9e624a59c4b6fb42f5d7495fb33f9cf3"}]}, 0x4, [{0xf6, &(0x7f00000003c0)=@string={0xf6, 0x3, "f6efb59685029b992d43c298a3c46ab5e5699f4c85fcfd4308ab2fa57e0df33e776a433297327855902f551b7927217768383c9badf6c9f30605980610e35a636e2ec063298d4647b396e31c1666bd8c1a8ee38b58f7d53b3743d0499009b43e24b25ffabe05e2b966862fc7cc50dfeeb3e220cbe38dd41141730c9f86e9b31fe5382778b5d2d78d8d63cef1f80e30734557a488a86677acd80985b6381d67bcd22e5f830987f65371da00964de80cfb1073d178baca1aa4763bca115d7f65c06e13616d33ec40b17dc6037fb05d0edeae46f2dcf437982b78250c7f0300d175bb4636f451b9ef268f00684598da18cfc615a0f7"}}, {0xff, &(0x7f00000004c0)=@string={0xff, 0x3, "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"}}, {0x87, &(0x7f00000002c0)=@string={0x87, 0x3, "3077cf9ca814485596109333745ab25201d6ba4926b7bd671346dc858df28e5f5efa0cfef6df7a92ac94bdd4f96085a0eb3120d2c03c9f17c7ac6f949528f516f34290ae8021d19cb146f334fef03c3f0f2bc993cfb5fe0be39adce9aa280297007105cf90e9ce83fde9214a2c1d0e3fc7348c1e6738fe3f94324e594c9916a025426421a2"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81d}}]}) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000780)={0x14, &(0x7f0000000680)={0x20, 0x30, 0xb1, {0xb1, 0x3, "c69aa842b8a77509a62b3785f08d1f7a58fce336be77bc2dbbf88c006431adeac60772589bf51eb2117851a9185e463ecf64bbfbce19a7edc8ca9aa95d72cc74392b8b9e0dc46f7e5064807d46248915e2dc38e3cb3d2cf1eefaf19e3f5c069cb6115d92978a4a816c6dc3baa3f76938b3234c34e7c7c5b7a8a324bb260ecb5d4d18d1ee1d133339aee625d1c8807ac8c63e705462ddaa6a0dd48dc0848889f56c24d9aaad6b3421a335f7e64ebbfe"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x1c, &(0x7f0000000bc0)={0x20, 0xe, 0xea, "a8a6ed88f8252739f9bfd11b49125f076804355d1822889c9e59a163afb1dc6ee49127c57b842565ebe536a2d02c3ea383af87330f90ba3190a625f3b3b70d9508993ffea00c021432e8bb0ee01eddcecd0c1503c0a752423db7d7e03a728a21381ea35b54007f1f18743f4690ed72c9c28003f8bafd103fafa5b95a37f619adff91e5234df8124c6cc8adbd59bbc09da76f7216764b2d02330f3747a794aa7333363d4582b79389913b9863607b97f3334cd3d7cbdc092141e784ad63262742dce3148e28c29d1085b0a09f6fe0cca30d73e4a7781af6d7b2b179d4f405d1a40c8bc872463bbc88469b"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x3}}) (async) 09:49:54 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, 0x0) 09:49:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5421, 0x0) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2, &(0x7f00000024c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f00000034c0)=""/213, 0xd5}], 0x3, &(0x7f0000004080)=""/241, 0xf1}, 0xee3}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003940)=""/175, 0xaf}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {&(0x7f0000003b80)=""/32, 0x20}], 0x4, &(0x7f0000003c00)=""/73, 0x49}, 0x80000000}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003dc0)=[{0x0}, {&(0x7f0000003d40)=""/30, 0x1e}, {&(0x7f0000003d80)=""/33, 0x21}], 0x3, &(0x7f0000003e00)=""/48, 0x30}, 0x1f}], 0x5, 0x40000121, &(0x7f0000003fc0)) sendmsg$nl_route_sched(r2, &(0x7f00000058c0)={&(0x7f0000003680), 0xc, &(0x7f0000003d00)={&(0x7f0000004300)=ANY=[@ANYBLOB="18170000640080dec2ea327ba70200f9", @ANYRES32=0x0, @ANYBLOB="f3ff05000400f2ff002800020008000600"/28, @ANYBLOB="1c0002000c00080002000000000000002209000001000000000000800800010062706600b80002000800080000000000880002003c00010000800000080000000080000007000000da0000000100fb000180020006000000000007000700ff7fff030000d400000004000000060000003c000100060000000100000000010000040000000000b8011502f1c10183ba538842624be70200000001a190080000000001040040000600e10700007f00000004000000010000000c0008000000000000b84400080008000000000008000600e79aa3b9311202de37ff19f772c476e9542083fb5cacf8", @ANYRES32, @ANYBLOB="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"], 0x1718}, 0x1, 0x0, 0x0, 0x40800}, 0x4040080) sendto$inet(r2, &(0x7f00000000c0)="971fd3b81812971a5cc71c405ee994a7bb5be2202c1fa08c53518eb558e80fcc250eebf439", 0x25, 0x8000, 0x0, 0x0) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x6b5c, 0x4) (async, rerun: 64) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000100800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000a000200bbbbbbbbbbbb0000"], 0x2c}}, 0x20008894) io_uring_enter(0xffffffffffffffff, 0x0, 0xe923, 0x2, &(0x7f0000000000)={[0x2]}, 0x8) (async, rerun: 32) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) [ 1142.934228][ T3563] cdc_ether: probe of 6-1:1.0 failed with error -22 09:49:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x3}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x44400) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x91004}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@delchain={0x64, 0x65, 0xc06, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9}, {0x3, 0x3}, {0x10}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x3f}}, @filter_kind_options=@f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x7ff, 0x3ff}, {0x800, 0x7, 0x2}, 0xa7, 0xff, 0x3}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x34ee595147be9f31) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x7) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r4, 0x3, 0x6, @broadcast}, 0x10) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) socket(0x11, 0x800000003, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x44400) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x91004}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@delchain={0x64, 0x65, 0xc06, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9}, {0x3, 0x3}, {0x10}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x3f}}, @filter_kind_options=@f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x7ff, 0x3ff}, {0x800, 0x7, 0x2}, 0xa7, 0xff, 0x3}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x34ee595147be9f31) (async) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x7) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r4, 0x3, 0x6, @broadcast}, 0x10) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) (async) 09:49:55 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f742e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffffc654"}, 0x80) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x4, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x4c}}, 0x0) recvfrom(r2, &(0x7f0000000280)=""/147, 0x93, 0x1, &(0x7f0000000340)=@caif, 0x80) bind(r1, &(0x7f0000000140)=@nl=@unspec, 0x80) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) socket(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) getsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'rose0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x38, 0x6, [0x1, 0x7, 0x5, 0x7, 0x8001, 0x101]}}) [ 1143.026877][T20625] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1143.050084][ T3563] usb 6-1: USB disconnect, device number 96 09:49:55 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, 0x0) [ 1143.116521][T20627] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1143.171226][T20625] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1143.273983][T20632] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 09:49:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x4}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:55 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f742e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffffc654"}, 0x80) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x4, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x4c}}, 0x0) recvfrom(r2, &(0x7f0000000280)=""/147, 0x93, 0x1, &(0x7f0000000340)=@caif, 0x80) bind(r1, &(0x7f0000000140)=@nl=@unspec, 0x80) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) socket(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) getsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'rose0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x38, 0x6, [0x1, 0x7, 0x5, 0x7, 0x8001, 0x101]}}) socket(0x11, 0x800000003, 0x0) (async) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f742e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffffc654"}, 0x80) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x4, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x4c}}, 0x0) (async) recvfrom(r2, &(0x7f0000000280)=""/147, 0x93, 0x1, &(0x7f0000000340)=@caif, 0x80) (async) bind(r1, &(0x7f0000000140)=@nl=@unspec, 0x80) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) (async) socket(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) getsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'rose0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x38, 0x6, [0x1, 0x7, 0x5, 0x7, 0x8001, 0x101]}}) (async) 09:49:55 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) (fail_nth: 1) [ 1143.502830][ T3563] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1143.532893][T20707] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1143.654227][T20727] FAULT_INJECTION: forcing a failure. [ 1143.654227][T20727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1143.667831][T20727] CPU: 0 PID: 20727 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16266-gfb61e40b30d1 #0 [ 1143.678178][T20727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.688434][T20727] Call Trace: [ 1143.691823][T20727] [ 1143.694846][T20727] dump_stack_lvl+0x1c8/0x256 [ 1143.699738][T20727] dump_stack+0x1a/0x1c [ 1143.704070][T20727] should_fail+0x6c5/0x7e0 [ 1143.708679][T20727] should_fail_usercopy+0x2a/0x30 [ 1143.713890][T20727] _copy_to_user+0x30/0x100 [ 1143.718603][T20727] ptrace_request+0x2a16/0x3380 [ 1143.723790][T20727] arch_ptrace+0x96/0x3b0 [ 1143.728363][T20727] __se_sys_ptrace+0x2c9/0x810 [ 1143.733309][T20727] ? kmsan_get_metadata+0x33/0x220 [ 1143.738645][T20727] __x64_sys_ptrace+0xb9/0x110 [ 1143.743627][T20727] do_syscall_64+0x3d/0xb0 [ 1143.748246][T20727] ? asm_exc_page_fault+0x8/0x30 [ 1143.753365][T20727] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1143.759441][T20727] RIP: 0033:0x7f2a8d089109 [ 1143.763995][T20727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1143.783792][T20727] RSP: 002b:00007f2a8e246168 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 1143.792407][T20727] RAX: ffffffffffffffda RBX: 00007f2a8d19bf60 RCX: 00007f2a8d089109 [ 1143.800559][T20727] RDX: 0000000000000000 RSI: 0000000000000c78 RDI: 000000000000420e [ 1143.808666][T20727] RBP: 00007f2a8e2461d0 R08: 0000000000000000 R09: 0000000000000000 [ 1143.816786][T20727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.822535][ T3563] usb 6-1: Using ep0 maxpacket: 8 [ 1143.824876][T20727] R13: 00007f2a8d6cfb1f R14: 00007f2a8e246300 R15: 0000000000022000 [ 1143.824994][T20727] [ 1143.825246][ C0] vkms_vblank_simulate: vblank timer overrun 09:49:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x5}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@getroute={0x14, 0x1a, 0x200, 0x70bd2d, 0xffffff80, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delchain={0x30, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff, 0xffe0}, {0x0, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0xa, 0x10}, {0xd, 0x2}}, ["", "", "", ""]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x94020) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="0400000024000b0f00000000f8ff000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000ffff00000000"], 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="54000000660004022dbdfbdbdf3300000000f214b19d5d8521d54dd325b670b680d94b5c663dedece3908ea798f20000", @ANYRES32, @ANYBLOB="0600a3010200f2ff05000f0008000b000300000008000b000300000008000b000600000008000b000400000008000b000600000008000b00ff0f0000"], 0x54}, 0x1, 0x0, 0x0, 0x4040004}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) [ 1143.997805][T20757] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1144.126274][T20760] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1144.174271][ T3563] usb 6-1: config 1 interface 0 altsetting 66 endpoint 0x81 has an invalid bInterval 178, changing to 11 [ 1144.187153][ T3563] usb 6-1: config 1 interface 0 altsetting 66 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1144.200425][ T3563] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1144.245099][T20760] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1144.372817][ T3563] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1144.383528][ T3563] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.391798][ T3563] usb 6-1: Product: 眰鳏ᒨ啈႖㎓婴劲혁䦺뜦枽䘓藜徎艹︌鉺钬풽惹ꂅ㇫툠㳀ស곇鑯⢕ᛵ䋳꺐ↀ鳑䚱㓳㼼⬏鏉뗏௾髣⢪霂焀켅菎䨡ᴬ㼎㓇Ẍ㡧㿾㊔奎饌ꀖ䈥Ⅴ [ 1144.412918][ T3563] usb 6-1: Manufacturer: ޔ禈恝蓼奩湳蛺鴅鯨ᾔ໇֧佺ᝧ␥ꪰ榄㿳㡽싙ꓷ殑쁣გ䘅꒟贘䡧၈꒡ꀅ瑋輸ꨍ萀戏铗升䢜莐ﯠ鬄嫨菼픙巉問鷵Ꮶ骯▧졽鸳緥垔鹑֯郐⛰䧳꛽㲡ꄠ╤졋囉⤯됑鼯寚욦毽牱ꚁ쳰ᔻ곊ꦎ㩝撸㢈ꫬ畕冟鷛웧ꜽᥥ⩊␁铩䖝䖚꬞䏓下羪䳼蚾䞫펚㙞放覄팒挑뀅賱獄녠 [ 1144.450018][ T3563] usb 6-1: SerialNumber: ࠝ [ 1144.493313][T20628] raw-gadget gadget: fail, usb_ep_enable returned -22 09:49:57 executing program 5: r0 = syz_usb_connect(0x1, 0x7d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8a, 0x2a, 0x7, 0x20, 0x1b3d, 0x15b, 0xc557, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x3, 0xf3, 0xaf, 0xbd, 0x0, [], [{{0x9, 0x5, 0xd, 0xcbe4bad8f0c52d64, 0x3ff, 0x1, 0x7, 0x7, [@generic={0x3e, 0xb, "e8823ee7350cbeb904d4773db6637f2c853892ae8e3a29b8750b45bff790ef60e0c8a11e13db4a2478ff40f4f9fdff0d3f86891ab378492390b6b873"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x40, 0x2, 0x3}}, {{0x9, 0x5, 0x5, 0x1, 0x0, 0x9, 0x31, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:49:57 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) (fail_nth: 2) 09:49:57 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f742e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffffc654"}, 0x80) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x4, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x4c}}, 0x0) recvfrom(r2, &(0x7f0000000280)=""/147, 0x93, 0x1, &(0x7f0000000340)=@caif, 0x80) bind(r1, &(0x7f0000000140)=@nl=@unspec, 0x80) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) socket(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) getsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'rose0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x38, 0x6, [0x1, 0x7, 0x5, 0x7, 0x8001, 0x101]}}) socket(0x11, 0x800000003, 0x0) (async) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f742e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffffc654"}, 0x80) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x4, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x4c}}, 0x0) (async) recvfrom(r2, &(0x7f0000000280)=""/147, 0x93, 0x1, &(0x7f0000000340)=@caif, 0x80) (async) bind(r1, &(0x7f0000000140)=@nl=@unspec, 0x80) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) (async) socket(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) getsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'rose0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x38, 0x6, [0x1, 0x7, 0x5, 0x7, 0x8001, 0x101]}}) (async) 09:49:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@getroute={0x14, 0x1a, 0x200, 0x70bd2d, 0xffffff80, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x50) (rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delchain={0x30, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff, 0xffe0}, {0x0, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) r5 = socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0xa, 0x10}, {0xd, 0x2}}, ["", "", "", ""]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x94020) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="0400000024000b0f00000000f8ff000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000ffff00000000"], 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="54000000660004022dbdfbdbdf3300000000f214b19d5d8521d54dd325b670b680d94b5c663dedece3908ea798f20000", @ANYRES32, @ANYBLOB="0600a3010200f2ff05000f0008000b000300000008000b000300000008000b000600000008000b000400000008000b000600000008000b00ff0f0000"], 0x54}, 0x1, 0x0, 0x0, 0x4040004}, 0x800) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) 09:49:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x6}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$sequencer(r0, &(0x7f00000000c0)=[@s={0x5, @SEQ_MIDIPUTC=0xb1, 0x9, 0xff}, @s={0x5, @generic=0x1, 0x8, 0x7f}, @generic={0x8a}], 0x9) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01fe4b09199e3ee18212"], 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1144.994324][ T3563] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1145.066626][ T3563] usb 6-1: USB disconnect, device number 97 [ 1145.074237][T20773] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1145.192405][T20780] FAULT_INJECTION: forcing a failure. [ 1145.192405][T20780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.206331][T20780] CPU: 0 PID: 20780 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16266-gfb61e40b30d1 #0 [ 1145.216669][T20780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.226854][T20780] Call Trace: [ 1145.230235][T20780] [ 1145.233250][T20780] dump_stack_lvl+0x1c8/0x256 [ 1145.238120][T20780] dump_stack+0x1a/0x1c [ 1145.242454][T20780] should_fail+0x6c5/0x7e0 [ 1145.247059][T20780] should_fail_usercopy+0x2a/0x30 [ 1145.252258][T20780] _copy_from_user+0x2f/0x160 [ 1145.257157][T20780] kstrtouint_from_user+0x7f/0x160 [ 1145.262483][T20780] ? fsnotify_perm+0xa1/0x8f0 [ 1145.267335][T20780] ? vfs_write+0x588/0x1810 [ 1145.272040][T20780] proc_fail_nth_write+0x6b/0x310 [ 1145.277237][T20780] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1145.283243][T20780] ? proc_fail_nth_read+0x2f0/0x2f0 [ 1145.288581][T20780] vfs_write+0x588/0x1810 [ 1145.293109][T20780] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1145.299544][T20780] ? kmsan_get_metadata+0x33/0x220 [ 1145.304858][T20780] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1145.310859][T20780] ksys_write+0x21b/0x4e0 [ 1145.315387][T20780] __x64_sys_write+0x8f/0xd0 [ 1145.320171][T20780] do_syscall_64+0x3d/0xb0 [ 1145.324750][T20780] ? asm_exc_page_fault+0x8/0x30 [ 1145.329840][T20780] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1145.335890][T20780] RIP: 0033:0x7f2a8d03bc1f [ 1145.340423][T20780] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1145.360202][T20780] RSP: 002b:00007f2a8e204160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1145.368782][T20780] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2a8d03bc1f [ 1145.376883][T20780] RDX: 0000000000000001 RSI: 00007f2a8e2041e0 RDI: 0000000000000003 [ 1145.385000][T20780] RBP: 00007f2a8e2041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1145.393122][T20780] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1145.401227][T20780] R13: 00007f2a8d6cfb1f R14: 00007f2a8e204300 R15: 0000000000022000 [ 1145.409362][T20780] [ 1145.412622][ C0] vkms_vblank_simulate: vblank timer overrun 09:49:57 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x48}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) 09:49:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x7}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:57 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x48}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) [ 1145.722660][ T3563] usb 6-1: new low-speed USB device number 98 using dummy_hcd [ 1145.736200][T20888] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:49:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x8}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:49:57 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x48}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) 09:49:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) write$sequencer(r0, &(0x7f00000000c0)=[@s={0x5, @SEQ_MIDIPUTC=0xb1, 0x9, 0xff}, @s={0x5, @generic=0x1, 0x8, 0x7f}, @generic={0x8a}], 0x9) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01fe4b09199e3ee18212"], 0x44}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1145.970048][T20905] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1145.986452][ T3563] usb 6-1: Invalid ep0 maxpacket: 32 [ 1146.162561][ T3563] usb 6-1: new low-speed USB device number 99 using dummy_hcd [ 1146.422010][ T3563] usb 6-1: Invalid ep0 maxpacket: 32 [ 1146.428069][ T3563] usb usb6-port1: attempt power cycle [ 1146.852164][ T3563] usb 6-1: new low-speed USB device number 100 using dummy_hcd [ 1146.962671][ T3563] usb 6-1: Invalid ep0 maxpacket: 32 [ 1147.112100][ T3563] usb 6-1: new low-speed USB device number 101 using dummy_hcd [ 1147.205034][ T3563] usb 6-1: Invalid ep0 maxpacket: 32 [ 1147.213214][ T3563] usb usb6-port1: unable to enumerate USB device 09:50:00 executing program 5: r0 = syz_usb_connect(0x1, 0x7d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8a, 0x2a, 0x7, 0x20, 0x1b3d, 0x15b, 0xc557, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x3, 0xf3, 0xaf, 0xbd, 0x0, [], [{{0x9, 0x5, 0xd, 0xcbe4bad8f0c52d64, 0x3ff, 0x1, 0x7, 0x7, [@generic={0x3e, 0xb, "e8823ee7350cbeb904d4773db6637f2c853892ae8e3a29b8750b45bff790ef60e0c8a11e13db4a2478ff40f4f9fdff0d3f86891ab378492390b6b873"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x40, 0x2, 0x3}}, {{0x9, 0x5, 0x5, 0x1, 0x0, 0x9, 0x31, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:50:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@getroute={0x14, 0x1a, 0x200, 0x70bd2d, 0xffffff80, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) (async) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delchain={0x30, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff, 0xffe0}, {0x0, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0xa, 0x10}, {0xd, 0x2}}, ["", "", "", ""]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x94020) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="0400000024000b0f00000000f8ff000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000ffff00000000"], 0x24}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="54000000660004022dbdfbdbdf3300000000f214b19d5d8521d54dd325b670b680d94b5c663dedece3908ea798f20000", @ANYRES32, @ANYBLOB="0600a3010200f2ff05000f0008000b000300000008000b000300000008000b000600000008000b000400000008000b000600000008000b00ff0f0000"], 0x54}, 0x1, 0x0, 0x0, 0x4040004}, 0x800) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) 09:50:00 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) 09:50:00 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x111, r1, 0xedca0000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r1, 0x3fffd000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, &(0x7f0000000040)=0xfffffd0f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x64}}, 0x0) r4 = signalfd4(r0, &(0x7f0000000140)={[0xffffffff00000000]}, 0x8, 0x80000) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/5, 0x5}], 0x2, 0x5dc0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, '\x00', 0x15}, 0x4}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf8c}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in={0x2, 0x4e20, @broadcast}], 0xa4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x98b0}, 0x1c) write$P9_RLCREATE(r1, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x0, 0x0, 0x7}, 0x3}}, 0x18) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r5, 0x10d, 0xdf, 0x0, &(0x7f00000000c0)) 09:50:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x9}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:50:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) write$sequencer(r0, &(0x7f00000000c0)=[@s={0x5, @SEQ_MIDIPUTC=0xb1, 0x9, 0xff}, @s={0x5, @generic=0x1, 0x8, 0x7f}, @generic={0x8a}], 0x9) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01fe4b09199e3ee18212"], 0x44}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 1148.262254][T20925] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:50:00 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x111, r1, 0xedca0000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r1, 0x3fffd000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, &(0x7f0000000040)=0xfffffd0f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x64}}, 0x0) r4 = signalfd4(r0, &(0x7f0000000140)={[0xffffffff00000000]}, 0x8, 0x80000) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/5, 0x5}], 0x2, 0x5dc0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, '\x00', 0x15}, 0x4}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf8c}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in={0x2, 0x4e20, @broadcast}], 0xa4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x98b0}, 0x1c) write$P9_RLCREATE(r1, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x0, 0x0, 0x7}, 0x3}}, 0x18) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r5, 0x10d, 0xdf, 0x0, &(0x7f00000000c0)) socket$inet6(0xa, 0x6, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) (async) listen(r0, 0xc) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x111, r1, 0xedca0000) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r1, 0x3fffd000) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, &(0x7f0000000040)=0xfffffd0f) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x64}}, 0x0) (async) signalfd4(r0, &(0x7f0000000140)={[0xffffffff00000000]}, 0x8, 0x80000) (async) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/5, 0x5}], 0x2, 0x5dc0, 0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, '\x00', 0x15}, 0x4}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf8c}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in={0x2, 0x4e20, @broadcast}], 0xa4) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x98b0}, 0x1c) (async) write$P9_RLCREATE(r1, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x0, 0x0, 0x7}, 0x3}}, 0x18) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) (async) getsockopt$inet_int(r5, 0x10d, 0xdf, 0x0, &(0x7f00000000c0)) (async) 09:50:00 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) 09:50:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700200000000109022400010000000009040000090300000009210000000119220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x2a, {0x2a, 0x0, "72bff4f6a1563f8c0406fc5efa9a1de7820a49b816924d3c255970a115ddc74866fb4f8b808d6135"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x84, &(0x7f00000000c0)={{0x12, 0x1, 0x710, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x3f, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'N'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x655, 0x200}, {0x6, 0x24, 0x1a, 0x83f, 0x10}, [@mdlm={0x15, 0x24, 0x12, 0xcaa}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x81, 0x4, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x7, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x1}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0xd9, 0x4, 0xf9, 0x89, 0x8, 0x23}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x37, 0x7}]}, 0x6, [{0x52, &(0x7f00000001c0)=@string={0x52, 0x3, "2298736d596400d08aad3797702cf6cfe1127d16a65fc680c366f90fb3dd0d6e8717042214e2a0b221f173f021ca2a0d1454e40927cac7be7c4741038d5e5a5a2851dca567e8f7857eb23ce439bbca5a"}}, {0xf0, &(0x7f0000000280)=@string={0xf0, 0x3, "39e85ac88f55081f29ca73213be4ce971a4a5a54e3222216e3738a4b5bd9f8cdb1b5f6532d40137e2aefd3c9bbcc75c49508de28e59f5eedb1df336bc06d5d418b3d64ab9403a13dd3eab54c9b58a697a01ee94d591ec4931448bc747c3d168ea9a209c7a7c1ad22beb182466b083a0e25a266223eba2d988d69d6045f3d35c07861afbaed449aeba29045d5f42dffa3233b6f8539f5e9d2f9bb29c527badaaa8a68588d801b7a153f65bc7b0ac9956d8d66e75dd44ab307e4d901749236e40cc87134a4970e0e8b489094b5bb142812f0355aa2764e482614ade462fd03a7f5059394e55d64ce77291cccd75f6b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x31, &(0x7f00000003c0)=@string={0x31, 0x3, "a14f060e8d0fb1554961fb9290962e760147278c633121198a58b6a4c67648e2e9bab91ce9b43a3af45dba5f365ef5"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc0c}}]}) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r2], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r3, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io(r3, &(0x7f0000000c00)={0x2c, &(0x7f0000000980)={0x20, 0x2, 0x90, {0x90, 0x22, "5a7628aab8929145564c5ad2da63ad38c47889ac7a3b0909856be17a8af30d6f9af9224d57dbe3099cfe90925d472a590709d7eebe7c31d5505301f28bb420855af5551c9c03274c99d663fbed9ec1e7b95bdbf3d6f720ec1647acaa599f04a4e0b8658c9874a9df65f89d1718be46a00f67a2c968389249d74ba6dd33a5a167a73c4dbb8da7364b9f8393c7aee5"}}, &(0x7f0000000a40)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "cedb69bd509ad2e353e6fe980e1e3da6069d4a9a13b4e57b904cb7ef1c42bde342b33b29e2b0f48c2f3a3dc9f0a6b1666b6f52671ed8a8bf46265a0df5a4c50b662ae731925594385f827d5552108743b0a8928c495d95f39d44a277302b580ffbe30109a8ca22a7062582aaaaf0bae601c794be52dbb88076bbc10f2632e8c1c63c81417a1b9f07ccc987c2824c1ac54611cbeb8f0c03488d08a39f5cbaed6f6c4f7ee577b6643a42904addbeb832f274bc9c3a6cc1c0a50508222a5e36cc343a739f25779cc447b5d464fd7e1aabcf8a15d1bd0725a2f93e4d3420cb523356a5ef4347ca04ac25244c2a7ceabe"}}, &(0x7f0000000b40)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x2, 0x400}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5b, "59a3be1f4a7dc63f8640de91894b3435"}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "1ac0c1c4c9a65f4f3d472661033d8483"}]}}, &(0x7f0000000b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x60, 0x4e, 0x0, "46af9070", "aa55ed5c"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x65, 0x7, 0x0, 0x9}}}, &(0x7f0000001100)={0x84, &(0x7f0000000c40)={0x20, 0xf, 0xf7, "cdbe7edabf78774520fef038b1408d7329d96962211f0383b3a711179af9422c141c3ef4e3b925c390dc333af84422eb70fbdb0e58a5e7f6584d6585d45e76eccd05e57bc4f7972118829dc1f7a45849c61edb4272071c83315aa3bbc47480ad80d34de3c8953e826c768384f396605dce5ec285c37671f02e175765f507d24f32f264293ea211f39a069fe731ca21a60ce251e7b9054d17be4e22a6f7eccc7705332a9a2e3368934fca007c0aee5682f9540ea1f1062d710dc8c9ab7ad23f6b4fafccbaecf2fb6716206df0a93378bdcff362b580f3976344479e8fa05a3a489f886f669ede1a30b7c0b114d79afc2602987648d62948"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000e00)={0x20, 0x0, 0x8, {0x2, 0x4, [0xffff]}}, &(0x7f0000000e40)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000e80)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000ec0)={0x40, 0xb, 0x2, "e980"}, &(0x7f0000000f00)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000f40)={0x40, 0x13, 0x6}, &(0x7f0000000f80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x19, 0x2, "7f00"}, &(0x7f0000001000)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000001040)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000010c0)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x0, 0x1, 0x94, {0x94, 0xb, "408b1ef146301e320a735242be0ce442c611df1bc3c742ac9a2040f5c8999ded55c928b2680217e1f15315acc4386c854b9e4eabfd506497b65ef82dcda7c07f80ebbd122122cf2b5cf04692b90d41481950ccd1ac282ec12903324ee3043e43fbc35cf50b6461d5abb9a5324f359090f02a133e60d43b13330abbffeaa39fbd529e4444ded14cee3c0fbe97a27fcba28cbe"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x19, 0xeb, "e677e6d2bf6a7fde2b870614a6bdccb4c2bea9535378990573a3d0964ec1b6b371fbe93126831eafad61cc1c3ecdc5e72e3ef66d76af38c0e91e36682d705895c7c727a401b85c4ed7fd6c8128d1e51741da40c0bb1295bf690569524d43e8cedd12c5dc9a6cc3bbf54ecbbe3d5ad580ebe98c90fc99f7f8f43f0a5666e73bed91b5ced5040e8de2e4f74238ec4bc94c76a22c4d2c0d7975ee63d979df622a273f3761712b6ef162b09ea8668a1c00d30202961c5da3d3444ba5f3ad546e0f8013e40ec55bd9e68322289154e1218920ad1e4928f6bbc1f8d79a5898ebc1601e85bd599f12f50d104605e0"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000007c0)={0x20, 0x80, 0x1c, {0x6, 0x3, 0x6, 0x1, 0x4, 0x8, 0x2, 0x5, 0x400, 0x6, 0x3, 0x7ff}}, &(0x7f0000000800)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000840)={0x20, 0x83, 0x2}, &(0x7f0000000880)={0x20, 0x87, 0x2, 0x6}, &(0x7f00000008c0)={0x20, 0x89, 0x2}}) 09:50:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0xc}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1148.582263][ T9254] usb 6-1: new low-speed USB device number 102 using dummy_hcd [ 1148.651216][T20972] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:50:00 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x111, r1, 0xedca0000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r1, 0x3fffd000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, &(0x7f0000000040)=0xfffffd0f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x64}}, 0x0) r4 = signalfd4(r0, &(0x7f0000000140)={[0xffffffff00000000]}, 0x8, 0x80000) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/5, 0x5}], 0x2, 0x5dc0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, '\x00', 0x15}, 0x4}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf8c}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in={0x2, 0x4e20, @broadcast}], 0xa4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x98b0}, 0x1c) write$P9_RLCREATE(r1, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x0, 0x0, 0x7}, 0x3}}, 0x18) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r5, 0x10d, 0xdf, 0x0, &(0x7f00000000c0)) socket$inet6(0xa, 0x6, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) (async) listen(r0, 0xc) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x111, r1, 0xedca0000) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r1, 0x3fffd000) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, &(0x7f0000000040)=0xfffffd0f) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}]}, 0x64}}, 0x0) (async) signalfd4(r0, &(0x7f0000000140)={[0xffffffff00000000]}, 0x8, 0x80000) (async) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/5, 0x5}], 0x2, 0x5dc0, 0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, '\x00', 0x15}, 0x4}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf8c}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in={0x2, 0x4e20, @broadcast}], 0xa4) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x98b0}, 0x1c) (async) write$P9_RLCREATE(r1, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x0, 0x0, 0x7}, 0x3}}, 0x18) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) (async) getsockopt$inet_int(r5, 0x10d, 0xdf, 0x0, &(0x7f00000000c0)) (async) 09:50:00 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) [ 1148.821975][ T9254] usb 6-1: Invalid ep0 maxpacket: 32 [ 1148.862608][ T113] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1148.972216][ T9254] usb 6-1: new low-speed USB device number 103 using dummy_hcd [ 1149.102737][ T113] usb 1-1: Using ep0 maxpacket: 16 [ 1149.222007][ T9254] usb 6-1: Invalid ep0 maxpacket: 32 [ 1149.222331][ T113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.235293][ T9254] usb usb6-port1: attempt power cycle [ 1149.238625][ T113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.256338][ T113] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1149.269991][ T113] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice=20.00 [ 1149.279350][ T113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.298305][ T113] usb 1-1: config 0 descriptor?? [ 1149.349480][ T113] usbhid 1-1:0.0: can't add hid device: -22 [ 1149.359770][ T113] usbhid: probe of 1-1:0.0 failed with error -22 [ 1149.671895][ T9254] usb 6-1: new low-speed USB device number 104 using dummy_hcd [ 1149.789246][ T9254] usb 6-1: Invalid ep0 maxpacket: 32 [ 1149.942006][ T9254] usb 6-1: new low-speed USB device number 105 using dummy_hcd [ 1150.042148][ T9254] usb 6-1: Invalid ep0 maxpacket: 32 [ 1150.048171][ T9254] usb usb6-port1: unable to enumerate USB device [ 1150.249355][T21070] UDC core: couldn't find an available UDC or it's busy: -16 [ 1150.257360][T21070] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1150.268047][T21070] UDC core: couldn't find an available UDC or it's busy: -16 [ 1150.277904][T21070] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 09:50:03 executing program 5: r0 = syz_usb_connect(0x1, 0x7d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8a, 0x2a, 0x7, 0x20, 0x1b3d, 0x15b, 0xc557, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x3, 0xf3, 0xaf, 0xbd, 0x0, [], [{{0x9, 0x5, 0xd, 0xcbe4bad8f0c52d64, 0x3ff, 0x1, 0x7, 0x7, [@generic={0x3e, 0xb, "e8823ee7350cbeb904d4773db6637f2c853892ae8e3a29b8750b45bff790ef60e0c8a11e13db4a2478ff40f4f9fdff0d3f86891ab378492390b6b873"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x40, 0x2, 0x3}}, {{0x9, 0x5, 0x5, 0x1, 0x0, 0x9, 0x31, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:50:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0xe}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:50:03 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) 09:50:03 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x4206, r0) 09:50:03 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x100, 0x40}, 0x8) getdents64(r0, &(0x7f00000000c0)=""/30, 0x1e) [ 1151.349014][T21072] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:50:03 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) 09:50:03 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x100, 0x40}, 0x8) (async) getdents64(r0, &(0x7f00000000c0)=""/30, 0x1e) 09:50:03 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x4207, r0) [ 1151.678559][T20069] usb 1-1: USB disconnect, device number 37 09:50:03 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700200000000109022400010000000009040000090300000009210000000119220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x2a, {0x2a, 0x0, "72bff4f6a1563f8c0406fc5efa9a1de7820a49b816924d3c255970a115ddc74866fb4f8b808d6135"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x84, &(0x7f00000000c0)={{0x12, 0x1, 0x710, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x3f, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'N'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x655, 0x200}, {0x6, 0x24, 0x1a, 0x83f, 0x10}, [@mdlm={0x15, 0x24, 0x12, 0xcaa}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x81, 0x4, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x7, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x1}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0xd9, 0x4, 0xf9, 0x89, 0x8, 0x23}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x37, 0x7}]}, 0x6, [{0x52, &(0x7f00000001c0)=@string={0x52, 0x3, "2298736d596400d08aad3797702cf6cfe1127d16a65fc680c366f90fb3dd0d6e8717042214e2a0b221f173f021ca2a0d1454e40927cac7be7c4741038d5e5a5a2851dca567e8f7857eb23ce439bbca5a"}}, {0xf0, &(0x7f0000000280)=@string={0xf0, 0x3, "39e85ac88f55081f29ca73213be4ce971a4a5a54e3222216e3738a4b5bd9f8cdb1b5f6532d40137e2aefd3c9bbcc75c49508de28e59f5eedb1df336bc06d5d418b3d64ab9403a13dd3eab54c9b58a697a01ee94d591ec4931448bc747c3d168ea9a209c7a7c1ad22beb182466b083a0e25a266223eba2d988d69d6045f3d35c07861afbaed449aeba29045d5f42dffa3233b6f8539f5e9d2f9bb29c527badaaa8a68588d801b7a153f65bc7b0ac9956d8d66e75dd44ab307e4d901749236e40cc87134a4970e0e8b489094b5bb142812f0355aa2764e482614ade462fd03a7f5059394e55d64ce77291cccd75f6b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x31, &(0x7f00000003c0)=@string={0x31, 0x3, "a14f060e8d0fb1554961fb9290962e760147278c633121198a58b6a4c67648e2e9bab91ce9b43a3af45dba5f365ef5"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc0c}}]}) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r2], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r3, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") syz_usb_control_io(r3, &(0x7f0000000c00)={0x2c, &(0x7f0000000980)={0x20, 0x2, 0x90, {0x90, 0x22, "5a7628aab8929145564c5ad2da63ad38c47889ac7a3b0909856be17a8af30d6f9af9224d57dbe3099cfe90925d472a590709d7eebe7c31d5505301f28bb420855af5551c9c03274c99d663fbed9ec1e7b95bdbf3d6f720ec1647acaa599f04a4e0b8658c9874a9df65f89d1718be46a00f67a2c968389249d74ba6dd33a5a167a73c4dbb8da7364b9f8393c7aee5"}}, &(0x7f0000000a40)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "cedb69bd509ad2e353e6fe980e1e3da6069d4a9a13b4e57b904cb7ef1c42bde342b33b29e2b0f48c2f3a3dc9f0a6b1666b6f52671ed8a8bf46265a0df5a4c50b662ae731925594385f827d5552108743b0a8928c495d95f39d44a277302b580ffbe30109a8ca22a7062582aaaaf0bae601c794be52dbb88076bbc10f2632e8c1c63c81417a1b9f07ccc987c2824c1ac54611cbeb8f0c03488d08a39f5cbaed6f6c4f7ee577b6643a42904addbeb832f274bc9c3a6cc1c0a50508222a5e36cc343a739f25779cc447b5d464fd7e1aabcf8a15d1bd0725a2f93e4d3420cb523356a5ef4347ca04ac25244c2a7ceabe"}}, &(0x7f0000000b40)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x2, 0x400}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5b, "59a3be1f4a7dc63f8640de91894b3435"}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "1ac0c1c4c9a65f4f3d472661033d8483"}]}}, &(0x7f0000000b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x60, 0x4e, 0x0, "46af9070", "aa55ed5c"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x65, 0x7, 0x0, 0x9}}}, &(0x7f0000001100)={0x84, &(0x7f0000000c40)={0x20, 0xf, 0xf7, "cdbe7edabf78774520fef038b1408d7329d96962211f0383b3a711179af9422c141c3ef4e3b925c390dc333af84422eb70fbdb0e58a5e7f6584d6585d45e76eccd05e57bc4f7972118829dc1f7a45849c61edb4272071c83315aa3bbc47480ad80d34de3c8953e826c768384f396605dce5ec285c37671f02e175765f507d24f32f264293ea211f39a069fe731ca21a60ce251e7b9054d17be4e22a6f7eccc7705332a9a2e3368934fca007c0aee5682f9540ea1f1062d710dc8c9ab7ad23f6b4fafccbaecf2fb6716206df0a93378bdcff362b580f3976344479e8fa05a3a489f886f669ede1a30b7c0b114d79afc2602987648d62948"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000e00)={0x20, 0x0, 0x8, {0x2, 0x4, [0xffff]}}, &(0x7f0000000e40)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000e80)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000ec0)={0x40, 0xb, 0x2, "e980"}, &(0x7f0000000f00)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000f40)={0x40, 0x13, 0x6}, &(0x7f0000000f80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x19, 0x2, "7f00"}, &(0x7f0000001000)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000001040)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000010c0)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x0, 0x1, 0x94, {0x94, 0xb, "408b1ef146301e320a735242be0ce442c611df1bc3c742ac9a2040f5c8999ded55c928b2680217e1f15315acc4386c854b9e4eabfd506497b65ef82dcda7c07f80ebbd122122cf2b5cf04692b90d41481950ccd1ac282ec12903324ee3043e43fbc35cf50b6461d5abb9a5324f359090f02a133e60d43b13330abbffeaa39fbd529e4444ded14cee3c0fbe97a27fcba28cbe"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x19, 0xeb, "e677e6d2bf6a7fde2b870614a6bdccb4c2bea9535378990573a3d0964ec1b6b371fbe93126831eafad61cc1c3ecdc5e72e3ef66d76af38c0e91e36682d705895c7c727a401b85c4ed7fd6c8128d1e51741da40c0bb1295bf690569524d43e8cedd12c5dc9a6cc3bbf54ecbbe3d5ad580ebe98c90fc99f7f8f43f0a5666e73bed91b5ced5040e8de2e4f74238ec4bc94c76a22c4d2c0d7975ee63d979df622a273f3761712b6ef162b09ea8668a1c00d30202961c5da3d3444ba5f3ad546e0f8013e40ec55bd9e68322289154e1218920ad1e4928f6bbc1f8d79a5898ebc1601e85bd599f12f50d104605e0"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000007c0)={0x20, 0x80, 0x1c, {0x6, 0x3, 0x6, 0x1, 0x4, 0x8, 0x2, 0x5, 0x400, 0x6, 0x3, 0x7ff}}, &(0x7f0000000800)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000840)={0x20, 0x83, 0x2}, &(0x7f0000000880)={0x20, 0x87, 0x2, 0x6}, &(0x7f00000008c0)={0x20, 0x89, 0x2}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700200000000109022400010000000009040000090300000009210000000119220009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x2a, {0x2a, 0x0, "72bff4f6a1563f8c0406fc5efa9a1de7820a49b816924d3c255970a115ddc74866fb4f8b808d6135"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x84, &(0x7f00000000c0)={{0x12, 0x1, 0x710, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x3f, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'N'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x655, 0x200}, {0x6, 0x24, 0x1a, 0x83f, 0x10}, [@mdlm={0x15, 0x24, 0x12, 0xcaa}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x81, 0x4, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x7, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x1}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0xd9, 0x4, 0xf9, 0x89, 0x8, 0x23}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x37, 0x7}]}, 0x6, [{0x52, &(0x7f00000001c0)=@string={0x52, 0x3, "2298736d596400d08aad3797702cf6cfe1127d16a65fc680c366f90fb3dd0d6e8717042214e2a0b221f173f021ca2a0d1454e40927cac7be7c4741038d5e5a5a2851dca567e8f7857eb23ce439bbca5a"}}, {0xf0, &(0x7f0000000280)=@string={0xf0, 0x3, "39e85ac88f55081f29ca73213be4ce971a4a5a54e3222216e3738a4b5bd9f8cdb1b5f6532d40137e2aefd3c9bbcc75c49508de28e59f5eedb1df336bc06d5d418b3d64ab9403a13dd3eab54c9b58a697a01ee94d591ec4931448bc747c3d168ea9a209c7a7c1ad22beb182466b083a0e25a266223eba2d988d69d6045f3d35c07861afbaed449aeba29045d5f42dffa3233b6f8539f5e9d2f9bb29c527badaaa8a68588d801b7a153f65bc7b0ac9956d8d66e75dd44ab307e4d901749236e40cc87134a4970e0e8b489094b5bb142812f0355aa2764e482614ade462fd03a7f5059394e55d64ce77291cccd75f6b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x31, &(0x7f00000003c0)=@string={0x31, 0x3, "a14f060e8d0fb1554961fb9290962e760147278c633121198a58b6a4c67648e2e9bab91ce9b43a3af45dba5f365ef5"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc0c}}]}) (async) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r2], 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r3, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") (async) syz_usb_control_io(r3, &(0x7f0000000c00)={0x2c, &(0x7f0000000980)={0x20, 0x2, 0x90, {0x90, 0x22, "5a7628aab8929145564c5ad2da63ad38c47889ac7a3b0909856be17a8af30d6f9af9224d57dbe3099cfe90925d472a590709d7eebe7c31d5505301f28bb420855af5551c9c03274c99d663fbed9ec1e7b95bdbf3d6f720ec1647acaa599f04a4e0b8658c9874a9df65f89d1718be46a00f67a2c968389249d74ba6dd33a5a167a73c4dbb8da7364b9f8393c7aee5"}}, &(0x7f0000000a40)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "cedb69bd509ad2e353e6fe980e1e3da6069d4a9a13b4e57b904cb7ef1c42bde342b33b29e2b0f48c2f3a3dc9f0a6b1666b6f52671ed8a8bf46265a0df5a4c50b662ae731925594385f827d5552108743b0a8928c495d95f39d44a277302b580ffbe30109a8ca22a7062582aaaaf0bae601c794be52dbb88076bbc10f2632e8c1c63c81417a1b9f07ccc987c2824c1ac54611cbeb8f0c03488d08a39f5cbaed6f6c4f7ee577b6643a42904addbeb832f274bc9c3a6cc1c0a50508222a5e36cc343a739f25779cc447b5d464fd7e1aabcf8a15d1bd0725a2f93e4d3420cb523356a5ef4347ca04ac25244c2a7ceabe"}}, &(0x7f0000000b40)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x2, 0x400}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5b, "59a3be1f4a7dc63f8640de91894b3435"}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "1ac0c1c4c9a65f4f3d472661033d8483"}]}}, &(0x7f0000000b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x60, 0x4e, 0x0, "46af9070", "aa55ed5c"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x65, 0x7, 0x0, 0x9}}}, &(0x7f0000001100)={0x84, &(0x7f0000000c40)={0x20, 0xf, 0xf7, "cdbe7edabf78774520fef038b1408d7329d96962211f0383b3a711179af9422c141c3ef4e3b925c390dc333af84422eb70fbdb0e58a5e7f6584d6585d45e76eccd05e57bc4f7972118829dc1f7a45849c61edb4272071c83315aa3bbc47480ad80d34de3c8953e826c768384f396605dce5ec285c37671f02e175765f507d24f32f264293ea211f39a069fe731ca21a60ce251e7b9054d17be4e22a6f7eccc7705332a9a2e3368934fca007c0aee5682f9540ea1f1062d710dc8c9ab7ad23f6b4fafccbaecf2fb6716206df0a93378bdcff362b580f3976344479e8fa05a3a489f886f669ede1a30b7c0b114d79afc2602987648d62948"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000e00)={0x20, 0x0, 0x8, {0x2, 0x4, [0xffff]}}, &(0x7f0000000e40)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000e80)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000ec0)={0x40, 0xb, 0x2, "e980"}, &(0x7f0000000f00)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000f40)={0x40, 0x13, 0x6}, &(0x7f0000000f80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x19, 0x2, "7f00"}, &(0x7f0000001000)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000001040)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000010c0)={0x40, 0x21, 0x1, 0x9}}) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x0, 0x1, 0x94, {0x94, 0xb, "408b1ef146301e320a735242be0ce442c611df1bc3c742ac9a2040f5c8999ded55c928b2680217e1f15315acc4386c854b9e4eabfd506497b65ef82dcda7c07f80ebbd122122cf2b5cf04692b90d41481950ccd1ac282ec12903324ee3043e43fbc35cf50b6461d5abb9a5324f359090f02a133e60d43b13330abbffeaa39fbd529e4444ded14cee3c0fbe97a27fcba28cbe"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x19, 0xeb, "e677e6d2bf6a7fde2b870614a6bdccb4c2bea9535378990573a3d0964ec1b6b371fbe93126831eafad61cc1c3ecdc5e72e3ef66d76af38c0e91e36682d705895c7c727a401b85c4ed7fd6c8128d1e51741da40c0bb1295bf690569524d43e8cedd12c5dc9a6cc3bbf54ecbbe3d5ad580ebe98c90fc99f7f8f43f0a5666e73bed91b5ced5040e8de2e4f74238ec4bc94c76a22c4d2c0d7975ee63d979df622a273f3761712b6ef162b09ea8668a1c00d30202961c5da3d3444ba5f3ad546e0f8013e40ec55bd9e68322289154e1218920ad1e4928f6bbc1f8d79a5898ebc1601e85bd599f12f50d104605e0"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000007c0)={0x20, 0x80, 0x1c, {0x6, 0x3, 0x6, 0x1, 0x4, 0x8, 0x2, 0x5, 0x400, 0x6, 0x3, 0x7ff}}, &(0x7f0000000800)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000840)={0x20, 0x83, 0x2}, &(0x7f0000000880)={0x20, 0x87, 0x2, 0x6}, &(0x7f00000008c0)={0x20, 0x89, 0x2}}) (async) 09:50:03 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x100, 0x40}, 0x8) getdents64(r0, &(0x7f00000000c0)=""/30, 0x1e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) (async) fcntl$notify(r0, 0x402, 0x8) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x100, 0x40}, 0x8) (async) getdents64(r0, &(0x7f00000000c0)=""/30, 0x1e) (async) 09:50:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0xf}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1151.720005][ T9254] usb 6-1: new low-speed USB device number 106 using dummy_hcd 09:50:03 executing program 3: r0 = syz_clone(0x4800000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) [ 1151.837006][T21097] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1151.992298][ T9254] usb 6-1: Invalid ep0 maxpacket: 32 [ 1152.142124][ T9254] usb 6-1: new low-speed USB device number 107 using dummy_hcd [ 1152.182576][T20069] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1152.392132][ T9254] usb 6-1: Invalid ep0 maxpacket: 32 [ 1152.399123][ T9254] usb usb6-port1: attempt power cycle [ 1152.432103][T20069] usb 1-1: Using ep0 maxpacket: 16 [ 1152.559106][T20069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.570186][T20069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.580162][T20069] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1152.593273][T20069] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice=20.00 [ 1152.602622][T20069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.615695][T20069] usb 1-1: config 0 descriptor?? [ 1152.660776][T20069] usbhid 1-1:0.0: can't add hid device: -22 [ 1152.667141][T20069] usbhid: probe of 1-1:0.0 failed with error -22 [ 1152.902045][ T9254] usb 6-1: new low-speed USB device number 108 using dummy_hcd [ 1153.012164][ T9254] usb 6-1: Invalid ep0 maxpacket: 32 [ 1153.172075][ T9254] usb 6-1: new low-speed USB device number 109 using dummy_hcd [ 1153.272159][ T9254] usb 6-1: Invalid ep0 maxpacket: 32 [ 1153.281222][ T9254] usb usb6-port1: unable to enumerate USB device [ 1153.565592][T21207] UDC core: couldn't find an available UDC or it's busy: -16 [ 1153.573414][T21207] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1153.584466][T21207] UDC core: couldn't find an available UDC or it's busy: -16 [ 1153.592305][T21207] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1153.638855][ T9254] usb 1-1: USB disconnect, device number 38 09:50:06 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa, 0xf7, 0x2e, 0x8, 0xdf6, 0x6c, 0xbd0f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xab, 0x0, 0x0, 0x48, 0xdd, 0xe1, 0xff}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000100)={0x40, 0x0, 0x84, "00001facb4cf9840db5f2e12aa250e9ec6e5fa2125af62f5c9db8ca761db6a2836afe93b9c0049a517cdd85a6327a4fa4e681ea5bbd72c07772fab8d11fa77c59155621a14edafe100836cf36a7ce014d0608ef3461cea70f7f0d6094ebd56350ae23aa8d78d7f8505718b2c55056b48c6448ff9b398e2d9ada483730554a04edc2dc98b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 09:50:06 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) 09:50:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x60}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) 09:50:06 executing program 3: r0 = syz_clone(0x4800000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) 09:50:06 executing program 4: r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 09:50:06 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700200000000109022400010000000009040000090300000009210000000119220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x2a, {0x2a, 0x0, "72bff4f6a1563f8c0406fc5efa9a1de7820a49b816924d3c255970a115ddc74866fb4f8b808d6135"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x84, &(0x7f00000000c0)={{0x12, 0x1, 0x710, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x3f, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'N'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x655, 0x200}, {0x6, 0x24, 0x1a, 0x83f, 0x10}, [@mdlm={0x15, 0x24, 0x12, 0xcaa}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x81, 0x4, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x7, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x1}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0xd9, 0x4, 0xf9, 0x89, 0x8, 0x23}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x37, 0x7}]}, 0x6, [{0x52, &(0x7f00000001c0)=@string={0x52, 0x3, "2298736d596400d08aad3797702cf6cfe1127d16a65fc680c366f90fb3dd0d6e8717042214e2a0b221f173f021ca2a0d1454e40927cac7be7c4741038d5e5a5a2851dca567e8f7857eb23ce439bbca5a"}}, {0xf0, &(0x7f0000000280)=@string={0xf0, 0x3, "39e85ac88f55081f29ca73213be4ce971a4a5a54e3222216e3738a4b5bd9f8cdb1b5f6532d40137e2aefd3c9bbcc75c49508de28e59f5eedb1df336bc06d5d418b3d64ab9403a13dd3eab54c9b58a697a01ee94d591ec4931448bc747c3d168ea9a209c7a7c1ad22beb182466b083a0e25a266223eba2d988d69d6045f3d35c07861afbaed449aeba29045d5f42dffa3233b6f8539f5e9d2f9bb29c527badaaa8a68588d801b7a153f65bc7b0ac9956d8d66e75dd44ab307e4d901749236e40cc87134a4970e0e8b489094b5bb142812f0355aa2764e482614ade462fd03a7f5059394e55d64ce77291cccd75f6b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x31, &(0x7f00000003c0)=@string={0x31, 0x3, "a14f060e8d0fb1554961fb9290962e760147278c633121198a58b6a4c67648e2e9bab91ce9b43a3af45dba5f365ef5"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc0c}}]}) (async) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r2], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r3, 0x0, 0x9, &(0x7f0000000380)="8201d57d4d6da713a4") (async) syz_usb_control_io(r3, &(0x7f0000000c00)={0x2c, &(0x7f0000000980)={0x20, 0x2, 0x90, {0x90, 0x22, "5a7628aab8929145564c5ad2da63ad38c47889ac7a3b0909856be17a8af30d6f9af9224d57dbe3099cfe90925d472a590709d7eebe7c31d5505301f28bb420855af5551c9c03274c99d663fbed9ec1e7b95bdbf3d6f720ec1647acaa599f04a4e0b8658c9874a9df65f89d1718be46a00f67a2c968389249d74ba6dd33a5a167a73c4dbb8da7364b9f8393c7aee5"}}, &(0x7f0000000a40)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "cedb69bd509ad2e353e6fe980e1e3da6069d4a9a13b4e57b904cb7ef1c42bde342b33b29e2b0f48c2f3a3dc9f0a6b1666b6f52671ed8a8bf46265a0df5a4c50b662ae731925594385f827d5552108743b0a8928c495d95f39d44a277302b580ffbe30109a8ca22a7062582aaaaf0bae601c794be52dbb88076bbc10f2632e8c1c63c81417a1b9f07ccc987c2824c1ac54611cbeb8f0c03488d08a39f5cbaed6f6c4f7ee577b6643a42904addbeb832f274bc9c3a6cc1c0a50508222a5e36cc343a739f25779cc447b5d464fd7e1aabcf8a15d1bd0725a2f93e4d3420cb523356a5ef4347ca04ac25244c2a7ceabe"}}, &(0x7f0000000b40)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x2, 0x400}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5b, "59a3be1f4a7dc63f8640de91894b3435"}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "1ac0c1c4c9a65f4f3d472661033d8483"}]}}, &(0x7f0000000b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x60, 0x4e, 0x0, "46af9070", "aa55ed5c"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x65, 0x7, 0x0, 0x9}}}, &(0x7f0000001100)={0x84, &(0x7f0000000c40)={0x20, 0xf, 0xf7, "cdbe7edabf78774520fef038b1408d7329d96962211f0383b3a711179af9422c141c3ef4e3b925c390dc333af84422eb70fbdb0e58a5e7f6584d6585d45e76eccd05e57bc4f7972118829dc1f7a45849c61edb4272071c83315aa3bbc47480ad80d34de3c8953e826c768384f396605dce5ec285c37671f02e175765f507d24f32f264293ea211f39a069fe731ca21a60ce251e7b9054d17be4e22a6f7eccc7705332a9a2e3368934fca007c0aee5682f9540ea1f1062d710dc8c9ab7ad23f6b4fafccbaecf2fb6716206df0a93378bdcff362b580f3976344479e8fa05a3a489f886f669ede1a30b7c0b114d79afc2602987648d62948"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000e00)={0x20, 0x0, 0x8, {0x2, 0x4, [0xffff]}}, &(0x7f0000000e40)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000e80)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000ec0)={0x40, 0xb, 0x2, "e980"}, &(0x7f0000000f00)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000f40)={0x40, 0x13, 0x6}, &(0x7f0000000f80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x19, 0x2, "7f00"}, &(0x7f0000001000)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000001040)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000010c0)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x0, 0x1, 0x94, {0x94, 0xb, "408b1ef146301e320a735242be0ce442c611df1bc3c742ac9a2040f5c8999ded55c928b2680217e1f15315acc4386c854b9e4eabfd506497b65ef82dcda7c07f80ebbd122122cf2b5cf04692b90d41481950ccd1ac282ec12903324ee3043e43fbc35cf50b6461d5abb9a5324f359090f02a133e60d43b13330abbffeaa39fbd529e4444ded14cee3c0fbe97a27fcba28cbe"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x19, 0xeb, "e677e6d2bf6a7fde2b870614a6bdccb4c2bea9535378990573a3d0964ec1b6b371fbe93126831eafad61cc1c3ecdc5e72e3ef66d76af38c0e91e36682d705895c7c727a401b85c4ed7fd6c8128d1e51741da40c0bb1295bf690569524d43e8cedd12c5dc9a6cc3bbf54ecbbe3d5ad580ebe98c90fc99f7f8f43f0a5666e73bed91b5ced5040e8de2e4f74238ec4bc94c76a22c4d2c0d7975ee63d979df622a273f3761712b6ef162b09ea8668a1c00d30202961c5da3d3444ba5f3ad546e0f8013e40ec55bd9e68322289154e1218920ad1e4928f6bbc1f8d79a5898ebc1601e85bd599f12f50d104605e0"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000007c0)={0x20, 0x80, 0x1c, {0x6, 0x3, 0x6, 0x1, 0x4, 0x8, 0x2, 0x5, 0x400, 0x6, 0x3, 0x7ff}}, &(0x7f0000000800)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000840)={0x20, 0x83, 0x2}, &(0x7f0000000880)={0x20, 0x87, 0x2, 0x6}, &(0x7f00000008c0)={0x20, 0x89, 0x2}}) [ 1154.525701][T21228] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:50:06 executing program 3: r0 = syz_clone(0x4800000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) 09:50:06 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x8, r0) 09:50:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x88}, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1154.711979][ T9254] usb 1-1: new high-speed USB device number 39 using dummy_hcd 09:50:06 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace(0x8, r0) [ 1154.752193][ T3563] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1154.795816][T21240] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 09:50:06 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001ac0)=0x0) getpgid(r2) sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) tkill(0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) tkill(0xffffffffffffffff, 0x3) ptrace(0x8, r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000001b00)={0x6, 0x8117, 0x4, 0x2, 0x7, "36161eca4ab6d3263413873683ec1da91f5278", 0x9, 0x7fffffff}) process_vm_writev(0x0, &(0x7f0000001700)=[{&(0x7f0000000180)=""/95, 0x5f}, {&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f00000003c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/251, 0xfb}, {&(0x7f00000005c0)=""/182, 0xb6}, {&(0x7f0000000080)=""/25, 0x19}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/93, 0x5d}], 0x8, &(0x7f0000001a40)=[{&(0x7f0000001780)=""/209, 0xd1}, {&(0x7f0000001880)=""/127, 0x7f}, {&(0x7f0000001900)=""/99, 0x63}, {&(0x7f0000000200)=""/9, 0x9}, {&(0x7f0000001980)=""/186, 0xba}], 0x5, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x107, 0x0, 0x0, {{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) 09:50:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800011d000000001400060076657468315f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={@with_ht={{{}, {}, @device_a, @device_b, @random="bdd65ff8077c"}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x60}}, 0x0) [ 1154.873006][ T113] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1154.952936][ T9254] usb 1-1: Using ep0 maxpacket: 16 [ 1154.957438][ T3563] usb 5-1: device descriptor read/64, error 18 [ 1155.041509][T21248] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1155.072818][ T9254] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.084190][ T9254] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.095061][ T9254] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1155.108319][ T9254] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice=20.00 [ 1155.117624][ T9254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.132425][ T113] usb 6-1: Using ep0 maxpacket: 8 [ 1155.213421][ T9254] usb 1-1: config 0 descriptor?? [ 1155.242756][ T3563] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1155.261217][ T9254] usbhid 1-1:0.0: can't add hid device: -22 [ 1155.268054][ T9254] usbhid: probe of 1-1:0.0 failed with error -22 [ 1155.273001][ T113] usb 6-1: config 0 has an invalid interface number: 171 but max is 0 [ 1155.283520][ T113] usb 6-1: config 0 has no interface number 0 [ 1155.289789][ T113] usb 6-1: New USB device found, idVendor=0df6, idProduct=006c, bcdDevice=bd.0f [ 1155.299141][ T113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.322257][ T113] usb 6-1: config 0 descriptor?? [ 1155.462026][ T3563] usb 5-1: device descriptor read/64, error 18 [ 1155.582819][ T3563] usb usb5-port1: attempt power cycle [ 1155.612694][ T113] usb 6-1: string descriptor 0 read error: -71 [ 1155.626761][ T113] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1155.633691][ T113] usb 6-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 1155.682348][ T113] ===================================================== [ 1155.689595][ T113] BUG: KMSAN: uninit-value in r871xu_drv_init+0x1735/0x3050 [ 1155.697186][ T113] r871xu_drv_init+0x1735/0x3050 [ 1155.705984][ T113] usb_probe_interface+0xc4b/0x11f0 [ 1155.711335][ T113] really_probe+0x4b7/0xea0 [ 1155.716613][ T113] __driver_probe_device+0x2fa/0x3d0 [ 1155.722023][ T113] driver_probe_device+0x72/0x7a0 [ 1155.727099][ T113] __device_attach_driver+0x5d2/0x800 [ 1155.732652][ T113] bus_for_each_drv+0x1fc/0x360 [ 1155.737549][ T113] __device_attach+0x433/0x6d0 [ 1155.742478][ T113] device_initial_probe+0x2e/0x40 [ 1155.747552][ T113] bus_probe_device+0x13c/0x3b0 [ 1155.752564][ T113] device_add+0x1d4b/0x26c0 [ 1155.757103][ T113] usb_set_configuration+0x30f8/0x37e0 [ 1155.763345][ T113] usb_generic_driver_probe+0x105/0x290 [ 1155.769013][ T113] usb_probe_device+0x288/0x490 [ 1155.774051][ T113] really_probe+0x4b7/0xea0 [ 1155.778630][ T113] __driver_probe_device+0x2fa/0x3d0 [ 1155.784105][ T113] driver_probe_device+0x72/0x7a0 [ 1155.789186][ T113] __device_attach_driver+0x5d2/0x800 [ 1155.794799][ T113] bus_for_each_drv+0x1fc/0x360 [ 1155.799697][ T113] __device_attach+0x433/0x6d0 [ 1155.804710][ T113] device_initial_probe+0x2e/0x40 [ 1155.809787][ T113] bus_probe_device+0x13c/0x3b0 [ 1155.814800][ T113] device_add+0x1d4b/0x26c0 [ 1155.819337][ T113] usb_new_device+0x17a1/0x2360 [ 1155.824360][ T113] hub_event+0x5556/0x8030 [ 1155.828817][ T113] process_one_work+0xb27/0x13e0 [ 1155.833990][ T113] worker_thread+0x1076/0x1d60 [ 1155.838797][ T113] kthread+0x31b/0x430 [ 1155.843028][ T113] ret_from_fork+0x1f/0x30 [ 1155.847515][ T113] [ 1155.849846][ T113] Local variable data created at: [ 1155.855006][ T113] usb_read8+0x44/0xe0 [ 1155.859177][ T113] r8712_read8+0x74/0xa0 [ 1155.863594][ T113] [ 1155.865928][ T113] CPU: 1 PID: 113 Comm: kworker/1:2 Not tainted 5.18.0-syzkaller-16266-gfb61e40b30d1 #0 [ 1155.875814][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1155.886062][ T113] Workqueue: usb_hub_wq hub_event [ 1155.891139][ T113] ===================================================== [ 1155.895094][ T9254] usb 1-1: USB disconnect, device number 39 [ 1155.898223][ T113] Disabling lock debugging due to kernel taint [ 1155.910337][ T113] Kernel panic - not syncing: kmsan.panic set ... [ 1155.916760][ T113] CPU: 1 PID: 113 Comm: kworker/1:2 Tainted: G B 5.18.0-syzkaller-16266-gfb61e40b30d1 #0 [ 1155.927905][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1155.938035][ T113] Workqueue: usb_hub_wq hub_event [ 1155.943128][ T113] Call Trace: [ 1155.946434][ T113] [ 1155.949374][ T113] dump_stack_lvl+0x1c8/0x256 [ 1155.954105][ T113] dump_stack+0x1a/0x1c [ 1155.958299][ T113] panic+0x4d3/0xc69 [ 1155.962317][ T113] ? get_taint+0x1/0x50 [ 1155.966527][ T113] ? add_taint+0x104/0x1a0 [ 1155.970975][ T113] ? console_unlock+0x1c70/0x20c0 [ 1155.976041][ T113] kmsan_report+0x2cc/0x2d0 [ 1155.980589][ T113] ? memcg_slab_free_hook+0x252/0x9c0 [ 1155.985995][ T113] ? __msan_warning+0x92/0x110 [ 1155.990799][ T113] ? r871xu_drv_init+0x1735/0x3050 [ 1155.995941][ T113] ? usb_probe_interface+0xc4b/0x11f0 [ 1156.001358][ T113] ? really_probe+0x4b7/0xea0 [ 1156.006077][ T113] ? __driver_probe_device+0x2fa/0x3d0 [ 1156.011575][ T113] ? driver_probe_device+0x72/0x7a0 [ 1156.016810][ T113] ? __device_attach_driver+0x5d2/0x800 [ 1156.022392][ T113] ? bus_for_each_drv+0x1fc/0x360 [ 1156.027447][ T113] ? __device_attach+0x433/0x6d0 [ 1156.032418][ T113] ? device_initial_probe+0x2e/0x40 [ 1156.037649][ T113] ? bus_probe_device+0x13c/0x3b0 [ 1156.042703][ T113] ? device_add+0x1d4b/0x26c0 [ 1156.047401][ T113] ? usb_set_configuration+0x30f8/0x37e0 [ 1156.053073][ T113] ? usb_generic_driver_probe+0x105/0x290 [ 1156.058847][ T113] ? usb_probe_device+0x288/0x490 [ 1156.063913][ T113] ? really_probe+0x4b7/0xea0 [ 1156.068627][ T113] ? __driver_probe_device+0x2fa/0x3d0 [ 1156.074122][ T113] ? driver_probe_device+0x72/0x7a0 [ 1156.079382][ T113] ? __device_attach_driver+0x5d2/0x800 [ 1156.084965][ T113] ? bus_for_each_drv+0x1fc/0x360 [ 1156.090019][ T113] ? __device_attach+0x433/0x6d0 [ 1156.095021][ T113] ? device_initial_probe+0x2e/0x40 [ 1156.100255][ T113] ? bus_probe_device+0x13c/0x3b0 [ 1156.105318][ T113] ? device_add+0x1d4b/0x26c0 [ 1156.110017][ T113] ? usb_new_device+0x17a1/0x2360 [ 1156.115078][ T113] ? hub_event+0x5556/0x8030 [ 1156.119694][ T113] ? process_one_work+0xb27/0x13e0 [ 1156.124841][ T113] ? worker_thread+0x1076/0x1d60 [ 1156.129808][ T113] ? kthread+0x31b/0x430 [ 1156.134068][ T113] ? ret_from_fork+0x1f/0x30 [ 1156.138697][ T113] ? r8712_usbctrl_vendorreq+0x34c/0x3d0 [ 1156.144366][ T113] ? kmsan_get_metadata+0x33/0x220 [ 1156.149533][ T113] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1156.155411][ T113] ? usb_read8+0x99/0xe0 [ 1156.159698][ T113] ? r8712_usb_set_intf_ops+0x120/0x120 [ 1156.165296][ T113] __msan_warning+0x92/0x110 [ 1156.169949][ T113] r871xu_drv_init+0x1735/0x3050 [ 1156.174948][ T113] ? __pm_runtime_set_status+0x1868/0x1bc0 [ 1156.180895][ T113] ? kmsan_get_metadata+0x33/0x220 [ 1156.186056][ T113] ? r871x_dev_unload+0x1f0/0x1f0 [ 1156.191123][ T113] ? r871x_dev_unload+0x1f0/0x1f0 [ 1156.196182][ T113] usb_probe_interface+0xc4b/0x11f0 [ 1156.201445][ T113] ? usb_register_driver+0x5f0/0x5f0 [ 1156.206777][ T113] really_probe+0x4b7/0xea0 [ 1156.211325][ T113] ? kmsan_get_metadata+0x33/0x220 [ 1156.216511][ T113] __driver_probe_device+0x2fa/0x3d0 [ 1156.221841][ T113] driver_probe_device+0x72/0x7a0 [ 1156.226907][ T113] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1156.232764][ T113] __device_attach_driver+0x5d2/0x800 [ 1156.238179][ T113] ? kmsan_get_metadata+0x33/0x220 [ 1156.243335][ T113] bus_for_each_drv+0x1fc/0x360 [ 1156.248220][ T113] ? deferred_probe_work_func+0x4d0/0x4d0 [ 1156.253989][ T113] __device_attach+0x433/0x6d0 [ 1156.258797][ T113] device_initial_probe+0x2e/0x40 [ 1156.263860][ T113] bus_probe_device+0x13c/0x3b0 [ 1156.268749][ T113] device_add+0x1d4b/0x26c0 [ 1156.273317][ T113] usb_set_configuration+0x30f8/0x37e0 [ 1156.278846][ T113] usb_generic_driver_probe+0x105/0x290 [ 1156.284430][ T113] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1156.290280][ T113] ? usb_choose_configuration+0xdc0/0xdc0 [ 1156.296048][ T113] ? usb_choose_configuration+0xdc0/0xdc0 [ 1156.301808][ T113] usb_probe_device+0x288/0x490 [ 1156.306792][ T113] ? usb_register_device_driver+0x440/0x440 [ 1156.312726][ T113] really_probe+0x4b7/0xea0 [ 1156.317269][ T113] ? kmsan_get_metadata+0x33/0x220 [ 1156.322512][ T113] __driver_probe_device+0x2fa/0x3d0 [ 1156.327839][ T113] driver_probe_device+0x72/0x7a0 [ 1156.332903][ T113] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1156.338763][ T113] __device_attach_driver+0x5d2/0x800 [ 1156.344178][ T113] ? kmsan_get_metadata+0x33/0x220 [ 1156.349334][ T113] bus_for_each_drv+0x1fc/0x360 [ 1156.354214][ T113] ? deferred_probe_work_func+0x4d0/0x4d0 [ 1156.359998][ T113] __device_attach+0x433/0x6d0 [ 1156.364805][ T113] device_initial_probe+0x2e/0x40 [ 1156.369871][ T113] bus_probe_device+0x13c/0x3b0 [ 1156.374779][ T113] device_add+0x1d4b/0x26c0 [ 1156.379316][ T113] usb_new_device+0x17a1/0x2360 [ 1156.384206][ T113] hub_event+0x5556/0x8030 [ 1156.388678][ T113] ? kmsan_get_metadata+0x33/0x220 [ 1156.393840][ T113] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1156.399705][ T113] ? led_work+0x730/0x730 [ 1156.404069][ T113] ? led_work+0x730/0x730 [ 1156.408424][ T113] process_one_work+0xb27/0x13e0 [ 1156.413408][ T113] worker_thread+0x1076/0x1d60 [ 1156.418219][ T113] kthread+0x31b/0x430 [ 1156.422308][ T113] ? worker_clr_flags+0x2b0/0x2b0 [ 1156.427368][ T113] ? kthread_blkcg+0x120/0x120 [ 1156.432175][ T113] ret_from_fork+0x1f/0x30 [ 1156.436636][ T113] [ 1156.439912][ T113] Kernel Offset: disabled [ 1156.444236][ T113] Rebooting in 86400 seconds..