})

23:05:14 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001225", 0x2e}], 0x1}, 0x0)

23:05:14 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1110})

23:05:14 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x4})

23:05:14 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfdfd})

23:05:14 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000123d", 0x2e}], 0x1}, 0x0)

23:05:14 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:05:14 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0ffffff}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:14 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x5})

23:05:14 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1210})

23:05:14 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff00})

23:05:14 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001244", 0x2e}], 0x1}, 0x0)

23:05:14 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xfcffffff}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:14 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:14 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x6})

23:05:14 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1310})

23:05:14 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffe7})

23:05:14 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001245", 0x2e}], 0x1}, 0x0)

23:05:14 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xfd040000}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:14 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x7})

23:05:14 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1410})

23:05:14 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000125b", 0x2e}], 0x1}, 0x0)

23:05:14 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8})

23:05:14 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000})

23:05:14 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1b10})

[ 1309.588934][ T1222] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1309.918927][ T1222] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1310.858982][ T1222] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1310.868386][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1310.876939][ T1222] usb 3-1: Product: syz
[ 1310.881807][ T1222] usb 3-1: Manufacturer: syz
[ 1310.886387][ T1222] usb 3-1: SerialNumber: syz
[ 1310.929716][ T1222] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1311.528963][ T1222] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1311.760637][ T1222] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1311.766642][ T1222] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:05:18 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:18 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xffff8e88}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:18 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c10})

23:05:18 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x300})

23:05:18 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000})

23:05:18 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001218", 0x2e}], 0x1}, 0x0)

[ 1312.683126][ T1224] usb 3-1: USB disconnect, device number 9
[ 1312.700592][ T1222] ath9k_htc: Failed to initialize the device
[ 1312.706799][ T1224] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1312.756916][T19903] validate_nla: 46 callbacks suppressed
[ 1312.756936][T19903] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:18 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x500})

23:05:18 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7ff})

23:05:18 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3000000})

[ 1312.857565][T19909] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1312.887120][T19903] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1312.901326][T19909] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:18 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xfffff000}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:18 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x600})

23:05:18 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1313.051990][T19924] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1313.066843][T19924] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1313.082462][T19924] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1313.100295][T19930] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1313.179020][ T1224] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1313.458988][ T1224] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1314.288923][ T1224] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1314.298033][ T1224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1314.307100][ T1224] usb 3-1: Product: syz
[ 1314.311731][ T1224] usb 3-1: Manufacturer: syz
[ 1314.316351][ T1224] usb 3-1: SerialNumber: syz
[ 1314.359496][ T1224] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1314.998889][ T1224] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1315.240588][ T1224] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1315.246274][ T1224] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:05:21 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:21 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000})

23:05:21 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfdfd})

23:05:21 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x700})

23:05:21 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xffffff7f}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:21 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001224", 0x2e}], 0x1}, 0x0)

[ 1316.161587][ T1222] usb 3-1: USB disconnect, device number 10
[ 1316.180648][ T1224] ath9k_htc: Failed to initialize the device
[ 1316.189089][ T1222] usb 3-1: ath9k_htc: USB layer deinitialized
23:05:21 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x45658c0})

[ 1316.233389][T19954] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1316.273020][T19954] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:21 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xa10})

23:05:21 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff00})

23:05:21 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:21 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xffffff9e}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:21 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001236", 0x2e}], 0x1}, 0x0)

23:05:21 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5000000})

23:05:21 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffe7})

23:05:21 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xb10})

23:05:21 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001239", 0x2e}], 0x1}, 0x0)

23:05:21 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xfffffff0}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:21 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6000000})

23:05:21 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000})

23:05:21 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xc10})

23:05:22 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xfffffffc}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

[ 1316.749181][ T2767] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1317.029011][ T2767] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1317.839035][ T2767] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1317.848154][ T2767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1317.856519][ T2767] usb 3-1: Product: syz
[ 1317.860784][ T2767] usb 3-1: Manufacturer: syz
[ 1317.865708][ T2767] usb 3-1: SerialNumber: syz
[ 1317.909529][ T2767] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1318.479017][ T2767] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1318.722027][ T2767] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1318.727712][ T2767] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:05:25 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:25 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7000000})

23:05:25 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:25 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000})

23:05:25 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xf10})

23:05:25 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xffffffff}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

[ 1319.650393][ T3600] usb 3-1: USB disconnect, device number 11
[ 1319.670361][ T2767] ath9k_htc: Failed to initialize the device
[ 1319.678159][ T3600] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1319.712903][T20022] validate_nla: 10 callbacks suppressed
[ 1319.712922][T20022] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:25 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3000000})

23:05:25 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000})

[ 1319.772203][T20032] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:25 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x100a})

23:05:25 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1319.813227][T20022] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1319.831641][T20032] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:25 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:25 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:25 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000})

23:05:25 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0585604})

23:05:25 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x100b})

23:05:25 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5000000})

[ 1319.992096][T20050] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:25 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff})

23:05:25 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x2}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

[ 1320.032579][T20050] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:25 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6000000})

23:05:25 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x100c})

[ 1320.083644][T20050] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:25 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff})

[ 1320.124883][T20060] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1320.268963][ T1222] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1320.579012][ T1222] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1321.459137][ T1222] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1321.468291][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1321.476789][ T1222] usb 3-1: Product: syz
[ 1321.481103][ T1222] usb 3-1: Manufacturer: syz
[ 1321.485821][ T1222] usb 3-1: SerialNumber: syz
[ 1321.539418][ T1222] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1322.118894][ T1222] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1322.360758][ T1222] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1322.366521][ T1222] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:05:28 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:28 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:28 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x3}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:28 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7000000})

23:05:28 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x100f})

23:05:28 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff000000})

[ 1323.292569][   T20] usb 3-1: USB disconnect, device number 12
[ 1323.300650][ T1222] ath9k_htc: Failed to initialize the device
[ 1323.328450][   T20] usb 3-1: ath9k_htc: USB layer deinitialized
23:05:28 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000})

[ 1323.345231][T20096] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1323.368267][T20096] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:28 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1011})

23:05:28 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd})

23:05:28 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:28 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:28 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa100000})

23:05:28 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:28 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:28 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x5}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:29 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffe7})

23:05:29 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1012})

23:05:29 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb100000})

23:05:29 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:29 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1013})

23:05:29 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff})

23:05:29 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x6}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:29 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc100000})

23:05:29 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:29 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf100000})

[ 1323.968959][    T7] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1324.249366][    T7] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1325.068910][    T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1325.078033][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1325.088172][    T7] usb 3-1: Product: syz
[ 1325.092662][    T7] usb 3-1: Manufacturer: syz
[ 1325.097302][    T7] usb 3-1: SerialNumber: syz
[ 1325.139409][    T7] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1325.708903][    T7] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1325.951835][    T7] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1325.957519][    T7] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:05:32 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:32 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1014})

23:05:32 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000080)={0xfff, 0x40})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = dup(r6)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0x5, 0x9})

23:05:32 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:32 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x7}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:32 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11100000})

[ 1326.881748][ T1224] usb 3-1: USB disconnect, device number 13
[ 1326.906959][    T7] ath9k_htc: Failed to initialize the device
[ 1326.929318][ T1224] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1326.953813][T20189] validate_nla: 14 callbacks suppressed
[ 1326.953832][T20189] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:32 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x101b})

23:05:32 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12100000})

[ 1326.995844][T20189] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:32 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x8}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:32 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:32 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x7a, 0x0, 0x1037, 0x9, 0xc, 0x4, 0x1, 0x4}})
syz_open_dev$video4linux(&(0x7f00000000c0), 0x4, 0x301000)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
syz_open_dev$video4linux(&(0x7f0000000140), 0x8001, 0x8000)

[ 1327.072583][T20189] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1327.094233][T20208] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:32 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x13100000})

23:05:32 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:32 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x101c})

23:05:32 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x9}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:32 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x48000, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x3, 0xfff, 0x1, 0x2}})

23:05:32 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14100000})

[ 1327.264344][T20226] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:32 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1110})

23:05:32 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1b100000})

[ 1327.306379][T20226] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1327.326800][T20226] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1327.341334][T20233] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:32 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000040)={0x0, 0x1})

23:05:32 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0xc}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

[ 1327.478999][    T7] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1327.801593][    T7] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1328.679110][    T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1328.688188][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1328.696613][    T7] usb 3-1: Product: syz
[ 1328.701074][    T7] usb 3-1: Manufacturer: syz
[ 1328.705672][    T7] usb 3-1: SerialNumber: syz
[ 1328.749977][    T7] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1329.328915][    T7] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1329.551060][    T7] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1329.556753][    T7] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:05:35 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000040)={0x0, 0x1})

23:05:35 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:35 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1210})

23:05:35 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c100000})

23:05:35 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf48})

23:05:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0xe}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

[ 1330.476298][ T9683] usb 3-1: USB disconnect, device number 14
[ 1330.490243][    T7] ath9k_htc: Failed to initialize the device
[ 1330.499127][ T9683] usb 3-1: ath9k_htc: USB layer deinitialized
23:05:35 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff})

[ 1330.549742][T20278] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1330.576841][T20278] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:36 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1310})

23:05:36 executing program 0:
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:05:36 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0xf}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:36 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:36 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:36 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff})

23:05:36 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x103, 0x3, {0xfff, 0x8001, 0x80, 0x7}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x3, 0x7, 0x2, 0x3, 0x0, 0xfdfffffd})

23:05:36 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1410})

23:05:36 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:36 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x60}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:05:36 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff000000})

23:05:36 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:36 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1b10})

23:05:36 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="f9660fc7310f011f650f1c2766b95308000066b80000000066ba010000000f300f35642e36f30fc7b7c80b3e65f30f1effba4200ecf30faef1", 0x39}], 0x1, 0x5, &(0x7f00000001c0)=[@cr4={0x1, 0x400080}], 0x1)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x9d0000, 0x5, 0x4c8e, r8, 0x0, &(0x7f0000000080)={0x980908, 0x9, '\x00', @string=&(0x7f0000000040)=0x9}})

23:05:36 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd})

23:05:36 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x3}]}, 0x74}}, 0x0)

23:05:36 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:36 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1c10})

23:05:36 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffe7})

[ 1331.051002][T20329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
23:05:36 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1331.201448][ T9683] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1331.509305][ T9683] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1332.308995][ T9683] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1332.318054][ T9683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1332.327190][ T9683] usb 3-1: Product: syz
[ 1332.331663][ T9683] usb 3-1: Manufacturer: syz
[ 1332.336465][ T9683] usb 3-1: SerialNumber: syz
[ 1332.379451][ T9683] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1332.948960][ T9683] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1333.191206][ T9683] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1333.196931][ T9683] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:05:39 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:39 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff})

23:05:39 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x5}]}, 0x74}}, 0x0)

23:05:39 executing program 0:
syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)

23:05:39 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:39 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00})

[ 1334.114729][    T7] usb 3-1: USB disconnect, device number 15
[ 1334.130297][ T9683] ath9k_htc: Failed to initialize the device
[ 1334.136507][    T7] usb 3-1: ath9k_htc: USB layer deinitialized
23:05:39 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x4, 0x5, 0x0, 0x6, 0x4, 0x7f})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x0, 0x2, 0x1})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)={0xc660, 0x9, 0x4, 0x10, 0x2, {r2, r3/1000+60000}, {0x1, 0xc, 0xf8, 0x3, 0x2, 0x7, "24f3cfdd"}, 0x40000ff, 0x2, @planes=&(0x7f0000000140)={0x2, 0x8001, @userptr=0x3, 0x7}, 0x3})

23:05:39 executing program 0:
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x100010, 0xffffffffffffffff, 0xe132f000)
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

[ 1334.192496][T20392] validate_nla: 18 callbacks suppressed
[ 1334.192514][T20392] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1334.221086][T20394] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
23:05:39 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000})

[ 1334.266561][T20394] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1334.269188][T20397] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:39 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:39 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000140)={0x0, @data})

23:05:39 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6}]}, 0x74}}, 0x0)

[ 1334.311938][T20392] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1334.337744][T20397] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:39 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
syz_open_dev$video4linux(&(0x7f0000000040), 0x100000001, 0x40001)

23:05:39 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000})

23:05:39 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:39 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1100)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0xfffffff8, 0xc, 0x4, 0x100000, 0x7bc, {0x0, 0x2710}, {0x1083a371d7d4bef9, 0x0, 0x7f, 0x40, 0xf9, 0x0, "20d131a4"}, 0x7, 0x1, @fd=r1, 0xff, 0x0, <r2=>0xffffffffffffffff})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r3 = dup3(r2, r1, 0x70afe709d0a5440c)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f0000000040)={0x6, 0x0, 0x1009, 0x59c, 0xffffffff, {0x7ec, 0x9}, 0x1})

23:05:39 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = dup(r6)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x7, 0x5, 0x4, 0x100, 0x9, {0x0, 0x2710}, {0x0, 0x2, 0x6, 0x90, 0x81, 0x0, "a0667809"}, 0x2, 0x2, @userptr=0xffffffff, 0x401, 0x0, r7})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

[ 1334.487183][T20420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1334.514494][T20424] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:39 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x3000000})

[ 1334.575075][T20429] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1334.589013][T20420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1334.611731][T20424] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:40 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x0, 0x8, 0x4, 0x4, 0x7, {0x0, 0xea60}, {0x3, 0xc, 0x81, 0x2, 0x5, 0x4, "e426c765"}, 0x1, 0x4, @planes=&(0x7f0000000040)={0x0, 0x0, @fd, 0xf4}, 0x100})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:05:40 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10}]}, 0x74}}, 0x0)

[ 1334.634201][T20429] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:40 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000})

[ 1334.698923][    T7] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1334.750950][T20446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1334.999004][    T7] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1335.799173][    T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1335.808259][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1335.817060][    T7] usb 3-1: Product: syz
[ 1335.821362][    T7] usb 3-1: Manufacturer: syz
[ 1335.825955][    T7] usb 3-1: SerialNumber: syz
[ 1335.869505][    T7] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1336.458933][ T9683] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1336.700643][ T9683] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1336.706335][ T9683] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:05:43 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:43 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x86c3f6d3a7634d34, 0x3, {0x80, 0x91, 0x7, 0x9}})

23:05:43 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:43 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x4, 0x1, 0x80, 0x0, 0x0, 0x0, 0xffffff80})

23:05:43 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x69}]}, 0x74}}, 0x0)

23:05:43 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x5000000})

[ 1337.628100][ T1224] usb 3-1: USB disconnect, device number 16
[ 1337.649125][ T9683] ath9k_htc: Failed to initialize the device
[ 1337.676168][ T1224] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1337.705418][T20484] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1337.722212][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1337.740111][T20484] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:43 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x7, 0x0, 0x3, 0x136b})

23:05:43 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x6000000})

[ 1337.755147][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
23:05:43 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x200100)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000080)={0x0, {0x6, 0x3c1}})
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @raw_data=[0xb8, 0x10000, 0x1, 0x6, 0x7, 0xfffff800, 0x5, 0x20, 0x86fd, 0x0, 0x80, 0x114, 0x40, 0x7fff, 0x6, 0x658d, 0x1f, 0x825, 0xd46b, 0x0, 0x9, 0x7ff, 0x8, 0x20c, 0x80000000, 0x7ff, 0xb9f5, 0xffffffe1, 0x8ae, 0x9, 0x9, 0x6]})
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x1, 0x4, 0x81, 0x4, 0x1, 0x7fffffff, 0x3})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3})
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0xffffffff, 0x3b2d, 0x3002, 0xe, 0xb, 0x6, 0x7}})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
poll(&(0x7f0000000280)=[{r0, 0x790}, {r1, 0x100d}, {r2}, {r0, 0x100}], 0x4, 0x400)

23:05:43 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:43 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:43 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4, 0x117}]}, 0x74}}, 0x0)

23:05:43 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:43 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x7000000})

23:05:43 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:43 executing program 0:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
creat(&(0x7f0000000440)='./file0\x00', 0x9)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000480)={0x10000, 0x218000})
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r4 = dup(r1)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = dup(r5)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
connect$inet(r6, &(0x7f0000000400)={0x2, 0x4e24, @broadcast}, 0x10)
ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f00000003c0)=0xffffffff)
io_submit(0x0, 0x3, &(0x7f0000000380)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0xa22d, 0xffffffffffffffff, &(0x7f0000000140)="ce68bc9c2dde934684b8a0573c63b6d97a83d18c33d8925ce91ce9b3a0a4f1a5dbc75c8c61569363ff30f6baddc0019802550763810b66f003b36ce4ff5eeb9351e1d84e05ba45a919f0c7fe49b2727a14f16c9601db0a0932b879030a214ebab624c0bc3b378eecf28c34785175f1f4cffd0534751b7cbfe9efd2727c7499836656b1350c8b117c83ef801b102461802ba0bcb1bcd270132bacb8b805baea71bf67db43874ede2bb8acffa8ef1f0705185c60096ea272d67320c153a07d54525e12", 0xc2, 0xac, 0x0, 0x1, r1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000240)="d4c7e4230361fb966cb5601ce504a5aee041f6a3460e791b30294f72db3a59562a3f7ba176873e0974170aec6e983da941a560dc6b303ca1dcdd3ab4dbf8a2e66407fe846ba849e6ac7cbac3405239c274a6d5a94b326ca3675a50a19c82b0a34c14a7afd8b0533e931034fab9b0cc802ec236e2ddad0112a32b6ddf71da8fc736f26bd2cc8141e463a15db3660f531840d50d1dc898f336e48b0a470f81774d5f820c2392c9f1518cb934ef35c3d77164f465bf01c490fad5ce3255f9435ba8497208a7d2f5be0627ebe7cd1667833b0a861dee3365", 0xd6, 0x1, 0x0, 0x5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)="b73e487a399922e625ce07aaac3eaf58f18c86198a", 0x15, 0x5, 0x0, 0x2}])
r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r10, 0xc0585604, &(0x7f0000000100)={0xa93, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2})

23:05:43 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000200)={0x0, 0x0, {0x8, 0x1, 0x201a, 0x8, 0x6, 0x2, 0x0, 0x5}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff})
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x80000001, 0x1, 0x4, 0xe000, 0x3, {r1, r2/1000+60000}, {0x3, 0x0, 0x81, 0x5, 0x49, 0x3, "7608d14e"}, 0x8bc, 0x2, @planes=&(0x7f0000000080)={0x2, 0x4, @fd, 0x40}, 0x8000})
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x30000, 0x5, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9c0902, 0x2, '\x00', @value64=0x6}})

23:05:43 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4, 0x12d}]}, 0x74}}, 0x0)

23:05:43 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000})

23:05:43 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:43 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
syz_io_uring_setup(0x2cea, &(0x7f0000000140)={0x0, 0x858, 0x0, 0x2, 0x1c6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f00000001c0))
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x1, 0x0, @fd_index=0x9, 0x100000001, &(0x7f0000000200)="10741b12a571d3fbd0e50dee46b41ebe05b58869ae9a796104fa9d09b1c21b35004d2bd6989973f6ca6393842e84b26b3474a6b048958ba1aa5aa78ace70450fefdd8592393d552311a2fe54b5455a73552b7eb3716cabf48dbcfe1142efe0a9f8d33fe8e63debda4bf356a51e964b2ac412825c335439aec61085b698667b5fd20657ebd9a23aa46c3885792642b1568fbbb8595c4acfab2293641060104b764ad9", 0xa2, 0x0, 0x1, {0x0, r2}}, 0x6)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x5, 0x5, 0x4, 0x0, 0x3a25, {0x77359400}, {0x5, 0xc, 0x5, 0x4, 0x7, 0x0, "a37ff1e7"}, 0x6, 0x1, @userptr=0x3, 0x5})

23:05:43 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0xf}}, 0x0)

23:05:43 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/platform', 0x180, 0x2)
pwritev2(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="98f1e5095f8d1ec5f73d4c093ba50a7a7521fd302a5ea727e5b3e48745a54f9b7b5509f830007d65e71c5e47b79e44ed5cc1bed2096b4b75f60c664772b0be8b3493ee44249cf2e2ece8e3fb665e", 0x4e}, {&(0x7f0000000140)="a6274c06ff1c86db6e0a", 0xa}], 0x2, 0x3ff, 0x0, 0x3)

23:05:43 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1338.331661][ T8828] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1338.639312][ T8828] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1339.478953][ T8828] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1339.488106][ T8828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1339.497044][ T8828] usb 3-1: Product: syz
[ 1339.501415][ T8828] usb 3-1: Manufacturer: syz
[ 1339.506007][ T8828] usb 3-1: SerialNumber: syz
[ 1339.549438][ T8828] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1340.118897][ T8828] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1340.362082][ T8828] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1340.367789][ T8828] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:05:46 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:46 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x78dad000)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0xffff, 0x8, 0xfffffffc, 0x0, 0x10000000})

23:05:46 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xa100000})

23:05:46 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x14}}, 0x0)

23:05:46 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x0)
r4 = dup2(r2, r3)
ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff)
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0xffffffff, 0x6, 0x4, 0x20, 0x4, {}, {0x2, 0x2, 0x3f, 0x8, 0x42, 0x4, "0bce848f"}, 0x3f, 0x2, @offset=0x8, 0x6, 0x0, r4})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0xfffffffe, 0x9, '\x00', &(0x7f0000000140)=0x20})

23:05:46 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1341.291480][ T9683] usb 3-1: USB disconnect, device number 17
[ 1341.302748][ T8828] ath9k_htc: Failed to initialize the device
[ 1341.332651][ T9683] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1341.372398][T20590] validate_nla: 18 callbacks suppressed
23:05:46 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xb100000})

[ 1341.372416][T20590] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:46 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x100)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0xfffffff, 0x8245, 0x6, r6, 0x0, &(0x7f0000000080)={0x980903, 0x5, '\x00', @ptr=0xffffffffffff7fff}})

23:05:46 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00')
read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0})
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000080)={0xfffffff8, 0xc, 0x4, 0x1000, 0x8000, {r7, r8/1000+10000}, {0x3, 0x2, 0x2, 0x7, 0xcb, 0x8, "e45558ee"}, 0x7b74, 0x1, @userptr=0x3, 0x6, 0x0, <r9=>0xffffffffffffffff})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000002100)={0x6})
fchdir(r4)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000002080)={<r13=>r9, 0x20, 0x9, 0x8001})
signalfd(r13, &(0x7f00000020c0)={[0x6]}, 0x8)

23:05:46 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0xc0}}, 0x0)

23:05:46 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1341.453718][T20598] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1341.489531][T20590] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1341.528681][T20598] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:46 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xc100000})

23:05:47 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:47 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0xec0}}, 0x0)

23:05:47 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80c81, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x42)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0))
close(r1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x800, 0x4, 0x200b, 0x0, 0x8, 0x3, 0x0, 0x4}})

23:05:47 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xf100000})

[ 1341.710618][T20635] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1341.728052][T20635] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:47 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x6)
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001180)='hostfs\x00', 0x0, &(0x7f00000011c0)='\xfc!\x00')
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000140)={0x1, 0x1000, "52b75447cd17e73b5dcbcaa19b1765c8ab2a8b48eca5c1edf451f7858f8d54b19cee807258483c63534f17a4348463773b2557ccaefe51119db127484326cb3dd91cf8a815fae5a802e9fa233d1b9d7918ffb66def5d7447adf3eb5b3ae479d7962083a4faf6dc9ffa5808f45428e77b515bd5cd5dfcb91ad1fa77abdb4779eeada7d9c3401439d7b58646a0ca655e422039b624dab90417be35d2727e8f08d302bd957972247c467d32df7f6cba81ecbbe6dc47d93cac4012bc49bd5f14c431c116fea1ce270d5def515411220ce28425257af3ed501ab035a2098b71d2ea1b0e5356cf6d46ce744f4c52af4e3b62b2d4a3675cff5bec5c3625ca001b1b2317d264e1cc855cbfb82d48a4b73916c09225824474d965c987d19407348d776f09c4f4b46e340ecc458bb477fb3fdb7dcd4b41780003bd29f407ca54c5b054db706cd128971c24237adba7f5ec9b0ac09be2ce1aa5fd91b41fd6aec1a5c3ce5a0b132d878db2cb91f1d9049af535512be17b8ea6feb01133050bc70c5af9bf3cb30e0533fcd83698c53c5e8482a6733cb5f347be612b20effa6ea35433e109f7cc8cb6af61be572f81191817634140bc363cdf9de94a0457350d5a677e116b9f2a26b66ae6c835c9c23c6469828a453e6f274a633d2eb3a017aa87766bd1d039a652772ca5d760a7c28baa0915ae6d8cdb701ec5f8430944be144bff3ddae19d92a767e09d532226bb6798f799d7a11cc23b3f55f830b0c7ab05d46351684d3147389ab177e1f06613f03220ecb41c190bf7807c60a655723581e1cd5a4053b92267e55e50dc978e8827a5a87b6642c593451986e19aa42f0fe15dc34f6e5ae612533715e8bde4cc11eaa14f5dbd299605369f76733374b98543d18929838a03c7d0fb01ff46ed758654226c40df5c3678d965d2e2fb2a47357664a6c7a971b016d1ebf0d35b10c9f1e369c7924f7f830fcb43249ebf339fdd7505735247ba185256bf8398e027a3518e154fbca7f9e7f186fb83c7e282509abcb40f44c90434eb16000da451688b569df12740d02f135adf099c075fdc7866f85d1d87a5b7408f990598371dc050c2f0f3ca6bf85bce587883afb9d9ff633977b15657ae9bd3ddd83ae0241f3d0db7fc59e5865d4bd1576db28e9fc8fca09cb5fabe92be9e38275f4d4fe9a674cac181d4911b96a2058ec5cf415eacc8f3c5aef2a6c397895a97f827e50b3e5a5c5c578514fc662fed0c9598abef4d866c9da6f2d5dcd42c335afaea0dab82ffb9453abacdc90501574f0948fb04bc6fe17c51a8e71c94bbcca24a01fcef061fa423dd6c5042d2690d93e5ec90ee6410309f9fa50e8b60a98a973c52d1d76a502579e20ffaa9a4739c93e1fdbd34a9142cae199b70487be3acf5f7b9f85cfe7a478cf94037b5b806b92733d46238c44062faf9f225094ac7fc9f108f6b5b5e8f5e917e0fc15ec862ed7c6e37efe33b74f65d1c5871dcd79886f40fe36977efa3c29f9de133e09dec0afa273b770fd8c055b83f72c5b75797f124ce9a5865006fbf2c46bf0f6dff4b7aa846244693f3eb32de0d81116cfc3335adf5a56c9480d2835b5da68b7d65b34b95d74d1f15bc05056231bbd77d4a977725a646108ddfb3995cd0c6de89f8ee382ada764ab300f4343a2607150d1cbe23bf346899d89b4bf80922f9244e5e594e11bbd1e39793352e8680a1bbbf9db87c60cafad44ed330211b40ef03ccb4f7afc036b3c6044b24d6684b6b397e33a73a6d8ee2fc04211e9a80d185db4fa4b25c865ac99bf38645b0bef1a008e027681c8a1223a8be498d324663c0857488cdd6c7e3352e2a8efd6cd396f2620919e0b5443cf2cfcf0adfc685726b1418d5be890cef92ab4bf9403e7e54ac26fde4d1d821fb35e0c9786316f3a967b395e76af2d12d6aa1b74278d6b78a6446b52440db14addf5b635343ad23d2d7ec0ac8ca8cae30a45f4694e30cfb0cb3fe3a18389124d0b8723f53cabd02bc174134c81ceee4d834e5d88a804f4f568e589d28311697782960f128cbb6b60eb722acb0224de88e75c645a18f10a6fbc8bdbcd7b9f14638a1dc21f1f092860c959e21ee8ac411f976e921d43fcdc70d16cbd7f8e851aaaa445e48040469102318353e7f8bf644b58ae6b974039bec29b9a2700a7055a78757b8a2132b688e2b41e2da4a34fc0277a3120dce7a2dd2ec724ce51d1264131ab40c987bb3774ee3919b067cb6749642fa2778e3368edf20e2b38ffc82b380c6e7efa9c641cd37bf8b62de039df80bf55e6ea409da5e0fe5ce70fe5de30a036099c5ff46a00a54c74bc30e1712bd4a4b9cc397d74aa0c97b43b3c4a34ebf9b919a1c4eea5683a9dd40939b272233b86047c74affa983fc7581ce98ccb940bd7e309ae54749ac960e66fb58e9a3d95dbcbfbc53dc5aa9c33720241fdfe6cf428dfb09471825ea6d4c8745226f234ec89458b79927f752c341e312e8b966af6b580904c9d56e9c9e8eec9fc4c631122c20f5f85f3c393f8f17382651fda24a2aac4f6382046c0cbde64e0700c9598210786bef4cd741b1e92fe6018093c795c7fc4bf1e53ef0956ec1ef3e00dccdd29bc7e0b957bc511cc2ba1c0fcfadb72302793fff49977eb75f64fb32574259080e4a61db76ef77ffbed7c76c894720280b2f9e1db8323c21c1d06b42f8cb34abed388fc354fdb374a1472955dcefcc57fa3c1a6ccd769ecf13348f5c88822c5aae2e3de6168e28d4d756033d776dff432fee401040ae169c2d632917b602bf8b6e281fe7dc5e1e0036fb551b2098c4b7863c182210968a7d7b9b242bece96b9400e7ec429d2a2421f7214ac15e5b00471e8006970a64e4fa0eda8318da04a84a889f3de18e4925bef32ce689c8f5dcc98b5581e7202af3ef4e473ae4d6734a8ad8a07295041214130886a30adfb9ba9fbbb2558ce03c69c7bd7ecd08f00a58d98e3de66dc6240cb8a3848dc737e92e787de02529be5c26613fdaf05b8f5aa4fbd98d5ff8734c326be119066b3cc8970090660303eea157052affbaa2b7be43229fae41abeb32600e0d341c50600b3048c5a245273e0874025732e32fd193636399f464935004057deff6e81f590b36ad20961de7ac575c5f9463b8e24115660b398d5ce51a1a0d2582fbd32774990dc2ec07ee1f2e7d6873c782be643332550e0223ffaffa5a3753f9bf4fe8ce3aa806269a043b2cf4adcefe38b4e6e9808fb9a766485197b3e7e06f90a91be4944565c9b83a2329d7f6bccd59283f726cce39854a12d4c47bd4b7266f6b59c4bd438d18d3aab9ad29fd81608fcbc679030883341369eeb4d88f2d08a091b5c156bac3319842b04334c1aa468f24518d68fb5a9973d88566f79cb5787800415831a4cfa728f1e2fce059f0512f200735964ba878fb554fdb3053403411003b367e530b1feba026e9dcc8ced0fc721d2d2edecc0fa65c9de4902436bd7342b3dd88b666dcd9f3ad2acfbb64e2eb284061b21345f8827294d624571a375ccf422a613d713ad7aa1417573ccef6ed3eccf3a945fafa7bcb431de2f109baf1d79b53008a4f4b1d90cd26982a4a88891cd86bfb95573563801aca54c8852402762c53e8c4bea7e7778800ad50144498a75f1ea320b48de8a0178147d82cb7227548d7372355769e6d236b4ef94f524a9a574230514375051648e4d24af4a3ab5129227a4b27033bab735399d29e078bb86cba69a042636f79d0fa68f3b4d62d18ec476a3187b01a5af9af59e6ebfdb25cd7b4a3bc7d6f1abdf5f411f36176f53900c1f035065acd88368b45f711bf021af0458e57e2490659664bf5946b525dc4a9065ba65cac34cf1af90af16311adcfd10d82848ff33cd267fa5d3a9c7de8576509f9b2a3acfb8661352e2a821af2fe86006e84dd1f7c83964778664902123e9fd723f10a9d40a30a4b91e5483c9d20a82eb6632344afb0e1d12b161a4071a875e3a1a9b6ee524a2d7126b45de8dde5b742b9f4fd4c04cd92a30dd3d21018c01cf92c660cbb7c08cf94eabaa0af7686a87b2d452679764d677ea2a2f20fa1336992eb3777dd7940423c92a0492d57913aaab134f28e4c8c43273a7a412eb1a79d0100cf6afb9d92a3a8f024c00eff6c8b5815a4b6d1c2ee1e7483100d5a680c2194f731d4511ad46b1ff19353f142bcb203ca736a1ac3bc3c0f1a7200b151b8db470051897a8bb69c9b0c9fdbfa76ae511102b53fcf84b9351196c06adb11ef2703b2512cb8e41ece47544e8ccc9ef08dfb54a12a9f024b6191896f5e941a2d34045479a4c9c0a26c730f46364675306bceb6ef00b1f9dd879a70c8a2bc7f51fe31e51c3ffd385ddbb08d90f80568b10a27f6e7a13960e62151c940ecb9b7200f19802b2ed5f719e5eadfdcc9bf4fe4b3c63f26618787bf25b185f475918611daa8057d904309437400a8ec2a7b2b799e6527436cda5d930b970418c54ca384e5236e70dcda06d58df0774fbedad611c64121b45d539bb414eb801ddbe3834844c37c6b1a543fe6596d6dd36257f5c04e52e53ba6d96762b93d6ae636fe436cde2d4ff277a5c5370fd6e1b97a8c6abd7245e843b4f8f45bb1048ec076081363f5bc428965592a7e698ef881bd1d38e8a4cbbf30c14776da13e03bb6c582059fb27d315bfcf72738d7a7899a2e61ae0b73c35c36c2ab2226ee62077a99940b1e36c675129c358013d6928bd4da508b515e80b675107ccf9f5839eb2a0ee05dceba03d99a939dbfc21c4f7b4b5adeb83e217d9e5d4bab588d605d5029dfdcfdefbcd7b749c4a12b910bb796ce3013b22f40900c29c240f4ea14a016c22d9c24a05c400ede31bf258b05324b6200a2315ac79f186cbce0a799789ac44960d69bf20bf2a82e70d95b6a49fea621cc516a2cc47208a2e490a2a664fb0f60e2048a5f523a895c181f1aa99e4bdeb3138e907e1790614281c432095f4a5023e72b3408be7214523f528a9704a1284fcf76759fbc0b60f95b284849f2ed9f05db26295a7d9bfc9381dc1ce1f904738fa7073eb8a37cf19b75bfb46447f219894c7f1989537414e5b04d62bec1fa02e27410435d30397cb5e220efb5256d53f6b0eb3fb35411d2e22df59a9ee7ac8777f6add1eac90fa5043995e82153a6bedadf750ced4375f642270b4dc5006fa48770540d69bd72c6b8fbbe7eb32c7b80398ab064b06126ad4c26fa9ed09ba2310ec8964d2fc75327af1792a647dcce73381bb8c2407347ca4641b3f98c8358778d09afbb4eb94a1909b5f798801ccff21cb2536344d5c9f099e6eed417a60de83adc0d7d29c47a7ef53776b32640a363a3ffb61376a285003d1c8799bff9d6990efebd3dfa4ae02771a5da079e8385be043352beba6238767b4e9a0ea2b660c0025dd1e778ac62d7a26de83ed51f64eaaa8eeb741ce5f26e69413bf7c33a29ab9315b73d8cce3bb8c9dea5a913c250bb79eb8773381973c2e20f0c9e59441eee1114e9d4e37e14419429a3d0ad7e22624cfafb4c8367fa6aa1fc60cebfc8dd40ed3b8d817fb09facb9ed49313c2808e93d1b7b734330338562ee7bd25545b8505a8a1501c331179bbdc8f59af60a86cc3fee25640832a1edbb4cd655c296581ace17d3f6e3be11a515f29a4159ead382566a079f77257094deaae089a338b39d232f6482a3d5e2f3b3dadbd8e9b7bcd016d600adda69d258b0b55d01b8588c0564463110da15baf2bc1ec420125abd20fae599b048edf20e974a0045509c29a68b559e7f822c6adb5b0cf141739ec5c0a306e8303ab335bfefc288"})

23:05:47 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1341.782157][T20635] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1341.805041][T20645] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:47 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x33fe0}}, 0x0)

23:05:47 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x11100000})

[ 1341.868899][   T20] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1341.952122][T20661] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:47 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x200001b4}}, 0x0)

23:05:47 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x12100000})

[ 1341.997183][T20661] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1342.159591][   T20] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1342.959199][   T20] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1342.968330][   T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1342.977798][   T20] usb 3-1: Product: syz
[ 1342.982467][   T20] usb 3-1: Manufacturer: syz
[ 1342.987052][   T20] usb 3-1: SerialNumber: syz
[ 1343.029438][   T20] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1343.599107][   T20] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1343.840999][   T20] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1343.846709][   T20] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:05:50 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:50 executing program 4:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000000c0)=[0x9, 0x1d4, 0x7, 0x2], 0x4, 0x80000, 0x0, <r1=>0xffffffffffffffff})
write$qrtrtun(r1, &(0x7f0000000280)="98226c831012a505def8bf394377288179a28720f4c0", 0x16)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x400800, 0x8)
mmap$qrtrtun(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20010, r2, 0x8000)
write$qrtrtun(r0, &(0x7f0000000140)="f4c5855d064f08f3362aeb5e4e5ed8a47cace86783de31f7c299ae0146c9c856d503f9c9b3629482a291fec3ecc0102d17d8a6265134f7a9695533f94423c03959b454cc213f5f42c98e5bf2ab77705deaec298f9c2894b51fb9ec27d39415e3c9822e1aad78ac748be8ca98ac232f752d91816f435ba4de86cbc4201c08718421e00134701751a36bd24b2aa9a0e7699207fbc48fe281611f8f4558deb9e3554c1d04c249e008e78086ff9db08411f4b5312bf76575aed38084a017b44b940c11ad855177c6333e2da7994a50fc440adc265433d1", 0xd5)
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:05:50 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:50 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1000, 0x406391a1ebe4292f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x0)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000680)={0x0, <r6=>0x0})
r7 = getuid()
lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, <r8=>0x0, <r9=>0x0})
sendmsg$netlink(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc, &(0x7f00000005c0)=[{&(0x7f0000000080)={0x10, 0x21, 0x8, 0x70bd2d, 0x80}, 0x10}, {&(0x7f0000000800)=ANY=[@ANYBLOB="b40000002c0000022cbd7000fcdbdf25950c5d2f93d69583a5cff91201749e046bb1d6cd136837c080f9cfc30b2b926092e9ba2edd8000000000000000d9e12379890e27e8f881821e4f40b4c1df240ee2fcc3afb6a21debbe94ae5d0de82b68863586c3d39205a56eebf13ffaf0bfe9da59ca67e838e9961c0a880fb52be6a1f0baf919b3f189176c49ef7f0bfa554b53a273b7f8c89e9f6db7a6fbc3cf61eff3e9a0641d9abc3f16fffb174dd19c8bd012db002586f953626341a867f9fd91749596371c6f8c02e696d0b61e1d746952891315545b"], 0xb4}, {&(0x7f0000000340)={0x268, 0x38, 0x2, 0x70bd2b, 0x25dfdbff, "", [@generic="6c853260ba58b3b2e713b64c6922d7c301136627a61f55ffc000831d99dd919adc946e64a87c104a74824227e481968b5a71ec449c992819e768c5e56dda1719b88da83991cfa159c7ae402d8b01738cba924252fdee1dde207a5fe16e988710d08875f731e9aa687a8e09c3bfdff05127e10bfd2a2b802bb8e43abf4c6b259bec89dcdfed4420808cd6624b27808138a96b8504b8cb3dabdef2d3e8afe5f956b2a16022e1b9815a1a1e837be8efabd70b66e0292945ec696830e0cf78cd5cf548d80212614afa3d1fa8e6bb7fda27b4be384f69bcbf5cad9087f9c34e4614c59011d2afbcbb3da0a883a2", @generic, @generic="e8e2a19b8952ffb9eb7940ed95254d78064328b80d39acf00c2b5e0f6910f6db1dcf68d4f33eb10960bedea1dd3f590aab7deb4494d7ef44a7a94dcec6fdaf8aa8", @typed={0x8, 0x64, 0x0, 0x0, @uid=r2}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}}, @nested={0xf9, 0x22, 0x0, 0x1, [@generic='p', @generic="dd148dc6cbedbc8dde673d411a875d9b36bddf6671ed1a96cf24c60a98e361b3511d254915dc7ad96506e90e4f67", @generic="87480ac2f3f1566b1d30d084947f993af2e0880bc962d6ea6374db6d547a530a0a9e6f252bd47c9a8863a3d7542aa72fe0a273614c5157c0c52a20cc38b794da0e6f1760e1dd501f672bf7cd3f2456292cfc0680aa630b83aed4e56e0842abe5accc2f1fce94c6e0be27453a2a5b93d306927845d89ed887a6e52d28f276ccc39fdd38faadf494eb71ad24f0d0404c97c5d42e1a050b3a933181ab974d110c4aabbf0db039e7f5a1fc671cfda90fafa19f7e0cdd7f10283607f788aeff9eec306b25e32b2d5f"]}, @generic="cb50", @typed={0x5, 0x4a, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x11, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x268}], 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="00000000d714c53caec137fd49475319ee2515e314cf6601010000ad8f87c9b39f7f96337c93c8f7a51a444b1da65e7340a8f60c2b4b35a87221398633c152d8365cbba723d1a257cb25937938a35f04a3b7a129bdc36cb3c9dbe077ca23b607cc98820415bdd5419e5b7e38283d62626c1a67642b141ca10fd91139b4354fa7cc269250a784e05aa5d0bf00"], 0x48, 0xc4}, 0x40)
r10 = socket$unix(0x1, 0x2, 0x0)
setresuid(0x0, 0x0, 0x0)
r11 = getuid()
setresuid(0x0, r7, r11)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r12=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r12, 0x0)
setresuid(r7, r12, r8)

23:05:50 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x13100000})

23:05:50 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x7ffff000}}, 0x0)

[ 1344.771776][ T8828] usb 3-1: USB disconnect, device number 18
[ 1344.780138][   T20] ath9k_htc: Failed to initialize the device
[ 1344.786437][ T8828] usb 3-1: ath9k_htc: USB layer deinitialized
23:05:50 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080))
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:05:50 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:50 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x14100000})

23:05:50 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x2000000)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000080)=0x3)

23:05:50 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:50 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0xfffffdef}}, 0x0)

23:05:50 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1b100000})

23:05:50 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:50 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:50 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x2}, 0x0)

23:05:50 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1c100000})

23:05:50 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:50 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x3}, 0x0)

23:05:50 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff000000})

23:05:50 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:50 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:05:50 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x4}, 0x0)

23:05:50 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1345.478917][ T8828] usb 3-1: new high-speed USB device number 19 using dummy_hcd
23:05:50 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2})

23:05:50 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x6}, 0x0)

[ 1345.811378][ T8828] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1346.719406][ T8828] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1346.738685][ T8828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1346.748820][ T8828] usb 3-1: Product: syz
[ 1346.753095][ T8828] usb 3-1: Manufacturer: syz
[ 1346.757692][ T8828] usb 3-1: SerialNumber: syz
[ 1346.819613][ T8828] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1347.408918][    T7] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1347.673949][    T7] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1347.679933][    T7] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:05:54 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:54 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:54 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3})

23:05:54 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x7}, 0x0)

23:05:54 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f00000000c0)=0x9, 0x4)
ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000012c0)={0x0, @l2tp={0x2, 0x0, @empty, 0xfffffff8}, @l2={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6, 0x1}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000300)='veth0_macvtap\x00', 0x1, 0x10000000000000, 0x1})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000018c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001ac0)={"6cc3e040ce2f7ef8cb505ce038b3ebf1", <r6=>r4, r5, {0x1, 0x7}, {0x5, 0x8}, 0x83, [0xf43, 0xd0, 0x9, 0x10000, 0x8, 0x6f, 0x2, 0x7, 0x1, 0x6, 0x2da, 0x57, 0x4, 0x10001, 0x7, 0xe830]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001bc0)={{r0}, r6, 0x8, @unused=[0x7, 0x3f, 0x7c, 0x9], @subvolid=0xff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001340))
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002bc0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000400)={r7, 0x5, 0x81, 0xfffffffffffffffe})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={r8, "9ce6910f4b5a348587f49e29ff0085ed"})
ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000000000)={0x4, 0x2, {0xfff, @struct={0x3, 0x8}, r8, 0x6aea, 0x8, 0x20, 0x4, 0x8, 0x5, @usage=0x100000000, 0x8, 0x9, [0x40, 0x3, 0x5, 0x6, 0x100]}, {0x10001, @usage=0xffffffff, 0x0, 0x6, 0x0, 0x5, 0x5, 0x7ff, 0x1, @usage=0x2, 0x3, 0x1, [0x8, 0x7fff, 0x0, 0xfffffffffffffffd, 0x456b2ce3, 0x8e63]}, {0xba4, @struct={0x100, 0x100}, 0x0, 0x5, 0x8001, 0x3, 0xffff, 0x22, 0x0, @usage=0x9, 0x9, 0x3, [0x401, 0xff, 0x7, 0x1, 0x8, 0x3f]}, {0x1ff, 0x7fffffff, 0x80}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000000140)={{r3}, 0x0, 0x10, @unused=[0xffffffffffffd17b, 0x2, 0x5, 0x9d1a], @devid=r8})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:05:54 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='+\x00')
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x80000004})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004da40)={0x0, ""/256, <r2=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004dc40)={0x0, ""/256, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004ee40)={0xfffffffffffeffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r5=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r7=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r3}], 0x1, "d77c10c393aa50"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000068c80)={0x0, <r8=>0x0, "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", "c3b9a300d244d0d978d2e5f95bed2ea3e6f465cc4fc85b3c687602adf7b6142b02595fe8453c2742a26cf428e6b5e547e830dc33224efb4832fdd39534ffeff1f61288f50544fe294385bf27c31c7c78ab20b816dca51c6f6e6389d3ef1212ce3089abbc4b9630c5109a149ff1538117fb1926452526274485d66c8a152914b1aa1ddee4282e413eef41a405185eb91783663ff7e7a3a6d846d5b05b2d4d2cec60f047e5ed601ddcd598b3faf079bdcc40440266766b86317278683d30208e75077fd1615c3c7c728ece46d422e64116797644ac0149827532f2be2efe39ae27f5ffa86fca3c514294ea37e2daed72e666856f57bdcce881de95fa4ae1a6f7817e9b0910501f3e7352f2d9b581cd0b082693308c730129495ffd9badbd81d77bd6c813d17bb7a0f2ad9e6c352a6bb4f6502bb2675730101e00eb17dd9af3eb13224c5df1f290c0bc7cd6e048a09bb4128de559e702385c6edb4a48295e0a4aa13f97889c93e60e8176df7ef7ff57e2c23488bea76ad2e987a9823804270fdc384ebbae6d046269cb091c426a6d61795cb5561008837a4808efd2177dd976e9dbac14ca12557e2c45b4c3847c815832a25b283ab6cbdc8877ce41728ebf3ee164e5280de65283bcd9f7eea15e2964a252455c3d34b47bdbe8e826ad55474e23ef8e386060547772f2b2c28d8dd587eb755fc55ef962621476bcd95d87965eafd21fbe875f4ecd0781ebd4922b69265fa40784bb6a020b0dc0405445cb97ea76bfca738e00d8623758dc185fbf87820b8cfa0b0606393ecc7c78197c272a7250b35107e08eb13543b39df58af0b0e2fb400b4669cab6294566672afd7b6da36777cb31e62b2bd212d541c144a3178cad3196a463d865ef2377f8788c76ae1482e41b937103e392148cf49daa1fb90c56c5682beed0bcffaa9bc9dcb1776a5c52706f3d4b164c81a48c8daefada9a55ef95fb652ba7b771ee9ba83d96738f9426632b07e4854cfba29912e3e164e14055dd7e0c6e320c7ac741af6478b7883d164c7023416662f5baca298c2cc5b40165a655cd2f4703fa50b8c8621ebada02734b66a7ab4b59803eea0e6fd44e01532bf0162225fdcad5fe79fa5411c24bf79c6723d9e518a67f7e9c8e872868b1d801ef350f20904a5bd76a4b9a465df936aa008ca37ad0428a806166b0fc56159c58b639c15f9e5a9ab6224898406c97a76479db1556baeaf49d985840e07f4979ac8e0bfcbd5a2d551c71d2dc6e0224ee0883f9aa75df8f05e1d01564aeb6e1620bd310cdfbc934f3b015770b7b4412a41f7812c61de0607cbb2772a92452131e6fe056c8244e4fa9ef80d7d5d858e4e4f72e2d8402be8dc6f3657a273496cb71575bebe9ae4f5836834b1b4ae70873be78a4982c7a72957545d15ef2cee618019acba2802cc4e1abfdaa9d400a053c9edd12bb20df85c6303f047b4cdf9f130da4cf74a05d7728e2f70d2b81fe938ce2b810182408778187aef6679bb23b26ee4ae1c3610d9993826766c33bdd70b6d5c88f2896707408bc4e892dd9281ce4e4ac0ac6ea9ddd3357003d3ac43792b5c46e7874c020ae6c611ba2f6dac3a992f64c6cfd977f59c5f8b5deec9e0c776abf3876019afd96bc65adf989329bf685307a028e00b1ae1d5b8159ea918bd82932155cdbf15bacfe78a74d0a01fc2b270ee42bbe7b91d30aa6e32352702592f67a963b113cf45020617e30411b78efe592168dd2915c67aeb03debde069ee3aa4d5672ee5ced91e16dc278e9c569a015c984e1cf86fd367240110fae106938436b710909ee96794686388b59981ba45b2b33d977e6c897f7b5cbe84111c06e343a70d0d75926aa73ca7b0af10ce6dfd3e1bf371d865615f149c95e5be0523a793d3aba0504c8708f4d4d91f3f00191721c7b1e5c57de736f587416ec4b93031f583012b17136f75d71410fad0f1238e6e0b5859a99beeb836adb16f6089c0fa12f5e7045e3af26d8449544651406be506baf6e85222a47f293d0f893d08f952c2f3007a609d1f3399dbde709e6e8a07581e84e1e3a90b647b49aefe54a6d93d38b87c04015357bc8a73e3c6432ef6f0ca208a238cf9622a53dd2510caf1d9ddeed150f384870eb6d8f8153508cbd8045b5216640e926228591823983640a7c45354196a7ec665eb32e6784b9d3627c57b34bc7d22e3ce52236060f6031f100895359615d7aa5565dea1a451076a78bdf8b955bba86a87ee0f7169655d815599e4c86586397f9ec8b371a27502ac76b3c1309dd3b31c9a91b8df7ebd1fdf63d304f2e363e3cdda5a4ae5cef63cbeba710c427a4b30fe85ed9557f6d91aba29f1b9ef1cea9a2113f72316143b2a944c3fdec1022d1527c42a840ab587f4285bd9319fad705f5963203411dfdd1bced7479d939f7f143e7044b39dbf8ac41799d65e3fa5d0f3fe8fc18635791caa9f4008a1ff78557bf6ffb737d852ada70aa592e45180a3c3566528753365c83a8a5a3ce59f0a410e9f78d47eee96be4db65e6b25b12fc579b96249b2cdf8c3b8090318a2a60001239c070049651b9f4de6558f6edee5d03c67e5c46a166472bd921d7929fe12bf2b9e153079bd6f84caf5952d835fe84b8a71889eba36f005cbe792a22222e56de61cd6b2c9d46c938b9630bd6ad1c12cbd1aa102f53185083eda252686428a61c06d4d45a6f979e01233920e18094fffdd9ba5b29545f707a778b7681dbd50e5500b803893b90bc2404e4bd0037a615269ac20c90f5d19e4981d4f7da0e37562fe469058b7758094965c00dcdaaeceb68273a45768d488807be7a5f7e1a6895f7ce2a6c66f3794d9966b9952fe88f3d6806e5484008c1eb3fe12efbc4deb39e2c677c58e6574cca2d133ed2d2fe6097aee1dd302b04d6f251cd7cda689baa3036e851ddd9351cc5d7a91363bd12eaa01547b4881842d2b6ece34d72fbff90262c9ae9249a19f373f64876ffc5a8af197462a54fe288ee2685092f9f07fa9c3e6edfca9d1b6dddf364663bbf5f64b8d64345bf819a9321009c9a35babe2275ef4007b7cd463663798274ed2ba5c2c58620c25c31bf75b5a715a9ae19ab77dc4e85a5579b523febb4498fd029c2073339a54eec433aa463e0e6ec7020d00a15e247f043de9987e1a39c40be0447084575930c890db4e867bbd5340dd0d1f54e9ffa5186149bf5fad934a95e95fe6fe91238080e9c9ec7362bf7dd2ab681400a618fe5498e88eb61412dc59fc214beb5b994c29a7f9903551e871a88b8ac0cf651db95e6296906fc8234cb6ae1be63f8b9701fe4694130c6e66fccaa9d82b4974260844328069e6dad26963d7cb71309cc5b92ec7078d176761c9ceb4459b54cbf036bf0ec3dcbf3d302eaf0e2fa1af6f4da040365cafbfa1973f598c6e9bf64ca0f03b6c317ec4d16de02f32ca8ad7f79b5bf64fe6ead7d8e52a34b80cb86edb73f021563cd956e01566ffb874faafb95f69d2f423ec23f4873c3b9f24cf15d129b73ba19e0816d9b9a49f746ceed1ce0b4f1007331b2d864903f92276970af627c67e0e47d4b8668de0e55ef5166f44b79b5acaf68fb667450bf20df71d47d3e12f00c97d82e845b30db9b2bee285631fb52f1d984598aabc201bc79d04b15e49dfec825f7f10d9f844727556298f75e7916db5cb6b28f0441ae2be8fc26f8ef889a8c4b5dba7e604d2861da8611f2004845cd8431c889ad8f5591015a6ab23534d8ead2c8c49ba38a5a6ebe43b94dfaa0e09b1bf114be45a07ec5597da44b2ddc2be2dd9be6c1d1c2865855d8d35f7a12c48ccf06eaa239f92c74ee2b38d3ab139ee3fe18622074d7c9a310287ba0611ae451f7ecbcbcf30b860f0381ebe86975c13a4bb01cb5a4aeaf82185705c7a0585bf454ac01810a36d003b66843dc5de76bbf47aa952c5ad87e6b38e92ef6d024d9999f5a32f29c128d2700662eb579f1d050ffef54b0b00421e9e3e6a40e238dff33463b3b0f6a47a0fb6c35030b9d223f308b6165fc27eb8106048116c1a8f1260c7d0d5face2d49117f94ab037f2afff2a7652b18cc4ada0442958e53930f896372a1394e6753e77dfe31a907381e591d45570930ab7722e18a6c0102447f8ce5884d61ee322be12121bca390b289087090522ee97f3110b6083bc765ebb4dc195230e62cd309e6d24da0a7015bfff56ed936d7398c9d037a82b0235052f3eff0f5ccf8ed93d10c30efcc6743aa3cd0ad18fc3e08fbfdefb68091d78dfc26e78270546aa35289946756bd8bbcfd6a40e1e0c41fa17600c29fcac63e8bc921d4c6a2ef427237efe24fe36bed7e635d2393d6635c834490c0d1477aa62c4ac1621138fc12e9c2373bd1435d444b7aa96471813c8a8d6a9b33fe7c95a52e3bf8f23b3623e39c98d667ea86f7431783d0fd10b89c894c88bf02980695f3ffcb0a75cae9271b926dd83cd7fb5fed6244b20042e105997ef1651daa3cd0c71c26ed4d76a58affb3ecdb82fa7e9f1d5f5c145c1f35076e3bd6869e66775b3c198843e6be3c0b8b2f2d9a23cf45caab466e756d90cf3de8cc31a580047aaecfc715e05ccda1e5bf720271f61380396b56a390829d2d8216b3163987f8152b5136fdb846926c3a38226303da454e6ae69a5bcee5156c3ec077cf8aff29c4e3f3836e29a31dd25f7e333118d811828e43793cf31004a8290159cfa47a13426b15e39011a24312922f2bb3fcf1b10956293cc396d516cc4ab77d34bd3f5d66b3a9be50f058b9cc5154ab20c79b7f5500d36b0cb2b4f6a5df76a94a20bd1b6929e6b019c17a97165bcbb30da18182ae79814b8ee81f75c9de721692afe6db0665a0df9b14a534b694b680137b74d46d8d1170ee4ad0462cbbeac222a4ebf3328ffb37ee6e8513e01af23c592f981dfb225ebb4488468e136714476a079e6664c42e3e55e7d8d041f87c402029237e3613b5f7e56efda214ab266ae93553708f814bafc630860ada8f6048eef75aa9a4c8bc13cff628d6e48b13b75373c9d27115d0d24f27d84746425b9371a65d4cca6bf54f8353988c44b998fad034835ad1b5dea67d1cf415d1a106952adbd569dfa9bec02060becb3f409b2b19a3b38242e0e42553ab29556b36ee0a06d924861af270a728a1d2497debf2dabbf3675635938c9c9cd17957d5e851ae892c60908746984a0d3d6540fa62df1053ce72d8fd5495cc0cf0f95861ecc8345dce812a384ab11b790f9626614122211b5769f17a02bb4d69e076166a005873989a8f72ea85a77f08eb8f3db069577aeb6bb7aeb3ef1229b5ba533fb53ef9821fa6ef99c6422662f0563ac9d5db777db54dc3505f0d2fece522e5a32d045f13367c2fc20f9ce097c4224fbb1238bb46df8d5dd1f4e0e24467b6a464e26fba414177330fad2c6c3f47a"})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000004da40)={0x0, ""/256, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000004dc40)={0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f000004ee40)={0xfffffffffffeffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10, r11}], 0x1, "d77c10c393aa50"})
r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r12, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000004dc40)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r12, 0xd000943d, &(0x7f000004ee40)={0xfffffffffffeffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r14=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}], 0x1, "d77c10c393aa50"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000069c80)={0x2a, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x1f, "1a54630cea669f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000006ac80)={0x400, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r8}, {r10, r13}, {0x0, r15}], 0x9, "1c896d62e86a2b"})

[ 1348.600293][   T20] usb 3-1: USB disconnect, device number 19
[ 1348.616577][    T7] ath9k_htc: Failed to initialize the device
[ 1348.638975][   T20] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1348.663803][T20810] validate_nla: 26 callbacks suppressed
[ 1348.663822][T20810] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1348.703541][T20810] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:54 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4})

23:05:54 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x8}, 0x0)

23:05:54 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000040)={0x0, 0x1, [0xfd2, 0x7, 0xe3, 0x2080, 0x8, 0x20, 0x7fff, 0x3]})

23:05:54 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1348.767068][T20810] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1348.826378][T20825] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:54 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:54 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5})

23:05:54 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x9}, 0x0)

23:05:54 executing program 4:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000380))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0x1, 0x5, 0x8, 0x6}, {0x0, 0x7, 0xef, 0x1}]}, 0x10)
syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r5 = syz_open_dev$vivid(&(0x7f00000002c0), 0x0, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0xc0585605, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x5, 0x1f})
io_setup(0x90, &(0x7f00000003c0)=<r6=>0x0)
r7 = inotify_init()
io_cancel(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xffff, r7, &(0x7f0000000400)="17ee93adfc7ddc139f0af51d3449b8743aef959a0ae252698a74728300cbf56e9d6108c82f6897172dff93f0d6e3e19f82a255bdc3dd319670c7da7d6b67c4ab924ace652d0e5bc69797b41110683170f81744ec22a5fc19bcf6c62f12cbc182a008b102d0f1f4547b6701029f1a9cc7665b35d72d67b628cb280f0fc96c5075d8287b61ef786df16f6482f15a39b8867e6e88ed3c790f5366898d07b1b47b4a3380bdec57478c180c3a3d8e01308619e658fbdef3b80f5a3084d487dd340d89a5414c0c4d95d289811951541b0712ba8078ca48aa198f9c0020200864a4b38207612aca54779f030719c69f74f54ee3ed93410a80", 0xf5, 0x4, 0x0, 0x3}, &(0x7f0000000540))
r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0)
r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x46001)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="672e0f01d1640f01d166b817018ed00f01d10f019c323a000000b8010000000f01c1c4e1f9d7cdc4c285b81c1ec744240063cf0000c744240200800000c7442406000000000f011c24260f01cb", 0x4d}], 0x1, 0x4, &(0x7f0000000280), 0x0)

23:05:54 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6})

[ 1349.011544][T20847] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1349.061950][T20847] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1349.079943][T20847] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:54 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0xa}, 0x0)

[ 1349.110246][T20854] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:54 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7})

23:05:54 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:54 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0xb}, 0x0)

[ 1349.258985][   T20] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1349.263613][T20872] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:05:54 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000140)=0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x2000, 0x7, {}, {0x3, 0x0, 0x0, 0x9, 0x3, 0x5, "b7fc8924"}, 0x1, 0x3, @fd, 0xac, 0x0, r5})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:05:54 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8})

[ 1349.305939][T20872] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1349.559240][   T20] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1350.369390][   T20] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1350.378546][   T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1350.408925][   T20] usb 3-1: Product: syz
[ 1350.413121][   T20] usb 3-1: Manufacturer: syz
[ 1350.417715][   T20] usb 3-1: SerialNumber: syz
[ 1350.479649][   T20] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1351.048875][   T20] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1351.301572][   T20] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1351.307305][   T20] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1351.746832][ T1222] usb 3-1: USB disconnect, device number 20
[ 1351.755305][   T20] ath9k_htc: Failed to initialize the device
[ 1351.772392][ T1222] usb 3-1: ath9k_htc: USB layer deinitialized
23:05:57 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f00000000c0)=0x9, 0x4)
ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000012c0)={0x0, @l2tp={0x2, 0x0, @empty, 0xfffffff8}, @l2={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6, 0x1}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000300)='veth0_macvtap\x00', 0x1, 0x10000000000000, 0x1})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000018c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001ac0)={"6cc3e040ce2f7ef8cb505ce038b3ebf1", <r6=>r4, r5, {0x1, 0x7}, {0x5, 0x8}, 0x83, [0xf43, 0xd0, 0x9, 0x10000, 0x8, 0x6f, 0x2, 0x7, 0x1, 0x6, 0x2da, 0x57, 0x4, 0x10001, 0x7, 0xe830]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001bc0)={{r0}, r6, 0x8, @unused=[0x7, 0x3f, 0x7c, 0x9], @subvolid=0xff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001340))
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002bc0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000400)={r7, 0x5, 0x81, 0xfffffffffffffffe})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={r8, "9ce6910f4b5a348587f49e29ff0085ed"})
ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000000000)={0x4, 0x2, {0xfff, @struct={0x3, 0x8}, r8, 0x6aea, 0x8, 0x20, 0x4, 0x8, 0x5, @usage=0x100000000, 0x8, 0x9, [0x40, 0x3, 0x5, 0x6, 0x100]}, {0x10001, @usage=0xffffffff, 0x0, 0x6, 0x0, 0x5, 0x5, 0x7ff, 0x1, @usage=0x2, 0x3, 0x1, [0x8, 0x7fff, 0x0, 0xfffffffffffffffd, 0x456b2ce3, 0x8e63]}, {0xba4, @struct={0x100, 0x100}, 0x0, 0x5, 0x8001, 0x3, 0xffff, 0x22, 0x0, @usage=0x9, 0x9, 0x3, [0x401, 0xff, 0x7, 0x1, 0x8, 0x3f]}, {0x1ff, 0x7fffffff, 0x80}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000000140)={{r3}, 0x0, 0x10, @unused=[0xffffffffffffd17b, 0x2, 0x5, 0x9d1a], @devid=r8})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:05:57 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:57 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0xc}, 0x0)

23:05:57 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x300})

23:05:57 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x4, 0x700c2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:05:57 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000a23d49a20028bd7000fcdbdf25e2000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x8001)
ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000040)={0x6, "10f6fa3e52d0d1f4b4fb8862bda9e0d36ba525394311d764050b849346465a85", 0x20, 0x80000000, 0x80000001, 0x8, 0x3})
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r3 = openat$incfs(r0, &(0x7f00000002c0)='.log\x00', 0x1, 0x2)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000000340)={0x10e4, 0x12, 0x1, 0x70bd25, 0x25dfdbff, {0x26, 0x15, 0x5, 0x7, {0x4e21, 0x4e24, [0x9, 0x8, 0x8, 0x7], [0x3ff, 0x2, 0x4f, 0xf72], 0x0, [0x6, 0x2]}, 0x5, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "4fe0a54c9bfcdde9e8c13e57c362fb6c25b929369023ec1dabc868e32d63db232275aa3a9e3b4a04f920d83216debf5cb18300f09bf8a6c028c2fd9741d1afb45798a300473c645c26453d283d970aa2366ae6348f782f288afa40d77c09eda9f64b6a2a6c346572b9fd72797d72a39c3549325df608dc873cbae7b04009e4ce2aa332b19c6f9eec454b163667"}]}, 0x10e4}, 0x1, 0x0, 0x0, 0x4004845}, 0x20080004)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000140)={0x5, 0x0, &(0x7f00000000c0)=[0x0, <r4=>0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000180)={r4})

23:05:57 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x500})

23:05:57 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:57 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x200980)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:05:57 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x90, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x1, 0x26}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x110a, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f00000002c0)="79a43096"})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:05:57 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x3b}, 0x0)

23:05:57 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:05:57 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x600})

23:05:57 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x69}, 0x0)

23:05:57 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:05:57 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x1, 0x9, 0x4, 0x4, 0x2, {r1, r2/1000+10000}, {0x1, 0x8, 0x7, 0x3, 0x9, 0x1f, "6d1d5f6a"}, 0xffffffff, 0x4, @userptr=0x5, 0x1})

23:05:58 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x4, 0x1})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000040)={0x1, 0x6})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in=@loopback, 0x4e24, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0x0, 0x0, r2}, {0x9, 0x7, 0x40, 0x3, 0x8, 0x3, 0x40}, {0x188acf37, 0x8, 0x1, 0xfff}, 0x1, 0x6e6bbf, 0x1, 0x1, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x3c}, 0xa, @in=@multicast2, 0x3500, 0x1, 0x1, 0x9, 0x0, 0x3, 0x3}}, 0xe8)

23:05:58 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x700})

23:05:58 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffffffffff, 0x40000)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x241c0, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000140)={0x80000000, 0x7, "19b5860c80107c53c11b6719648d10f00e70edc2b0b7eafd0e2b457bc6fe8e0c", 0x5, 0x80000001, 0x0, 0x10001, 0x2, 0x4, 0x9, 0x1f, [0x7, 0x1, 0x5]})

23:05:58 executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
bind$can_j1939(r0, &(0x7f0000000200)={0x1d, 0x0, 0x1, {0x1, 0x1}, 0xfd}, 0x18)
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x20000)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0xa4381, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000140)={0x5, 0x0, '\x00', {0x0, @reserved}})
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x80, 0xa, 0x3, "55488f45ad10b1fb1716d7c65c96e17c36059b7d16e8f6094393087b4ce2fe30", 0x47504a4d})

23:05:58 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa10})

23:05:58 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1fff}, 0x0)

23:05:58 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1352.811292][ T9683] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1353.098957][ T9683] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1353.909265][ T9683] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1353.918301][ T9683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1353.927170][ T9683] usb 3-1: Product: syz
[ 1353.931463][ T9683] usb 3-1: Manufacturer: syz
[ 1353.936072][ T9683] usb 3-1: SerialNumber: syz
[ 1353.979526][ T9683] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1354.548964][ T9683] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1354.791588][ T9683] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1354.797318][ T9683] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1355.211380][ T8828] usb 3-1: USB disconnect, device number 21
[ 1355.233447][ T9683] ath9k_htc: Failed to initialize the device
[ 1355.240399][ T8828] usb 3-1: ath9k_htc: USB layer deinitialized
23:06:01 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:01 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0x80000000, 0x20})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:01 executing program 4:
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x8, 0x8})
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x4, 0x80)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000140)={{r1}, "1ceaec370e54e3c944ef5ba5c2167178b922044a23863bb515b47bedbe0eadda42be23f00bd114bce30659390bc7faeabf38baef2370218288cab5b7ef490a5e26c17dfcd1dd641c6b87fc57c5401a2273b8891a844027a9266fd6025d3dc2f163cbf8dec824f160d499012b68b30e7514818dc8f02dd0c80492ffb0a322356a0ee0a058011a7464eb9a370a728594ff6ebbdbdd0454ca6c9a1fd14e8464db49e67a58d8006c03116aeeb44edfa410e395c322baf13235ef2547b276edd27e102667a27fde4294a72562c8fd3bea6114040d870ede8541646d7e7db21320dc838eff05e014aeb73d53332eeee095fb8204600015d5197aad36f4799406ac42159a42631f3d3a5e91fab7dd5b93ae2d01a41500c94b2104b726270a0281538774ef0f72588c713290094ed6e802efb5eea624847631d531106d1b5af447148b99b5d8133ba1c026ce45bd4760bef0a12f54acb5189cc7ec2a932a4a8f7a2494888daf9dc33979467c58073bea0cecf0b18a9c016d0b067e48498186d9779ffc65d8254f6f82eba3c347aaf537428113764d7a6ffb01102ac11237b66197232159ff47d91a5181e7fe8babe9bd6c8f0d00641ebc07d1bf19659a45e7c1d9deca7ed91fccdb6eab1ba6d0adb2c36b53738481e80194ce88fcdca88c2c787ea17747cb0103ef8669e60d4d7f5e93ca0f4d4bc05c78db807830ff133f8d5ae4a171200e8bd1ad01051da27a967d9ddf57a65b756d525af77eefd5e2fa60bf0a6623cbe7d70d1f33ac6b16d92845b43fe17761b98f7973130f40c536460f14b6e072b2ebc3d37567602439cf45111cd463527a3b513de58406d831cfa4c6b0c8b6acbd1a40e4c46c7f90311aefcf0ca6eb9c4eaa92fac14a742e5b31d4f5f9f8bac6336fae8d0d3e1fc2614fa2bb92a17289bb9d921473dfa46e2b8efd61e5814ddf3937ca7740d9662d96490f8f7ba1b246941288625e5b792b0e6e61ae46fa2f8171cb5cfc852cc320eeff9c705074e754de0066e7bc083e741f38cf5e56e6a1be8165214002ae43ede776e0979efe12a1e603a7df074451d6812c1ecee3f8a65934c51834784883899beec88d6cfef48506e43146c2e036f543ea2c0d6a6f5e67cdc318ec309c8c261438abf79baa6b7b28d96fe5eba57510d89456da59d51c650561bf6f8e21ca4d94f86435efa9b1627612ebd8a98ee10d5a2e49da18c91778edbc9f717a1fe298d3e9acff595ff5b850d21a0930e57036b75824f150602e608c5e1cea86337c0538a907bcf7e8aea96d57f424bee2702f2f7daa9603a72c0b3e94b1ceb6340673b3e9d65d1fd5227d33e5ece21308c591c1c0939f09a0363ad344af4c9bd7a1f68415a94cba32ebe10b0dccca088baa0c696f8676e8f0714c2d044fd66aa8ab02bcca2d07a1d7f9170bfcd41d4213d905001f2d412fc21f6ca02dddc230892c50612c16dc3b7306a6be528220063861e924e0d589664bc8735e26b00cb46dfbdcc5f09cf079bee3e3e9b5c4acbbb99968cea16523763c21b3472adc5f6c558b825e58f3eaa56822682562d99bf00652c961d385bf1a911bd27102e499daafab8488f1ace6ba6f7073ee5a0ff968f90fb87bce496b0ac082c0a027e0393ddc508710e09ed93132d88f191bd790fd9673413b7fb81c73d75b6194302b698c1e06aaff748fc76b66faa64790d19653bc0c384258af8725d681e09774cab14f9398f7abb090a045f43c85e5653e70961006fd27580aa24575f91e51ba9ad908274d0c5b0b2b18175a792ceac019c3b60e16d791b92b1288efb7324ed67315f6a9406f4f0faea9e3e108b47e298f3b1daab53abec2da5dd66af477711a4f074dca584fe8c15126fe4ea0a773c50d6d14f3e21b15944ff2d61a7d65480af6c65bffa781dfae38042189de07b7ee09e4a4bd2b0daf7c27d7e24cc2562e3e9752e37490edb72960f2bd0f1622b7a248a67911a4ef6eb5fe175618d73d3606474096f41f24f026c5e515753cab9a100ccbdeb2ed291b66bbf8ae4e97def1d98a65b1c7e3073aa0b5a8c6253ad2748009d5f76e2c61d9484fa79082dfe763e6024cb63555e022ee5809e61b8ed1b3b27efa96c0ca5050cfa2e1017454c8e3024fc4a313153ea62e15028bf31f667645de59bb79577c8906a22ec04366b8c09b8fcff7bd81cac167164be8aa6cea183bb8871dbc3a0230e3aeb7491a1bdbf82e752b12bea03950670f9590c14b00853ee45792f7d6c2bf6e373a166f9bcdabc39b7715c0f59ee5439bf0cad03288611c2838da3505a7a00cf067c641f57f3594b0396ed00d8c3ac559624be9f280a9b15f9e8b455db5ce8db3c63e8682744868aefd1474ed69df0ba677d539fbc0f2fab302fa2f5deec5554a3c22372983d5766f79206a354b810f506060d1b7bd40ca747a6c039145dac05fcf3ae1f7abd55819e384a3f2b552852e091700f5cd4172df6b45c6eed0ae6c5a62ca69dc2ef993ecbbd6e647da30eea8d413d9046ee4ba924c5b175450be5f4a88dae654b497a2ae6b78c22356f118cd0e94bbeaad499232e28c03f6c42271ee3c21698b045fe2ec081bb6b3e5b2c184f4ac869f0141369f0c3b19bbc7915b0a540b89e09cba1f18ed7ee00432ceea874e94909c858dc48652862c988657115524df8103815ed5311fe11aa454b74fb5d449cef574a8c5cfcee3230bcc4f14222fcc3f60649bf8b8ac68e494467620b4b214de2ef53956d5c2f0f69002fe2ffd7d92539e44cbe9c10e02a1b03c9cfe596bc5003fe072de5a14364b78e4c8a9e733ac2328e6fcd81d58eefcf0496e3bb21dde5103ae4d1efe92f42892616b519c8421ee3d2cd388b3755f65eadff7745170d80614763e065eca6ec30f6341ebe65723abb7f5486f2043143e1f8ff0730810ad14b8c834a077a6d9a524fc9f40c05e9173a24e944bdee818e1e418b27b7ad457b03a3eb6dddc83c8e50603b555a28568014f830390fb431f505862f5a75d95472bf056e29979d466d55c8e3871184892fb495d211c947d0f07f659ee6e5c3dcf4c6c1bbc175c4fdc1c1dd5376607ffef64aaeda31ef0e28d845c5b335eaab2f1183fe5a3804f4ba43ea653b5ad5acb21afacd9b8d5cdeb83e69475459a1fc74dc5dbff60f3229b43074951498d6620adbb7f74752318c8e444d8b2aa210b321c9fa3d1975b76a99d4cb1bfd72201f1a360c64b16fb1b1207e292726c11c972be1daf3026878bada5bd53b03541b074a70189eaecae7f7f35a30e9173914c4728da69f7c0bcea8c46a584fa4f4f4342f2a5c08d214e84fb4acc5a7682ce49d85e8640e4c174b624ae06b192850ddd443d34de34d2a299b3690fbf37f25d29b65e6d70333d95dd565a74a116c2402f377b9cdf87f89004f1978a2c4ea7067fac037da993ef54ff208105cb19cadcaa7ea75a50cbfea92077059001cf96bb5bb4858e65eb24422a2bfb494beeb73db2b63bd2b5f905bc6dce2ba971743d3dfcef5bbe35399e3e2753171b6deb869bbeff4950463ad4921304b6e85b00a0ff61afeea22f283944f1fcecf01027c7cc51d8727d043fca5008de8d319328df8bd416cfd15600a1ecbe0b0897e591a16a8e5bc55c617b19e7958d4e55faf0ae8fad7574e6e2fcc947c2b6cbae88d73a5ac5f96b51c065cfdd14d98837eef335026d2193f5540dab1fe07924dd2ec5c81e536bc69cb3146d74ea168999e6a806d77eb54b52aa1d3a316d077679720022d9b54c621562b8a25ed9f1957903928aca51dd4c346513287037de96bb87cb8f67641020a6cb3ddfcd3d1701651e7e9445b1022ee19906a8db2ce85c0b94b6253940c4b5d511697b20854a7c53ab409514d3fae12c2997927f90d4a48837aae656858eeaa51b575632bc375b0e755b5ae3d98e4bb56c035231e1ef20d3be9267a8fe50149890d34629277e80484b4486727f42f0b163a7bf1a9bad1d338548d53a56f6c67cab0ed56fd742f29d0d2b2bc131dc20a15cc26f3c82d99498a6437d15af5a30f45b571fe210a7fba36033f8468de2990e2257c14686b2253af7c51537f3108259416b09c732e85cb64f9ad79191118976cdd99bf8218fd4dd491be9b74b25b7d53d97cbbab0a3ab850be5926f21de27cb0d22758cea20971a7453e2cd0c43830cc28662ad6b81abf1320999d93fc397618a8cb196f1eb1eb3f8a48c728aee360c166ba9428e96f81c4286144eef9f3126094ffe5977e0bf1d6a6d81c54c4e97c0b322289770285ed0d7deb06603890b94380aab55533d3d27274037046180e89b806aac72a9e67f22a3544ec25c84df7983b415715522c7cc3602823928bb14a6ab69632ce8c7568ea8c385d129b2b4fcb64a4dfdc3ef5d5f8894c7eac07b2c67db3155824039c2ef994743dfc49dfc601c949c11dffc970ccb2700491eff5f9d4deda8ca2414e4b862d651e94dc3e2d859e357c7d33a7f4147f10565ed576deaf1e6c1318670e4cecdf7aa962cc00c99d106de8e707c51345c464058698c2fe731dd008a657357850da9554feea038d71a6ea64326905ed9b7fa28ec45065f4a75f8009cac7b85045bff7c0a27d541e12a509c164904106b1d6560c99b51b493dfabadd84b0d5ac3aff437d2a29983fdd4db925f7507e3e59c66461576232fd7d117d7e86d54a35ca6bc85e8078f6282a22945d95b05f213d8c88e8f861259f1e3ffd49bbbd176730dcc17553309e73d3d3ee8f4008d508d388e190b601457cf530c7d09341ffdd3bae277a0780b30986a2d623671600c808200f04130d8368c3362bec38f6045e35151997f8c0eb0c2450c074477424769013810a8e0143f8ee62f522f0ac5d78d6d73b236410ef8caad6122440b1b088b124b0d59f05db468f1f1e9ef356b1fb167558ccd3a029b513ff323873c8bad4f4b22e0485f70fa7a422335d82b8347ae748e8cbafece7d2d2411f0222b8158ce1f45b6c730deaa7e78f60a4db9f58a1b51afd581a7c21dc1b5553898f8e227ce1691c1441526a546833688fee121f916ef364086d80e84b96383adc9d48b089b00322e10d73e9c78ee4b6bd3705322359aed167e2eb8396341e2594b7b7befe0e18e9164a4cbca9a6066d5581c5e5e276ce9f51c946ca890d9ff62d04671462513f1e7d82161a7b10317a00b1df182afd5d1c34cc61052ba4148d314e6572c7ce6d38ac23aa1b55c2ba839f00bced1f02d860a3a5a9410f5d8332c161f67246021345e73b16e75d3fb02e3637dcd0ba2d3552ad1f7edbdd0fc8d02c8eccc78ebd9679eaacc9aa0e93ee7bd489b204410259c0c2e0b4248535d9aeb0913abc58fa079f479116cb96f14e5437792104f26c6c9dce3873d787c8557847bc90b29e76291083e0dd6a94e9fb5df9e0b506734776be1b0e44efdbfb42a79af8e40fab0111823858c3859fab1641f5a445a8f639a7c3d56e5181fc6c98a61b5d880be3f9afab6b1cfe34b180eefbaa459d53e9fd4186034fe28c89f76f2c54b600044fa8eb2fe6b40c34379a7b1e8cf25e9cdede299daef6884e44adb48f1fb110f045b7763614a5f200135ba15e38fe55ccb3948fe29becc22dff29a139d3a7d5c5b097f46916a4eb2636402563d61351c3bdf4399d5d67fe207e0015e3955c3894d8da2c3975ba92e79f032bb50922832afc93c73e72ab97d5de5f6462b358ae28a45483644ec424bd12f83afcaf5ceeb38320253b03688093666d037294e929b9c6271d323cd403ba56a6d6e46b9e7e9bd913cee5f4241a828e941c23c1c2ab99fb35758b4"})
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0xc0585605, &(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0x0, 0xae3a})
r2 = syz_open_dev$cec(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x6, 0x100})

23:06:01 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb10})

23:06:01 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:01 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0xffffff1f}, 0x0)

[ 1355.776384][T21006] validate_nla: 18 callbacks suppressed
[ 1355.776404][T21006] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:01 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x5, 0x0, 0x1005, 0x7, 0x6, 0x7, 0xffffffff, 0x4eb98ad86d8595ba})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getnetconf={0x14, 0x52, 0x400, 0x279, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004860)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x0)
dup2(r6, r0)

23:06:01 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc10})

23:06:01 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x2}, 0x0)

23:06:01 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = dup2(r0, r0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x600802, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x0)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
ppoll(&(0x7f00000000c0), 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000180)={[0xfffffffffffffffb]}, 0x8)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x20, 0x1, 0x1f, 0xc})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000021c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002180)={&(0x7f0000000200)={0x1f74, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x1ec8, 0x8, 0x0, 0x1, [{0x38c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2cc, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0x2b9a}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x81, @mcast1, 0x1000}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbbf7}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}]}, {0x338, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0xd4, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0x200, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x65c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xfffff000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10c}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x598, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x7f}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc50f2aa3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xffffffff, @remote, 0x9}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x694, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x30c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x43}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x7}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xf6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}}, @WGPEER_A_ALLOWEDIPS={0x340, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0x2cc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0x2b0, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x548, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4f0, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}]}, {0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "af1e3e33bc610ca12a463ee6743f05a8d3ae0a50510e94ffa9c48f774af688c3"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "24adc6dc742730aae3e38f9a17a7a3998f5888a1588b25d4250ffd606950d67f"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x218, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x87}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8000}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_FWMARK={0x8}]}, 0x1f74}}, 0x48801)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0)={0x2, 0x1, 0x40, 0x6, 0x3})

[ 1355.851799][T21014] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1355.872441][T21006] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1355.888829][T21014] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:01 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1355.972804][T21023] Debayer A: =================  START STATUS  =================
[ 1355.993892][T21023] Debayer A: Debayer Mean Window Size: 3
[ 1356.013569][T21031] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:01 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf10})

[ 1356.032785][T21023] Debayer A: ==================  END STATUS  ==================
[ 1356.075088][T21039] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1356.104606][T21031] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1356.112776][ T1222] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1356.134660][T21039] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1356.409343][ T1222] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1356.782198][T21023] Debayer A: =================  START STATUS  =================
[ 1356.790090][T21023] Debayer A: Debayer Mean Window Size: 3
[ 1356.795720][T21023] Debayer A: ==================  END STATUS  ==================
[ 1357.278969][ T1222] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1357.288034][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1357.296880][ T1222] usb 3-1: Product: syz
[ 1357.301190][ T1222] usb 3-1: Manufacturer: syz
[ 1357.305787][ T1222] usb 3-1: SerialNumber: syz
[ 1357.360619][ T1222] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1358.008953][ T1224] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1358.251760][ T1224] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1358.257521][ T1224] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1358.674074][ T8828] usb 3-1: USB disconnect, device number 22
[ 1358.691508][ T1224] ath9k_htc: Failed to initialize the device
[ 1358.697707][ T8828] usb 3-1: ath9k_htc: USB layer deinitialized
23:06:04 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:04 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100a})

23:06:04 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x0, 0x0)
dup2(r4, r5)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000040)={0x4, 0x1, 0x4, 0x800, 0xb4bf, {0x77359400}, {0x4, 0x2, 0x4, 0x20, 0x3, 0x0, "24b96583"}, 0x100, 0x3, @userptr=0x3, 0x1000})

23:06:04 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:04 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000040)={0x101, "81305c0cc2501ee732b65f9a4d62820926661106570334a134e9f2f3f735333b", 0x3})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:04 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x3}, 0x0)

[ 1359.230806][T21074] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:04 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100b})

[ 1359.276219][T21074] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:04 executing program 0:
syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585604, &(0x7f0000000100)={0x9, 0x1, 0x0, 0x0, 0x4, 0x401})

23:06:04 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x4}, 0x0)

23:06:04 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x400, 0x0)
syz_open_dev$video4linux(&(0x7f0000000040), 0x10000, 0x400081)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0xfffffffd, 0x5, 0x2016, 0x8, 0xb, 0x7, 0x0, 0x1}})
openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = dup(r4)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f00000000c0)={0x7f, 0x1, 0x1, 0x0, 0x5, 0x5, 0x2})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, {0x80000000, 0x5, 0x1000, 0xfc}})
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:04 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:04 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100c})

[ 1359.548916][ T1224] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1359.828972][ T1224] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1360.629335][ T1224] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1360.638395][ T1224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1360.647288][ T1224] usb 3-1: Product: syz
[ 1360.651586][ T1224] usb 3-1: Manufacturer: syz
[ 1360.656181][ T1224] usb 3-1: SerialNumber: syz
[ 1360.699304][ T1224] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1361.199450][ T3263] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.205804][ T3263] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.280326][ T1224] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1361.520805][ T1224] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1361.526470][ T1224] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:06:07 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x6000000}}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:06:07 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x5}, 0x0)

23:06:07 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:07 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0xf5, 0x9, 0x4, 0x400, 0x8001, {0x77359400}, {0x3, 0x1, 0xb6, 0x1, 0x7, 0x3, "72bc1412"}, 0x8001, 0x2, @fd, 0x9, 0x0, <r1=>0xffffffffffffffff})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x7, 0x5, 0x4, 0x10000, 0x2, {0x0, 0x2710}, {0x4, 0x8, 0x54, 0x2, 0x0, 0xfa, "52ad8958"}, 0x612, 0x3, @offset=0xffff, 0x8001, 0x0, r1})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)

23:06:07 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100f})

23:06:07 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020}, 0x2020)
waitid(0x1, r0, &(0x7f0000002140), 0x1, &(0x7f00000021c0))
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x101, 0x80000000, 0x3})

[ 1362.438108][ T8828] usb 3-1: USB disconnect, device number 23
[ 1362.450137][ T1224] ath9k_htc: Failed to initialize the device
[ 1362.480150][ T8828] usb 3-1: ath9k_htc: USB layer deinitialized
23:06:07 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1011})

23:06:07 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000040)={0xfffffffc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x20})

[ 1362.531006][T21158] validate_nla: 6 callbacks suppressed
[ 1362.531024][T21158] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:07 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x6}, 0x0)

23:06:08 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000001c0)={0x0, 0x4, 0x1006, 0x1})
r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x80000001, 0x90800)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x2, 0x1, 0x4, 0x40, 0x100, {0x77359400}, {0x1, 0x21a1e01dc50294bf, 0xff, 0x19, 0x0, 0x9, "e968db8e"}, 0x0, 0x4, @planes=&(0x7f0000000080)={0x8001, 0x5, @fd=r2, 0x1}, 0x8})

[ 1362.587661][T21158] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:08 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x6000000}}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:06:08 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1012})

[ 1362.628015][T21158] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1362.666818][T21168] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:08 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000040)={0x6, 0x8, 0x4, 0x400, 0xf99f, {0x77359400}, {0x1, 0xc, 0xff, 0xff, 0x6, 0x8a, "100e8262"}, 0x3f, 0x0, @userptr=0xb9, 0x101})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:08 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x62, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000390400"/20, @ANYRES32=r3, @ANYBLOB="0000003661da2b004c0012800b000100697036746e6c00003c000280060011004e2400000500060002000000060011004e23000008000100", @ANYRES32=r3], 0x6c}}, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = dup(r6)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0)

23:06:08 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x7}, 0x0)

23:06:08 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1013})

23:06:08 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x6000000}}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

[ 1362.865516][T21188] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1362.904202][T21188] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:08 executing program 0:
syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000080)={0x1, 0xd, 0x22, "98aab2faf9d7261ee01cd8a5d3dd1392ad9e34460b0f23f0b60d1a05dc485bf97651fbcb7c52271eb6c05f0a873ca79128c40b9d9b3ad41af592e1f3", 0x33, "ac38f497963f9f3145f9fd94292c12a68eccd4df41a7a71a9961ca4cd4432529d5b8c0a9c8f175b6a2e6d109aaa72b327932f1616fda1efdf414cef2", 0xb0})
r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000140)={0x2, @vbi={0x8000, 0x8, 0x4, 0x35315258, [0x7fff], [0x2, 0x2], 0x108}})
r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = dup(r6)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_STD(r7, 0x80085617, &(0x7f0000000280))

[ 1362.930077][T21193] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1362.949426][T21188] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1362.976380][T21205] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:08 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x8}, 0x0)

23:06:08 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1014})

23:06:08 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:08 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:08 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101b})

23:06:08 executing program 4:
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:08 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x9}, 0x0)

[ 1363.162162][T21226] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1363.187860][T21226] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:08 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x7fff, 0x1, 0x3005, 0x6, 0x6, 0x8, 0x2}})
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0xa10000, 0x0, 0x1, r0, 0x0, &(0x7f0000000040)={0xa00901, 0x4, '\x00', @value64}})
r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = dup(r6)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000002c0)={0x0, @motion_det})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0x0, 0x3f, 0x2019, 0x8, 0x4, 0x8, 0x2, 0x4}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:08 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xc}, 0x0)

23:06:08 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101c})

23:06:08 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:08 executing program 0:
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)="cb2e41982c7f0b26c4a8735d7bf2374f2a61f841db46b30258c8af74c29b0bc66eb7d479d6fe9f", &(0x7f0000000080)=@udp}, 0x20)
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:08 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1110})

23:06:08 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:08 executing program 0:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@mcast1, 0x70})
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

[ 1363.511730][ T1222] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1363.852629][ T1222] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1364.759198][ T1222] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1364.768671][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1364.777809][ T1222] usb 3-1: Product: syz
[ 1364.782304][ T1222] usb 3-1: Manufacturer: syz
[ 1364.786903][ T1222] usb 3-1: SerialNumber: syz
[ 1364.829460][ T1222] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1365.398878][ T1222] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1365.640736][ T1222] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1365.646605][ T1222] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:06:11 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:11 executing program 4:
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x44000)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
fstatfs(r0, &(0x7f0000000240)=""/238)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:11 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xe}, 0x0)

23:06:11 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:11 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1210})

23:06:11 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000240)={0x9, [0x589, 0x3, 0x101, 0x80, 0x3, 0x5, 0x7, 0x8, 0x337e, 0x1, 0x1, 0x7, 0x7, 0x1000, 0x3, 0x4, 0x1, 0x4, 0x200, 0x5, 0x0, 0x0, 0x9, 0x9, 0x6, 0x7f, 0x0, 0x8, 0x3, 0x3, 0xfff, 0x4, 0x0, 0x8, 0x1, 0x2, 0x81, 0x1, 0x4, 0xfffd, 0x6, 0x4, 0x9, 0xf3, 0x1, 0x5, 0x8, 0x6], 0x3})
fgetxattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00', &(0x7f0000000140)=""/226, 0xe2)

[ 1366.567270][ T9683] usb 3-1: USB disconnect, device number 24
[ 1366.586117][ T1222] ath9k_htc: Failed to initialize the device
[ 1366.611121][ T9683] usb 3-1: ath9k_htc: USB layer deinitialized
23:06:12 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1310})

23:06:12 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='limits\x00')

23:06:12 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:12 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xf}, 0x0)

23:06:12 executing program 4:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x200200, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x40010, r3, 0x24973000)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080))
r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r7 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x18103, 0x20)
pipe(&(0x7f0000000140)={<r8=>0xffffffffffffffff})
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="440f01c266450f3880a900000000c403256d2487eddc1ec4a27d13b300800000b924080000b84f000000ba000000000f3066440f383aafe7860000410fc7760066b8c5000f00d048b800300000000000000f23c80f21f835080030000f23f8", 0x5f}], 0x1, 0x50, &(0x7f0000000280)=[@vmwrite={0x8, 0x0, 0x10, 0x0, 0x1, 0x0, 0x3, 0x0, 0x217}], 0x1)

23:06:12 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:12 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1410})

23:06:12 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x60}, 0x0)

23:06:12 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:12 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x38200)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x7, {0xd7f0, 0x3ff, 0x1, 0x5}})

23:06:12 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x8c80, 0x0)
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000200)={0x0, 0x100, @status={[0x0, 0x6, 0x5, 0x7fffffff, 0x4, 0x7f]}, [0x4, 0x8, 0xbca, 0x2, 0x193, 0xeca8, 0x5, 0x80000001, 0x49, 0x3, 0x100, 0x318ed59c, 0xedf9, 0x401, 0x7ff, 0x1000, 0x4, 0x10000, 0xb235, 0xa9b, 0x8, 0x8001, 0x2, 0x3, 0xf092, 0x8, 0x6, 0x8001, 0x1ff, 0x1, 0x7fff, 0x80, 0xc00000000, 0x9, 0x7, 0x7, 0x20, 0x7ff, 0x4, 0xd82, 0x1, 0xfffffffffffff000, 0x1, 0x7, 0x3, 0x0, 0x3, 0x4, 0x544, 0x9, 0xfffffffffffffffa, 0x100, 0x10000, 0x0, 0x8, 0x81, 0x1ff, 0x5dd23ed8, 0x400, 0x7, 0x7fff, 0x0, 0x9, 0x3]})
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000140)={0x0, @reserved})

23:06:12 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1b10})

23:06:12 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:12 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x2})

23:06:12 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xf0}, 0x0)

23:06:12 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c10})

23:06:12 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1010080, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@blksize={'blksize', 0x3d, 0x1600}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7fff}}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+)'}}, {@euid_lt={'euid<', 0xee01}}, {@measure}, {@hash}, {@appraise}]}})
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0xffffffffffff8000)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x3})

[ 1367.188871][ T9683] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1367.489188][ T9683] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1368.289248][ T9683] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1368.298402][ T9683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1368.306677][ T9683] usb 3-1: Product: syz
[ 1368.310939][ T9683] usb 3-1: Manufacturer: syz
[ 1368.315544][ T9683] usb 3-1: SerialNumber: syz
[ 1368.359513][ T9683] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1368.928844][ T9683] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1369.170623][ T9683] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1369.176278][ T9683] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:06:15 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:15 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x78, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x78}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'macvlan0\x00'}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'bond0\x00'}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x401}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000d0)
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:15 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x300}, 0x0)

23:06:15 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:15 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff00})

23:06:15 executing program 4:
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000040)={0x5, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000), 0x0, 0x80000, 0x0, <r0=>0xffffffffffffffff})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x9, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x4})

[ 1370.101547][T20268] usb 3-1: USB disconnect, device number 25
[ 1370.110223][ T9683] ath9k_htc: Failed to initialize the device
[ 1370.124868][T20268] usb 3-1: ath9k_htc: USB layer deinitialized
23:06:15 executing program 4:
r0 = socket$inet_sctp(0x2, 0xcd80a9da9b0fdcea, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x7fffffff, 0x7, 0x2, 0x7, 0x7, 0xbb21, 0x6, 0x3, 0x7, 0x19f, 0x2, 0x6, 0x2, 0x8, 0x6]}, &(0x7f0000000040)=0x100)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

[ 1370.189410][T21435] validate_nla: 26 callbacks suppressed
[ 1370.189429][T21435] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:15 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x4fd}, 0x0)

23:06:15 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000})

23:06:15 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x687, 0x400, 0x3001, 0x0, 0xb, 0x7, 0x0, 0x7}})
pipe2(&(0x7f0000000040), 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x761c42, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_io_uring_complete(0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0xc0585604, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x7, 0x8c84, 0x4})

[ 1370.243290][T21435] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:15 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:15 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0xfffffffffffffffd)

[ 1370.304068][T21435] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1370.341458][T21443] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:15 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:15 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000})

23:06:15 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x1c7002)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:15 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x500}, 0x0)

23:06:15 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3000000})

[ 1370.544084][T21470] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1370.582178][T21470] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:16 executing program 4:
fcntl$getflags(0xffffffffffffffff, 0x408)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0xcaf5, 0x6, &(0x7f0000000080)="d641a0b561361ae58665dfccf020239b7bad327e999d48ea0f88f92047006a5ea0be7092da9baedf7a289888d7a319c63723d1ca7fc453ec693f8319687156feae1b0646f64a6198c63d585d5c5d2b49c084ff804d1bfb6e7cc176755924636164735997fa29ef635ec642678a5d7e"})
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x181e41, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x5)

[ 1370.618540][T21470] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1370.635632][T21479] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:16 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:16 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000})

23:06:16 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x600}, 0x0)

23:06:16 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000300)={0x0, 0x3, 0x80000001, 0x0, 0x3})
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000003c0)="ba2000ec3ea998a54b4b0fe40c64360fc7bc000066b98a04000066b80b00000066ba000000000fb63666d9eb6467f20f3266b8250000000f23c80f21f866350c00c0000f23f80f20c0b335000000519c0f2ac00f013e0010ee", 0x59}], 0x1, 0x1e, 0x0, 0x0)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000280)={0x6, [0x9, 0x4, 0x101, 0x4, 0x90, 0x8, 0x80, 0x7, 0x6, 0xec3, 0xfc3c, 0x9, 0x6, 0x401, 0x1000, 0x6, 0x1, 0x5, 0x5, 0x7, 0xb3, 0x1, 0x5a0a, 0x401, 0x7f, 0x7c2, 0x5, 0x0, 0xfffe, 0x101, 0x0, 0x8001, 0x1, 0xfff8, 0x7fff, 0x3, 0x4, 0x401, 0x9, 0x3f, 0xff, 0x6, 0x8, 0x1ff, 0x3f, 0x0, 0xffff, 0x77f]})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r5 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x800)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r5, 0xc0c85666, &(0x7f0000000140)={{0x0, @name="62422154fbc16ddca65f50b1b2ea8635b45052e87462edddcb25442905b9311e"}, "d9cd873d331fa7e4a7146e0547e4ec87a12922812727396af47b93d8a384c0a8"})
r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = dup(r6)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r7, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x347, 0x80, 0x400, 0x4}})

[ 1370.728917][T20268] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1370.777732][T21491] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1370.810381][T21491] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1371.019000][T20268] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1371.839369][T20268] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1371.848984][T20268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1371.857033][T20268] usb 3-1: Product: syz
[ 1371.862310][T20268] usb 3-1: Manufacturer: syz
[ 1371.867018][T20268] usb 3-1: SerialNumber: syz
[ 1371.909413][T20268] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1372.478924][T20268] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1372.722416][T20268] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1372.728097][T20268] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:06:19 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:19 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5000000})

23:06:19 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004da40)={0x0, ""/256, <r1=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004dc40)={0x0, ""/256, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004ee40)={0xfffffffffffeffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r2}], 0x1, "d77c10c393aa50"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000080)={{r1, 0x9595, 0x9, 0x100, 0x5, 0x9, 0x4, 0x8, 0x8, 0xaa0a, 0xfffffffd, 0x40, 0x83f9, 0x5, 0x6}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x0)

23:06:19 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:19 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x700}, 0x0)

23:06:19 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffffe, 0x60142)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

[ 1373.633314][    T7] usb 3-1: USB disconnect, device number 26
[ 1373.650371][T20268] ath9k_htc: Failed to initialize the device
[ 1373.657834][    T7] usb 3-1: ath9k_htc: USB layer deinitialized
23:06:19 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:19 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000280)={0x0, @src_change})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="66b9040b00000f32ba4100ecf080307067660f3a6318000f01dfba2100edf367f20f018607000000bad104edb83e0a8ee066b9800000c00f326635002000000f30", 0x41}], 0x1, 0x40, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}, @dstype0={0x6, 0xd}], 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = dup(r6)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000140)={0x2, 0x5, 0x1})

23:06:19 executing program 4:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8)
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x4})

23:06:19 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6000000})

23:06:19 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x900}, 0x0)

23:06:19 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:19 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:19 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7000000})

23:06:19 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:19 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xc00}, 0x0)

23:06:19 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xc2800, 0x0)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xffffffff, 0x6})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:19 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000})

23:06:19 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1374.239713][    T7] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1374.519314][    T7] usb 3-1: too many configurations: 186, using maximum allowed: 8
23:06:20 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x80000001, 0x6, 0x201f, 0x5, 0x3, 0x6, 0x1, 0x1}})

23:06:20 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa100000})

23:06:20 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xe00}, 0x0)

23:06:20 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1375.328926][    T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1375.338517][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1375.347745][    T7] usb 3-1: Product: syz
[ 1375.352134][    T7] usb 3-1: Manufacturer: syz
[ 1375.356819][    T7] usb 3-1: SerialNumber: syz
[ 1375.399376][    T7] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1375.968925][    T7] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1376.202230][    T7] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1376.208109][    T7] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:06:22 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:22 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb100000})

23:06:22 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x12001)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x3, 0x5, 0x3001, 0x2, 0x4, 0x1, 0x2, 0x6}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x59, 0x1, 0x0, 0x3})

23:06:22 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000680))
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000002940)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000400)={<r6=>r3, 0x5, 0x81, 0xfffffffffffffffe})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={r5, "9ce6910f4b5a348587f49e29ff0085ed"})
ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000000)={0x4, 0x2, {0xfff, @struct={0x3, 0x8}, r5, 0x6aea, 0x8, 0x20, 0x4, 0x8, 0x5, @usage=0x100000000, 0x8, 0x9, [0x40, 0x3, 0x5, 0x6, 0x100]}, {0x10001, @usage=0xffffffff, 0x0, 0x6, 0x0, 0x5, 0x5, 0x7ff, 0x1, @usage=0x2, 0x3, 0x1, [0x8, 0x7fff, 0x0, 0xfffffffffffffffd, 0x456b2ce3, 0x8e63]}, {0xba4, @struct={0x100, 0x100}, 0x0, 0x5, 0x8001, 0x3, 0xffff, 0x22, 0x0, @usage=0x9, 0x9, 0x3, [0x401, 0xff, 0x7, 0x1, 0x8, 0x3f]}, {0x1ff, 0x7fffffff, 0x80}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x1, 0x700, 0x8, 0x0, {{0xc, 0x4, 0x3, 0xa, 0x30, 0x68, 0x0, 0x3, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp={0x44, 0x1c, 0xf3, 0x0, 0x0, [0x9, 0x305, 0xff, 0x7, 0x9, 0x10000]}]}}}}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000001c0)={r5, 0x5, 0xac, 0x1})
ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000140)={0x1, 0x80000000})
ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000001940)={r5, "ab1ecf084c072de6d67a09fc818a95d2"})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x3})
r7 = creat(&(0x7f0000000040)='./file0\x00', 0xd1)
ioctl$VIDIOC_G_AUDOUT(r7, 0x80345631, &(0x7f0000000080))

23:06:22 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:22 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xf00}, 0x0)

[ 1377.123273][T20268] usb 3-1: USB disconnect, device number 27
[ 1377.145070][    T7] ath9k_htc: Failed to initialize the device
[ 1377.174127][T20268] usb 3-1: ath9k_htc: USB layer deinitialized
23:06:22 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x515400)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x68, 0xc9})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data=[0x1, 0x0, 0xffff, 0x0, 0x4, 0x5, 0x9, 0x1, 0x9, 0x1, 0x7, 0x3, 0xffffffff, 0x1, 0x800, 0x0, 0x10022, 0x9, 0x1081126a, 0x149, 0x1, 0x8, 0x401, 0x1a, 0x1e, 0x1, 0x7ce, 0x7, 0x3f, 0xfd, 0x3, 0xfffffffc]})

[ 1377.223566][T21651] validate_nla: 26 callbacks suppressed
[ 1377.223585][T21651] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:22 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x1f00}, 0x0)

23:06:22 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc100000})

[ 1377.265005][T21651] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:22 executing program 2:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:22 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x5, @win={{0x9, 0x94, 0xb8a, 0x5}, 0x0, 0x5, &(0x7f0000000040)={{0x3, 0x6, 0x4, 0x400}}, 0x3ff, &(0x7f0000000140)="dcf6067a1662d69c9a1640e30dc00c19a2a4388895279d1d47974b3f5641d1af9e1c962374d51a2f7d8b5229e5f21271d019ee9e615335446780fcba5f56ed62535b8267fc41135693a4aa2d75c0ed4c8c8024a36828ff0518ef246e38a7737eaa231037846194eaf8b74532aa7baeef80780258e81e2aa2f057b90be8113b403451752c7c0011238a90d016b5d016ca0c6758788b112f62f954ff00626eea5691f94532d64dae747951a9bb958e87f91649ef776c508d91e726", 0x6b}})
openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000000c0)={0x0, 0xffff, 0x2004, 0x1})
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x8, "2e404e237812afd461fdaa98df490d0bfdef5598b8eb6fb69cec95e492b8f31c", 0x2})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

[ 1377.315660][T21651] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1377.351495][T21659] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:22 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x80)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:22 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x3f00}, 0x0)

23:06:22 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:22 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf100000})

23:06:22 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000140)={0x15d372e6b5c9694e, @capture={0x1000, 0x1, {0x6, 0x9}, 0xeb, 0xfffffffd}})

23:06:22 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11100000})

[ 1377.515028][T21679] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1377.536307][T21679] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1377.568429][T21679] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1377.604829][T21685] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:23 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12100000})

23:06:23 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x6000}, 0x0)

23:06:23 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:23 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x4000000, 0x1, 0x0, 0x0, 0x0, 0x2})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x51b7f000)

[ 1377.751651][ T1222] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1377.789730][T21711] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1377.821571][T21711] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1378.068975][ T1222] usb 3-1: too many configurations: 186, using maximum allowed: 8
[ 1378.948967][ T1222] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1378.958151][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1378.967201][ T1222] usb 3-1: Product: syz
[ 1378.972046][ T1222] usb 3-1: Manufacturer: syz
[ 1378.977978][ T1222] usb 3-1: SerialNumber: syz
[ 1379.019528][ T1222] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1379.628914][ T1222] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1379.871152][ T1222] usb 3-1: ath9k_htc: Invalid TX pipe: 0
[ 1379.876851][ T1222] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
23:06:26 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x700}}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:06:26 executing program 4:
clone3(&(0x7f0000000280)={0x4000000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x23}, &(0x7f0000000140)=""/191, 0xbf, &(0x7f0000000200)=""/11, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58)
flock(r0, 0x4)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r2 = syz_open_dev$audion(&(0x7f0000000300), 0xbbe, 0x20000)
ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000340))

23:06:26 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x800)
ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000180)={0x1, 0x0, {0x7, 0x80, 0x97, 0x3}})
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x9e0000, 0x2, 0xd7, r0, 0x0, &(0x7f0000000080)={0xa00906, 0x7, '\x00', @p_u16=&(0x7f0000000040)=0x8001}})
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
symlinkat(&(0x7f00000003c0)='./file0\x00', r3, &(0x7f0000000400)='./file0\x00')
ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f00000001c0))
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000280)='./file0\x00', 0x501080, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f00000002c0)="66baf80cb8fd7f2e8bef66bafc0cb000ee264e0fc76500f30f096667450f01df66baa000ec430fc7b5000001008f6840b631a50f0826410f01c9b936020000b8ea230000ba000000000f30", 0x4b}], 0x1, 0x1, &(0x7f0000000380)=[@cstype3={0x5, 0xc}], 0x1)

23:06:26 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x13100000})

23:06:26 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xf000}, 0x0)

23:06:26 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1380.812009][ T1224] usb 3-1: USB disconnect, device number 28
[ 1380.825470][ T1222] ath9k_htc: Failed to initialize the device
[ 1380.834610][ T1224] usb 3-1: ath9k_htc: USB layer deinitialized
23:06:26 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14100000})

23:06:26 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xfd04}, 0x0)

23:06:26 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:26 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x700}}}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0)

23:06:26 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1b100000})

23:06:26 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x30000}, 0x0)

23:06:26 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:26 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000040)={0x2, 0x5, 0x7, 0x5a74, 0x800001f, 0x0, 0x10001})

23:06:26 executing program 2 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:26 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c100000})

23:06:26 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000040)={0x0, 0x1, 0x7ff, 0x0, 0x3, 0x0, 0x200})
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x7fffffff)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x2, 0x81, 0x1, 0x2, 0x3f, 0x425, 0x7fffffff, 0x9, 0x3, 0x7, 0xbc1, 0x4, 0x0, 0x2, 0x19, 0x0, {0x8, 0xffffffff}, 0x0, 0x5}})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = dup(r6)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000004c0)={0x0, 0x0, @ioapic})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000080)={0x0, {0x0, 0x4}})

23:06:26 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:26 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x102, 0x0, {0x4, 0x4, 0x4, 0x7}})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r2, 0xaeaa7000)

23:06:26 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x34000}, 0x0)

[ 1381.313577][T21781] FAULT_INJECTION: forcing a failure.
[ 1381.313577][T21781] name failslab, interval 1, probability 0, space 0, times 0
[ 1381.365914][T21781] CPU: 1 PID: 21781 Comm: syz-executor.2 Tainted: G        W         5.13.0-syzkaller #0
[ 1381.375848][T21781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1381.385911][T21781] Call Trace:
[ 1381.389342][T21781]  dump_stack_lvl+0xcd/0x134
[ 1381.393955][T21781]  should_fail.cold+0x5/0xa
[ 1381.398486][T21781]  ? tomoyo_realpath_from_path+0xc3/0x620
[ 1381.404225][T21781]  should_failslab+0x5/0x10
[ 1381.408750][T21781]  __kmalloc+0x72/0x330
[ 1381.412921][T21781]  tomoyo_realpath_from_path+0xc3/0x620
[ 1381.418502][T21781]  ? tomoyo_profile+0x42/0x50
[ 1381.423199][T21781]  tomoyo_path_number_perm+0x1d5/0x590
[ 1381.428679][T21781]  ? tomoyo_path_number_perm+0x18d/0x590
[ 1381.434332][T21781]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1381.440260][T21781]  ? lock_downgrade+0x6e0/0x6e0
[ 1381.445135][T21781]  ? lock_acquire+0x442/0x510
[ 1381.449836][T21781]  ? lock_release+0x522/0x720
[ 1381.454612][T21781]  ? __context_tracking_exit+0xb8/0xe0
[ 1381.460095][T21781]  ? __fget_files+0x288/0x3d0
[ 1381.464800][T21781]  security_file_ioctl+0x50/0xb0
[ 1381.469760][T21781]  __x64_sys_ioctl+0xb3/0x200
[ 1381.474455][T21781]  do_syscall_64+0x35/0xb0
[ 1381.478884][T21781]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1381.484798][T21781] RIP: 0033:0x4665d9
[ 1381.488700][T21781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
23:06:26 executing program 4:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000140)={0x1})
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r6 = signalfd(r5, &(0x7f0000000040)={[0x1]}, 0x8)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000080)={0x0, 0x3ff, 0x201a})
ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f00000000c0)={0x0, 0x1, @start={0xd}})

23:06:26 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:26 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff000000})

[ 1381.508851][T21781] RSP: 002b:00007f2707993188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1381.517276][T21781] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1381.525257][T21781] RDX: 0000000020000100 RSI: 00000000c040564a RDI: 0000000000000003
[ 1381.533239][T21781] RBP: 00007f27079931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1381.541222][T21781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1381.549210][T21781] R13: 0000000000a9fb1f R14: 00007f2707993300 R15: 0000000000022000
[ 1381.576539][T21781] ERROR: Out of memory at tomoyo_realpath_from_path.
23:06:27 executing program 2 (fault-call:1 fault-nth:1):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:27 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x2, 0xfffa, 0x7, 0x9}}, 0x20800)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x2})

23:06:27 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:27 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x101, 0xffff], 0x2, 0x800, 0x0, <r1=>0xffffffffffffffff})
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x200, 0x0, 0x300e, 0x7, 0x8, 0x8, 0x2, 0x6}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:27 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x105000)
r1 = dup3(r0, r0, 0x80000)
ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040))
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:27 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x400300}, 0x0)

[ 1381.782018][T21834] FAULT_INJECTION: forcing a failure.
[ 1381.782018][T21834] name failslab, interval 1, probability 0, space 0, times 0
23:06:27 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb, 0x13, r0, 0xef7ed000)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x400040)
ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x0, "e74af881375d4b7b1542400772f188b3e34533794bea0fa7fdc10210b84bebfb", 0x2, 0x6, 0x1, 0x1, 0x2})

[ 1381.843284][T21834] CPU: 0 PID: 21834 Comm: syz-executor.2 Tainted: G        W         5.13.0-syzkaller #0
[ 1381.853579][T21834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1381.863642][T21834] Call Trace:
[ 1381.866925][T21834]  dump_stack_lvl+0xcd/0x134
[ 1381.871651][T21834]  should_fail.cold+0x5/0xa
[ 1381.876181][T21834]  ? tomoyo_encode2.part.0+0xe9/0x3a0
[ 1381.881579][T21834]  should_failslab+0x5/0x10
[ 1381.886101][T21834]  __kmalloc+0x72/0x330
[ 1381.890277][T21834]  tomoyo_encode2.part.0+0xe9/0x3a0
[ 1381.895494][T21834]  tomoyo_encode+0x28/0x50
[ 1381.899919][T21834]  tomoyo_realpath_from_path+0x186/0x620
[ 1381.905571][T21834]  tomoyo_path_number_perm+0x1d5/0x590
[ 1381.911051][T21834]  ? tomoyo_path_number_perm+0x18d/0x590
[ 1381.916716][T21834]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1381.922586][T21834]  ? lock_downgrade+0x6e0/0x6e0
[ 1381.927459][T21834]  ? lock_acquire+0x442/0x510
[ 1381.932129][T21834]  ? lock_release+0x522/0x720
[ 1381.936799][T21834]  ? __context_tracking_exit+0xb8/0xe0
[ 1381.942283][T21834]  ? __fget_files+0x288/0x3d0
[ 1381.946959][T21834]  security_file_ioctl+0x50/0xb0
[ 1381.951924][T21834]  __x64_sys_ioctl+0xb3/0x200
[ 1381.956688][T21834]  do_syscall_64+0x35/0xb0
[ 1381.961099][T21834]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1381.966988][T21834] RIP: 0033:0x4665d9
[ 1381.970884][T21834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
23:06:27 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xf0ffff}, 0x0)

23:06:27 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000080)={0x0, 0xff, 0x6, '\x00', &(0x7f0000000040)})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

[ 1381.990775][T21834] RSP: 002b:00007f2707993188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1381.999265][T21834] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1382.007234][T21834] RDX: 0000000020000100 RSI: 00000000c040564a RDI: 0000000000000003
[ 1382.015207][T21834] RBP: 00007f27079931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1382.023167][T21834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1382.031243][T21834] R13: 0000000000a9fb1f R14: 00007f2707993300 R15: 0000000000022000
23:06:27 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:27 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x8000, 0x2, 0x0, 0x0, 0xffffffff})

23:06:27 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x7, 0xb, 0x4, 0x4, 0x5, {}, {0x5, 0xc, 0xff, 0xcc, 0x7, 0x7, "958abe5b"}, 0x5, 0x1, @fd=r1, 0x100, 0x0, r3})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

[ 1382.282688][T21834] ERROR: Out of memory at tomoyo_realpath_from_path.
23:06:27 executing program 2 (fault-call:1 fault-nth:2):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:27 executing program 1:
r0 = eventfd2(0x1, 0x80800)
preadv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/181, 0xb5}], 0x1, 0xfffffffd, 0x200)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000080)={0x2, 0x0, 0x100f, 0x7, 0x3, 0x10000, 0x3})
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x0)
r3 = dup2(0xffffffffffffffff, r2)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
dup(r4)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000400)={0x0, 0x0, {0x6, 0xcac1, 0x2009, 0x5, 0x3, 0x4, 0x4a135d7eb5f0cdf5, 0x5}})
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010101}, 0x10)
r7 = syz_open_dev$radio(&(0x7f00000002c0), 0x0, 0x2)
ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000000300)={0x40000000, 0x3, "2a07e93465311219784f262369e7fdc324cb7188b129bf124ffd6928ea778b97", 0x3, 0xc42f, 0x66d6, 0x2, 0x4, 0x8eaf, 0x0, 0x8, [0x8, 0x7, 0x8a90, 0x4875fa8]})

23:06:27 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x1000000}, 0x0)

23:06:27 executing program 4:
renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4)
linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1800)
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:27 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:27 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x62ff, 0x8, 0x4, 0x0, 0x1, {0x0, 0xea60}, {0x3, 0x2, 0x5, 0x81, 0x6, 0xfd, "740d1890"}, 0xfffffffc, 0x1, @userptr=0x400, 0x40})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

[ 1382.407469][T21896] validate_nla: 29 callbacks suppressed
[ 1382.407488][T21896] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:27 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0xd588a9dbc54d59d1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000, 0x30, r1, 0x8b109000)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

[ 1382.454173][T21896] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1382.466816][T21907] FAULT_INJECTION: forcing a failure.
[ 1382.466816][T21907] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1382.497534][T21896] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:27 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x2000000}, 0x0)

23:06:27 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffff0d7, 0x1)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x8000, 0x0, 0x4, 0x10000, 0x7, {0x0, 0xea60}, {0x3, 0xc, 0x7f, 0xe1, 0x9, 0x8, "0ccb939a"}, 0x7, 0x1, @userptr=0x7, 0x19e8})
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x100000, 0x5, {0x0, 0x2710}, {0x4, 0x1, 0x74, 0x6, 0x81, 0x0, "9490625f"}, 0x5, 0x6, @offset=0x4d7, 0x84a0})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

[ 1382.528440][T21911] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1382.584068][T21907] CPU: 0 PID: 21907 Comm: syz-executor.2 Tainted: G        W         5.13.0-syzkaller #0
[ 1382.593924][T21907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1382.604855][T21907] Call Trace:
[ 1382.608135][T21907]  dump_stack_lvl+0xcd/0x134
[ 1382.612728][T21907]  should_fail.cold+0x5/0xa
[ 1382.617229][T21907]  _copy_from_user+0x2c/0x180
[ 1382.621921][T21907]  video_usercopy+0xbad/0x16b0
[ 1382.626701][T21907]  ? subdev_do_ioctl+0x2c30/0x2c30
[ 1382.631837][T21907]  ? v4l_enumstd+0x60/0x60
[ 1382.636255][T21907]  ? lock_downgrade+0x6e0/0x6e0
[ 1382.641112][T21907]  ? lock_release+0x522/0x720
[ 1382.645788][T21907]  ? u132_hcd_start.cold+0xa5a/0x12b6
[ 1382.651166][T21907]  ? __fget_files+0x288/0x3d0
[ 1382.655861][T21907]  v4l2_ioctl+0x1b3/0x250
[ 1382.660185][T21907]  ? v4l2_prio_init+0x20/0x20
[ 1382.664946][T21907]  __x64_sys_ioctl+0x193/0x200
[ 1382.669719][T21907]  do_syscall_64+0x35/0xb0
[ 1382.674235][T21907]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1382.680218][T21907] RIP: 0033:0x4665d9
[ 1382.684105][T21907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1382.703890][T21907] RSP: 002b:00007f2707993188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1382.712835][T21907] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1382.720973][T21907] RDX: 0000000020000100 RSI: 00000000c040564a RDI: 0000000000000003
23:06:27 executing program 4:
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{0x1, 0x100000, 0x3, 0x9, 0x0, 0x9, 0xba, 0x9, 0x20, 0x3, 0x0, 0x80}, {0x1, 0x0, 0xb, 0x2, 0x49, 0x9, 0x7, 0x1, 0x0, 0x8, 0xc4, 0x7f}, {0x3000, 0x5000, 0xd, 0x1, 0x6, 0x1f, 0x4, 0x2, 0xff, 0xfd, 0x5, 0x1}, {0x6000, 0x10000, 0x9, 0x8, 0x7f, 0x0, 0x2f, 0x3, 0x30, 0x7, 0x7}, {0x1, 0x2000, 0xf, 0x2, 0xff, 0x9, 0x6, 0xeb, 0x0, 0x3, 0x8d, 0x7}, {0x10000, 0xd000, 0xf, 0x0, 0x6, 0x6, 0xd2, 0xd, 0x25, 0x43, 0x4, 0x6}, {0x1, 0x10000, 0xa, 0x1, 0xa9, 0x1f, 0xd0, 0x0, 0x75, 0x9a, 0x40, 0x7f}, {0x4, 0x2000, 0x0, 0x1, 0x5, 0x2, 0x6, 0x81, 0x9, 0x50, 0x8, 0xe0}, {0x0, 0x9e25}, {0x100000, 0xc95}, 0x1, 0x0, 0x0, 0x2000, 0xd, 0x8c00, 0x2000, [0x20, 0xffffffff, 0x1, 0x4]})
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000280)={"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"})

23:06:28 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)={0x0, @src_change})

[ 1382.729113][T21907] RBP: 00007f27079931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1382.737073][T21907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1382.745032][T21907] R13: 0000000000a9fb1f R14: 00007f2707993300 R15: 0000000000022000
23:06:28 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1382.884174][T21931] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1382.896753][T21931] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1382.909275][T21931] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1382.917828][T21932] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:28 executing program 2 (fault-call:1 fault-nth:3):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:28 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x3000000}, 0x0)

23:06:28 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
syz_open_dev$video4linux(&(0x7f0000000040), 0x1000000008000, 0x400400)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000000c0)={0x6d800000, "b4edd0aa0bfa7bf10c198114ff865dd6ca97bacff2d309c6d504824f391c2a53", 0x2})
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0)

23:06:28 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x8000, 0x800)
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000140)={0x5000, 0xc000})
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000040)={0xffffffff, "2329e0ced5367be9fc003283fb1c52d1e063198549ca4454414c446344837357", 0x1, 0x3, 0x2, 0x80000, 0x5090910, 0x2})

23:06:28 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1383.000401][T21940] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1383.017749][T21940] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:28 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x5, 0x5, 0x4, 0x400, 0x9, {r1, r2/1000+60000}, {0x4, 0xb, 0x9, 0xb, 0x3, 0x6, "da095ef3"}, 0x101, 0x2, @userptr=0x7ff, 0x1})
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000180)={0xffffffff, "cdff75baec2b4de2200e48fde2602da84726ca63d8f1ef84871abc166dcbedac", 0x1, 0x2, 0xa0, 0x2, 0x2, 0x2, 0x8b8, 0x9})

[ 1383.047598][T21946] FAULT_INJECTION: forcing a failure.
[ 1383.047598][T21946] name fail_usercopy, interval 1, probability 0, space 0, times 0
23:06:28 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:28 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x4000000}, 0x0)

[ 1383.152842][T21946] CPU: 1 PID: 21946 Comm: syz-executor.2 Tainted: G        W         5.13.0-syzkaller #0
[ 1383.162687][T21946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1383.172764][T21946] Call Trace:
[ 1383.176047][T21946]  dump_stack_lvl+0xcd/0x134
[ 1383.180837][T21946]  should_fail.cold+0x5/0xa
[ 1383.185380][T21946]  _copy_to_user+0x2c/0x150
[ 1383.189896][T21946]  video_usercopy+0xd82/0x16b0
[ 1383.194679][T21946]  ? subdev_do_ioctl+0x2c30/0x2c30
[ 1383.200087][T21946]  ? v4l_enumstd+0x60/0x60
[ 1383.204520][T21946]  ? lock_release+0x522/0x720
[ 1383.209204][T21946]  ? u132_hcd_start.cold+0xa5a/0x12b6
[ 1383.214604][T21946]  ? __fget_files+0x288/0x3d0
[ 1383.219304][T21946]  v4l2_ioctl+0x1b3/0x250
[ 1383.223656][T21946]  ? v4l2_prio_init+0x20/0x20
[ 1383.228350][T21946]  __x64_sys_ioctl+0x193/0x200
[ 1383.233126][T21946]  do_syscall_64+0x35/0xb0
[ 1383.237809][T21946]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1383.243720][T21946] RIP: 0033:0x4665d9
[ 1383.247637][T21946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1383.267253][T21946] RSP: 002b:00007f2707993188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1383.275674][T21946] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1383.283664][T21946] RDX: 0000000020000100 RSI: 00000000c040564a RDI: 0000000000000003
[ 1383.291727][T21946] RBP: 00007f27079931d0 R08: 0000000000000000 R09: 0000000000000000
23:06:28 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x10001})

23:06:28 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x2, 0xd, 0x4, 0x400, 0x10000, {0x0, 0xea60}, {0x3, 0xc, 0x7f, 0x9, 0x1, 0x8, "0620cdc6"}, 0x400, 0x1, @offset=0x1, 0xffff})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_open_dev$video4linux(&(0x7f00000000c0), 0x8, 0x600)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000040)={0xbd2, 0x9, 0x4, 0x4000, 0x2, {0x77359400}, {0x1, 0x0, 0x3f, 0x2, 0x20, 0xfc, "39f004d3"}, 0xffffff7a, 0x2, @offset=0x81, 0x47be})

[ 1383.299746][T21946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1383.307923][T21946] R13: 0000000000a9fb1f R14: 00007f2707993300 R15: 0000000000022000
23:06:29 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x80842, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x400482, 0x0)
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = dup(r3)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000280)={0x1ff, 0x1, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000180)={0x1000, [0x7f, 0x2, 0x6, 0x9c45, 0x6, 0xff81, 0x0, 0xbc, 0x1, 0x5ae, 0x5, 0x5, 0xff, 0x101, 0x1, 0x8001, 0x4, 0x1, 0xfffb, 0x0, 0x6, 0x6, 0x35, 0x4, 0x7, 0x0, 0x6, 0x100, 0xd7c4, 0x401, 0x0, 0x101, 0x9, 0x2, 0x8000, 0x80, 0x2, 0x4, 0x7, 0x8, 0x1, 0x400, 0x7, 0x5, 0x4, 0xe6e1, 0x9, 0x4], 0xa})
syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000140)={0x9, 0x4, 0x9, 0x80000, r4})
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x3, 0x0, '\x00', &(0x7f0000000040)=0xee})

23:06:29 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x360})
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000080))
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000140)={0xca96, 0xed7, 0x2b40000, {0x4, 0x81}, 0x80000001, 0x2})
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = dup(r3)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r9 = dup(r8)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x8d81, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r9, r12, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000001c0)={0x8, 0xc, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0x1, 0x6, 0x6, 0xfa, 0x5, "608b4d6c"}, 0x4, 0x2, @userptr=0x9, 0x1})

23:06:29 executing program 2 (fault-call:1 fault-nth:4):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:29 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x5000000}, 0x0)

23:06:29 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:29 executing program 4:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x2, 0x3}, 0x10)
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f0000000040)={0x0, "65ba2314664abcb2634064ae4da3ab9704f92ea57d1bc801a6a8f1b45a141224", 0x3})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0xc0585605, &(0x7f00000000c0)={0x3f, 0x1, 0x0, 0xffffffff, 0x0, 0x5, 0x10000000})

23:06:29 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1383.827824][T22003] FAULT_INJECTION: forcing a failure.
[ 1383.827824][T22003] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1383.892479][T22003] CPU: 1 PID: 22003 Comm: syz-executor.2 Tainted: G        W         5.13.0-syzkaller #0
[ 1383.902349][T22003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1383.912416][T22003] Call Trace:
[ 1383.915719][T22003]  dump_stack_lvl+0xcd/0x134
[ 1383.920334][T22003]  should_fail.cold+0x5/0xa
[ 1383.924858][T22003]  _copy_to_user+0x2c/0x150
[ 1383.929379][T22003]  video_usercopy+0xd82/0x16b0
[ 1383.934166][T22003]  ? subdev_do_ioctl+0x2c30/0x2c30
[ 1383.939287][T22003]  ? v4l_enumstd+0x60/0x60
[ 1383.943828][T22003]  ? lock_release+0x522/0x720
[ 1383.948521][T22003]  ? u132_hcd_start.cold+0xa5a/0x12b6
[ 1383.953915][T22003]  ? __fget_files+0x288/0x3d0
[ 1383.958608][T22003]  v4l2_ioctl+0x1b3/0x250
[ 1383.962961][T22003]  ? v4l2_prio_init+0x20/0x20
[ 1383.967649][T22003]  __x64_sys_ioctl+0x193/0x200
[ 1383.972429][T22003]  do_syscall_64+0x35/0xb0
[ 1383.976860][T22003]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1383.982770][T22003] RIP: 0033:0x4665d9
[ 1383.986672][T22003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1384.006299][T22003] RSP: 002b:00007f2707993188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1384.014729][T22003] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1384.022709][T22003] RDX: 0000000020000100 RSI: 00000000c040564a RDI: 0000000000000003
[ 1384.030690][T22003] RBP: 00007f27079931d0 R08: 0000000000000000 R09: 0000000000000000
23:06:29 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x6000000}, 0x0)

23:06:29 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x428000, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x4}, 0x4)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000040)={{0x4, @addr=0xa651}, 0x8, 0x997, 0x4})
r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0x9, 0x6f, '\x00', &(0x7f0000000140)=0x80})
ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000000c0)={0x1f})

[ 1384.038668][T22003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1384.046646][T22003] R13: 0000000000a9fb1f R14: 00007f2707993300 R15: 0000000000022000
23:06:29 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x7000000}, 0x0)

23:06:29 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:29 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:06:29 executing program 0:
syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2)
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x9, 0x6, 0x1})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:29 executing program 4:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x583300, 0x2)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000400a000100706669766f0000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00$\x00\t\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000800080074626600100002000c0005000000000000000000"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000001000400"/20, @ANYRES32=r4, @ANYBLOB="140006ff0721000000000000e7000000ed0100001400060004000000d5c30000a4cf0000fd0000001400030076657468315f746f5f62726964676500"], 0x54}, 0x1, 0x0, 0x0, 0x20000081}, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000200), 0x2, 0x0)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x7fffffff, 0x201c, 0x8, 0x3, 0x3, 0x1, 0x2}})
sendfile(r6, r3, &(0x7f0000000380)=0x2, 0x6)
r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f00000001c0)={0x661, 0x100})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x8, 0x4})
ioctl$VIDIOC_SUBDEV_S_CROP(r5, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x80000000, 0x0, 0x10100000, 0x621c}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x46, 0x11, 0x0, 0x0)
bind$xdp(r3, &(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x1c}, 0x10)

23:06:29 executing program 2 (fault-call:1 fault-nth:5):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:29 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:29 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x8000000}, 0x0)

23:06:29 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x608)
syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2)
dup(r1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:06:29 executing program 4:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000040), 0x4)
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$KVM_GET_TSC_KHZ(r4, 0xaea3)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:29 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0xda7, 0x5, 0x1, 0x1}})
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', <r7=>0x0, 0x80, 0x700, 0x7ff, 0x1, {{0x13, 0x4, 0x1, 0x4, 0x4c, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0x29, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x20}, {@empty, 0x4}]}, @timestamp_prespec={0x44, 0x1c, 0xbc, 0x3, 0xb, [{@local, 0x9}, {@private=0x1, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}]}}}}})
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x0)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@map={0x18, 0x5, 0x1, 0x0, r2}]}, &(0x7f00000002c0)='GPL\x00', 0x3, 0x38, &(0x7f0000000300)=""/56, 0x40f00, 0x14, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x8, 0x126, 0xfffffffb}, 0x10, 0x2cf82, r1}, 0x78)
sendmsg$nl_route_sched(r6, &(0x7f00000049c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000004980)={&(0x7f0000000440)=@newchain={0x453c, 0x64, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc, 0xf}, {0xfff2, 0xffe7}, {0xffff, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x120c, 0x2, [@TCA_CGROUP_ACT={0x1208, 0x1, [@m_ipt={0x1204, 0x5, 0x0, 0x0, {{0x8}, {0x10e4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0x44, 0x6, {0x0, 'security\x00', 0x54, 0x1ff, "8be4a73061a10614589d32e184079ef900835211c0038b26f2f9"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x102a, 0x6, {0xcc2, 'filter\x00', 0x1f, 0x4, "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"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x67a01dcd}]}, {0xf9, 0x6, "06ab032636c6eb65948c57ac4f4bf7550377c3f3fef358cf25b761dfadcdd1b7c7ccf77cd1a615c3d2ab3d213d9f226654d7d113cfd7128d9843dae174700b10de97b9481d4b64eb9141006db7d4955127785774bba223f67ab074906d36a5828557c367f50158ffb1bb9bf9a2d8c81b52a83dd200647756327e424d8094e00c5c9319f54ac4dc293e4c4a54c053d0a1c0b0e6b001733d277be9e28821eb532c64a070b2f4664ce9b8b64128a1a4e542f82438a4c1edc3215b7ad0dfc55951706901774dbfd0b13cbfde8744e1305d28a7a9080d2f45e529a0f1e78bd48f69cc2905fcf464602fd9ab2ae8a5e9bac7865d81fd46df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1990, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xb, 0x5}}, @TCA_U32_HASH={0x8, 0x2, 0x6}, @TCA_U32_LINK={0x8, 0x3, 0x7fffffff}, @TCA_U32_ACT={0x17b4, 0x7, [@m_skbedit={0xc8, 0x7, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x94, 0x6, "7d8f4116249b25232dad089e0db5f377ed485d3f9bdcbd841c8c8b3d059379da1b9ccf806a18ffb20fbbf02b37ec6c534e9bd5d27aef8a881bef08bdc722c047fb1e381f3c1b65dabee29c8101bab9c2fd53ec2e5c47ba7a0dec5afd8ba747663266cbf9c12112d9ffa96a66480ed85a9c17dc77aa0e35351831f58067275d0789ed93475a16f94706ce896311dadf23"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_LABELS={0x14, 0x7, "1f145d7892b154525de62f040a0a6fb3"}]}, {0x11, 0x6, "7ebd5338f1aea303847b8299e5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x1480, 0x1a, 0x0, 0x0, {{0xb}, {0x454, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000000, 0x7, 0x8, 0x8326, {0x0, 0x1, 0x6, 0x80, 0x8, 0x2}, {0xbc, 0x2, 0xfffe, 0x1004, 0x1b, 0x80000001}, 0x0, 0x6, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfe2, 0x1, 0x7fff, 0x7, 0x9, 0x38d4, 0x20, 0x1, 0x1, 0x0, 0xde3, 0x40, 0x1000, 0xff, 0x9, 0x4, 0x0, 0x5, 0x9, 0x9, 0xfffffffd, 0x1, 0x9, 0xfffffff7, 0x10, 0x7, 0x80000000, 0x6, 0x4, 0x10000, 0x80000001, 0x1f, 0x5, 0x8000, 0x4, 0xf48, 0x7, 0xa6, 0x3f, 0xff, 0xffff, 0xbb1, 0x6a, 0x8, 0x5, 0x6, 0xfffffc00, 0x4, 0x3ff, 0x7, 0x8, 0x8, 0x3, 0x100, 0x101, 0x1e, 0x3, 0x6, 0x80000000, 0x3e, 0x7f1eb029, 0x2, 0x401, 0x2, 0x3, 0x0, 0x5, 0x0, 0x5, 0x5, 0x9, 0x7fffffff, 0x7, 0x200, 0xc9, 0x1ca, 0x8, 0x6, 0x3, 0x400, 0x8000, 0xe7, 0x7, 0x0, 0x1, 0x400, 0x3f, 0x1a, 0x2, 0x8000, 0x1, 0x5, 0x7fff, 0x4, 0x7, 0x9, 0x1, 0x65a781ad, 0x101, 0x7, 0x4, 0x8001, 0xfffffff7, 0x7, 0x1, 0x7ff, 0x1, 0x3, 0x10000, 0x1, 0x0, 0x7fffffff, 0x6, 0x1000, 0x2, 0x8a7, 0x5, 0x2, 0x1, 0x1, 0x170e, 0x80000000, 0xff, 0x5, 0x10001, 0x9, 0x0, 0x6, 0x8, 0xffff0000, 0xff, 0x6, 0x1, 0xe, 0x5, 0x2, 0x8, 0x0, 0xec, 0x4, 0x1000, 0x28000000, 0x97, 0xf80, 0x3f, 0x10000, 0x3b, 0xffff, 0x80000000, 0x1, 0x4, 0xffff, 0x3bbcbba1, 0x7, 0x101, 0x1fe0, 0x0, 0xffffffff, 0xffffffff, 0x8, 0xfff, 0x0, 0xce7f, 0xfffffffe, 0x5e13, 0x5, 0x1, 0x7, 0xfffffffc, 0x5fe1, 0x5, 0x28, 0x81, 0xfffffff8, 0xffffffff, 0x7f, 0xffff, 0x3ff, 0x80000000, 0x0, 0x2, 0x1, 0x7fff, 0x3f, 0x5, 0xaf7, 0x9a, 0xa18a, 0x10000, 0x7, 0xfffffffb, 0xbaab, 0x8, 0x5, 0x9, 0x1, 0xd5b, 0xff, 0x7, 0x1, 0x6, 0x2, 0xffffff00, 0xded, 0xfffffffd, 0x33, 0x8, 0x7, 0x2, 0x4, 0x2, 0x2, 0x2000000, 0x9, 0x1, 0x200, 0x4, 0x5, 0xc9e8, 0x9, 0x7ff, 0x7ff, 0x1, 0xf906, 0x2ac2725b, 0x20, 0x3, 0x37, 0x3, 0x3f, 0x0, 0xfff, 0x8, 0x2, 0x401, 0x7, 0x3, 0x81, 0x81, 0x3f, 0x3, 0xffffffff, 0x6, 0x4, 0x8, 0x7da, 0x0, 0x1, 0x2, 0x8, 0x2be, 0xcc, 0xe, 0x1000, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0x1004, 0x6, "eaea2abfe7258dcd00fe8c3208ef1b7e1548301268c53d165df2a469cb0bf6fbfdbbb640b71a413c16ce0e53c627947df23808fdd16335ecf206c0e061a157ac79b572f4a9cf01c0aca9a206eb4fdd80978467cc0b704defe06900410b18b3e45dac89adc2f87e746e6336b7f77bd94abb0691ccece385a1be42aabf249c23e889d2d93a6d8e985912fb67ef27d955225f05ec9b69594d1fd203b3e96c3e35bcea1b3277f606402431b06ed25c7e1e42e005ce5bbfc67b3b47c894638fd998fd03259924a70136e76b2fcd4b449377004ad68bd69639df8994a022a9b1f6308e80663e419f9521e6e78c8e2c2ebf3e28ab364e85e9c15f66fcae0ce8f7ce0cec2acddeee378c748f3062cace6a7a7e1616d4e846fa8291cdc4a907fddc0962c124654d6f13f232dcec8e02bf283352b72ac97cbe7948dc4dc14daae24de3acc7e2331ede47a662bb3b2c2485f648d6abe6a904aa74927e607f70debee9457c87b195f141c7a884a1d8a639167a6c754644951ea6c14cdabdcec385b90ccfe026b4cfacdab405aa1b2eaeddf26aed7c72e437492215a2b51ec8c0488eb8d3e6cb27954d01fcbaa617ae16306a367a87bcebd80bf6d3fcf82f85d5784bc0a91e87b8828b33bc1aba31654f9bc99340c6cac3e1397542194b4c70b08d97140afc5008fe17ba660278ac062803ca8bef15405c0f09119a8f79a2ce7d20e4bb1578751ecb4a8beacba27f3bff364f5b59c33b3cc5e2bad99ce5cc97a57c8736b96672f998b14c5fdf0aab726376ea131245c97eba45ac80d642e81717e90746dd5bf859530cadfbff8fbf33183f8fb0ac731ecb17ef637cc18661576bb9a352b944c0951168ebd002607f5e0ba2e6ad04c391cfe2a85a0605bee1937c10042271687302fad6d6c00289f18bdc174ce1a14dd35fbdcd7e3ee9f29c22ef8f3e93c299f527562bf2f1166362c76bc634de96537e4f8e62597149a98680ae583c82ea5fe5687486cdef51716792bc8d70c699f4da8e494f771641bb79740f0fc065b629509c9d1ca704db725d47d8a0b4716a2c5c56f5998113b3224bafb9127009c0ac005c8e870018dab4aa533c4f7c62d957587aec260a526507ea48d062c628f356c660d6ea8abc108351fb64f0c01badbab049846e48863f699f4b950d28e043a1c630bcfbe442a2bd2974a54418c68506072ea8d9f66f5b658b6e3f00375dbc999eecaa0527f0f050b6c42239231ed1cf5b957e58636e62d0252865097ff00fc5e8f71d51bb4d39e2ab70963c38387428923c7fb9501f9c4f4b3f36bf64308d682f067d9c1425a1a52dc8467585876a6e809f2c00a0856f76e2d2a629b07a5a1d041440d02a01f5ea812db9c4d3a9f830a47b861a471ac90f402b1876993fa7c0a8a93b24037dc15dea28510279ade2290d87e6bf314abaf93b1d90665887583554f2a4f6953bbacad062df2449ea917d97d867855afc11093a80cb881025816110db051fe3240d976d3ae499f606efbe1aa89a4c2da3075cf40189fb04cb18fdc3ae603ed54affec6fc84f609817f584fed539ce9674bb458ba7948aff2d3efa24d27934c4c212dba18aa48f5b9121f8d664ce65dfc3d5bde75c40a96fdd8443c8f346cbb843780d43889f501c9136d944a33ccad1918f22f9c3599d8316936c81e6492db44fae5c83637ec56f11a3ac3447f6e118d5ab02fd9982eac73ecc2b04920817d1a2e6efd5ee748dd6b53eecede7bc9ad72fc0d77efe3dbee744116b339e515ddb4aa3ba9b1c4364573a8c7a1f6677b962ed6f5d7fd9b790963c47d75163b2d8b048ad1cc0a7e4c545efdbd684e354fd67dfe4414b7eba1ba7344a76e50b5f3474ac6d799cf60d3b4fa91a5cef592a7d3624e0870b7d49a4ffad303f5bb7c44250081565a4cca13d6d6ef77454b848e152886c4a9b29dbbf6959c3f6e08c5d39e670296698c8f610edd985967411f9838629c9fd2471ed6bb84fe7e859ac4e5821f04726b84c4c01c51d98358c4c628f52f8ac1859d896c8306033fc09019e210c744fb8969e087163081c9b9b2ac0409c0fb53acac363b6232caa4298de4d1dd1092662c71fd2a608980e27c182ea6b8633720b183af7f47de67b27e30b3878e810116c48143b76f75b6ca4a8b258a27c789aeef9d1dca795e5a2bc819d028bdf04939d26c64e3d1800aac8767d64525e20bf90ee67d094409f0de0eac5b37fff5dca666f04438dc49f65eef16c26a64e3dbcada4b56da67af76ac3062b7d2efaf782caaf5d7fc352e1d63dc74176f68d0b0251833533fac5c5a44c67f8aede1d0d533dad7b4d25aafad65bcf4812b836f77a63e6635007366e3a95717a30dca794c03737080be372a70d0291f4f87cfc294c3c28414851ccdd1b5be4ed8b37d951e41ce0a8392ee026e531d243cf3495c8b9da602b29079fa102406d145e8402afeb56c56f52be47452581a667432ce1a6c60ebe07c942838ddcd61b084da3aeff41b694b88a1485b4bfbfca1fd50a0977320a2fa2b1be8c8ac8ee8af1df0cf12ad41d5178974cb83991d604777e1b618a069036a8b0167be42cae5a7f9535f5440f947f63f4a7497e8bfac7a7608aaebf354965acc32ad2d60a988d43c901f1f1f857cae71ac4e107718a297de5e01c6a5402a466ed15ff9ab828a07a1a273f3b27c3f867fb78e9a09c292fbcf516bd014e9ebb6797f459f471bc662e7c8665a370175af49ea0b150cb2aef9cf86601871bcbb481ad0a90a2e768b956374984128ef108c97fb5c0c4516f132ccfdec0469c7f46bc68a288a41cc5be307db5a5be2e51a2563b16e0253877516797e5adccac0fc8b2da0a0d2f2d7e2df5c0651c28cd7f5a0a088e5f1bc269237d97a09b5b179a8e2a80bb74b9b0c9c06840e17e5930c9a9381315c6a82563184a317b1ca7659ee1b42ebb78637b2ab55194502587edceaf084eb9ae8a0bed3145ea1c68685027cf7658718dc4a56f05ff1f489bc02c7d5ea022ba863e7ab34ae5e545798be0f129a68fafaa83c4f2282c08c4e4b0087bc8f3a30516aa622fa605cd7947fecb162ac9fc3b18f68087eee23bf4748868bda3fef55c94bee262288cd5cbc4215115ccc89b19971b13d1556dcbf35d8352ca28334400eb67dfaeaa304cc454876311263bc4457b6410b967c10aeceb138349fb93e1129d5fffec0ed0e8b3ad1f2215b4f35e72851bbbaaf282433e796e03e417d3964db21b31be732671bc8e6964f6c1a25bd46b7b76a756aeb571f18077f843c75960e25aeb830c8f9dd6a9373390f4d240b3b7c9e9937776cf342b07fd2a0e337376009ee42191f97e75f6eb95abd5794bd2468b6027f57fe8991ba91ee4df5a8bdd254c846f8edb0a29bfceca5c200f5eaf454e2d05a429f2d7704ea9316ac1f247e83b5ac86aa647694eeb403e2479091fea4259bdae3c3ac2bd57934a7a1e7146b9a3f1482e4e6de9b4a9d1cd6a6629c8329e5670a6f18ec6bdbc791cfde78c7c2009a63d4f3a4de85db286f6311649449aa4908028c5588cff7c4a5c7922b4aee6178d3f755dd8c8ee39b23fb192883a060e1b651a8a574d571e367d0953930fc35045aa47ebe944c69439b765c5dd27ef9983eb14aa70f6ce1d5a6dbf40581c99bdeb8ad3258c76b78dffbdb4ab6ae104ff20aab389454295d888d6e730e820d8ef413bfa0f5c7c01d717c5dde83e81a52d1d1216515e9b9ec46bf0b6de07abee09f484a58c1f84f43244ad0e60160097d61544d8cfbc8882f0977494332524576bb24650d6a50f7ed5ed8ae6997c6baa63650f19fef66df13bb9f0477232b8a9f62f8b029958a32a0d7e62c1d290ff0b5f13f7474e9708a9e1272f6d8d20af06ad51a1558b3708519dada2c38c963700e4fcce6957ff3298662e4ee9d51c5feffcd43686f63e9f8acb937426755dcca4679e7c22b0524c5056f7553ea6ee1df9e97143f2ef561b6fa9330345a46c2a2ad6229a1712de47c8185f62ebaac5c88ecf482e1b616ec47d322e81a98485d380a976534cdd1277893bd7fa5195bd084103eb2e7a9c3df262b7ed3dc945a26d3c949a33bd3e4ed5ea04bc2f997335f09cd7ec9039870eed0402ba2c9312b3722664b04a325afd11046b2b877468c0f95a835a22d475a666c0b5808b47d4e7dcee41fe2abd1f0bd0177b00fbbe590f7d0a8f85f7089774ed5986e78f69924579430a1d240aeb32734d49f25ebd4cb0b64c8fcea2d2517757d6743d473fcb3c66fd34b3f6ca4862a756fbce1763b5d37f725aad6675b1c14e1dd9a452c7f3f406a149b98372c1b8fbf61e160e9298bb167096afcccb909a07f5222361bb676f20bb5059173580b513d7e8c530ead2218d33d01471d565fb3cfa4e0f907934ef606c1e5071f374ed6e41c78fa7a35d326bea0ee9ecb024a500b13b7b888ddad0c4175c6906b8d1ea95119935f6905d5465be813ee11ea783146a24bc22f4769b258a20c2003aa97ddd0a5f707a6deb2e4c3011ef8370bfd0b59e0429df33df4ac4f87a2d0eac1ab83b3e498b67bb30f5c0cc2f7cf939199c0ca82e41dee4fddbb5ab27a19c49673312b2c4779d6e713d3382378ec2b1296f27a691f601bed34c488c61d4a7718edafa476ee9d27b65f093d1b07a03cd6f57e07d4486b5b0e0217ee2d86ac6646c1eb289d7c9ecc5faab9efcd1d4bc1cca64e3097581d8e12297c675838df61b629944e81d5190eedc1675ce0df1afa36c8807b0858b88bc81092172309f7ec8d49793a2289df8659593df5c4154d6673113783ad53cb51c012ad6d2898a0b9c0270f657a891b92f7bf7c9ae88a05bf50eec5a3e449c7a9bfd877f3ce01c56f4fdee4b2dca87a7ccba3f29f5d24ede62a96efb0f39e119fef3bfaef5a6643b6183375af176ff7a75f1e78bc8e4a8a7aaea0d1af32c8655ac5e9d315467633a3787ee8711645dda521aed778c97b7da24575437156df00aaf21e464983382c11daf3a7493d1196b697fcda6cbe784a91c17f59aafc7f930a66341dfd5d0da3723d9406e5c7e3f440fc05d2b0e68d0735ed95978397167337e0a73eea91af6dea84f3eb22dfbd43e2492d9e35544255f4892b970b92565915c2a4314aa8104bbf70513de037f9def3e90007c7c1f9614308a22b56c477a65ec5a9c352916c4c7981f2d0a9650e4cf4dd8179a6d8256559c370966187a0a4c209e9cb31908a0d5dbab22c4430374874dbd8abb505151f2bbef39e89a3c5b00dcbc1aac48464342524f17afc29ee18577305ea9bcde93155f0783e8966cfe8c5446b6ffe731ea6179957f1eb3282317b201c45cb3934981e1bb9c59abcd865251ed3f78984e98f184a1355f9785e75ef5de6e147687b7f280ee64d978bcb14d4bb344c620f8f530c3d55334e33b2fb5609c230e0e51ca1350bfe5e89c9e5c2441ea750852b00419da91eb0c3cb00fd5a5bc3df52638dda7081776e44323fd921271da65452aeb97ee228c01dea2f7e1f64dbe14c42485d22b4ee6902389354ecf5f0fe354e6e5fb804f3dac8c36333f5f97f99806fdd3e092fd0337801728c5f2e49e8d1dfb7871b8357bf2846a0bf92937146ac10bb8434163b3d249ce8b310856defcebefcf1ac75383dc103735c095709c77ed9d1daa7466c85185fe54fe86a107313247ea3018d0fedb9127262e074b106487878de06f66efbd6250a3be143a80003ccfe93e7fcf06c9233375530c9017354ae62dfa9af29d4498799fe651b48c64bbdac21875b84955507736273e333e0caac9a09f1ad1ef46606a91db13fecd7875718c029b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x110, 0x17, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1ff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x400}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3a37, 0x100, 0x6, 0x402d, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x800}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x81}]}, {0xa1, 0x6, "211b32a5c58eb164b5caa1705ea269cea1d69e3b75b3889c8667223616559c7446cca3ff2a6c285c688b922a32c0d7d7f17c9ff6d1528dc2a52eb8b8a1057e335110273c5f7b8e297f4ab2a25fe379fe1616b05e49424ef02220f9a1dfc24e048b6df532263e952a1a3499efa36f838143ddd75a810bbff36dbd3798f2c4d24cca9c7ea8fa5138fb0fcaa68f6187618bb19d659e965de09b7ae9bb1d04"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0xf4, 0x3, 0x0, 0x0, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r8}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x918, 0x40, 0x80, 0x1fe00000}, {0x20, 0x4, 0x9, 0x5}, {0x400, 0x1f, 0xa4, 0x1}, {0x8001, 0x40, 0x9, 0x1}, {0x1, 0xff, 0xff, 0x7}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x8001, 0xffffffffffffffff, 0x4, 0x9}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0x8d9, 0x8, 0x0, 0x80000001}, {0x4, 0x8, 0x5, 0x80000000}, {0x7, 0x80, 0xa9, 0x9661}, {0x5, 0x1, 0x1, 0x7}, {0x800, 0xa5, 0x5, 0x7ff}, {0x7, 0x0, 0x1, 0x7}, {0x9, 0x89, 0x3, 0xef7e}, {0x1, 0x9, 0x20, 0x80000001}, {0x6, 0x1f, 0xff, 0x4}, {0x3f6, 0xf1, 0x7f, 0x9}]}]}, {0x12, 0x6, "852af6c6ddea2f3ebf709f8b5ec9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_U32_ACT={0x1a0, 0x7, [@m_vlan={0x108, 0x1, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffff, 0x1, 0x1, 0xffffffaf, 0xffffff00}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xca0}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8000, 0x5, 0x0, 0x8001, 0x81}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x7b, 0x6, "66dccf844847ea918955cd81b898a1233534b98b460c1c1baafd984c2807004c36baccefffea28129877bacddd2757d7720de8f0218f81b7c16e5c7050a62a362b302a175990701167e328cd03f8687f9294e0cfe804d4aa6f7b4a8c668cfec39bf4519bb2ebf525851873cbaf3fb8df1d9efc17d8ab1b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x94, 0x7, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7fff}]}, {0x3f, 0x6, "e5f632be3b3d59d97252ae57b3d69256da06aad1270f6039a1e4d0ac5c69c0634e28df3bc1a4a8cad24c81e1eeab21336b21a584d2ce850fb2e2d3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_HASH={0x8, 0x2, 0x1f}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x4}}, @TCA_U32_HASH={0x8, 0x2, 0xfb}]}}, @filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast2}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0xfc01}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0xe3}, @filter_kind_options=@f_tcindex={{0xc}, {0x1904, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x9}, @TCA_TCINDEX_ACT={0x10b0, 0x7, [@m_skbmod={0x10ac, 0x12, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="d7a9016b7f20"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x0, 0xffffffffffffffff, 0x6, 0x8}, 0x6}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1e0, 0xfffffff7, 0x0, 0x400, 0x4}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xa}}, @TCA_TCINDEX_POLICE={0x820, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x7f9fd414, 0x5, 0x7, 0x0, 0x3, 0x0, 0x200, 0x4, 0xff, 0x15e4000, 0x0, 0x101, 0xffffffff, 0x3ff, 0x5, 0xffffffff, 0x3, 0x1, 0x5, 0x1, 0x0, 0x1, 0xffff, 0x1, 0x3, 0xfffffffb, 0xc8c, 0x9, 0x9, 0x9, 0x5, 0x8001, 0xfff, 0x6, 0x80000000, 0x7, 0x80000001, 0x7f, 0x8000, 0x4f13, 0x7fffffff, 0x1ff, 0x40, 0x80000001, 0x6, 0x3, 0x2, 0x8, 0x80, 0x7ff, 0x4, 0x809, 0x1000, 0x8000, 0x1, 0x2000, 0x54, 0x4, 0x0, 0x2, 0x80000001, 0x9, 0x8000, 0x1, 0x2, 0x2, 0x2, 0x7f, 0xffffffc1, 0x8001, 0x1ff, 0x1, 0x1f, 0x8, 0x9, 0x768, 0x80, 0x82b, 0x80, 0x7fff, 0x401, 0x402, 0x3, 0x522, 0xffffff10, 0x4, 0x8507, 0xffffff00, 0x2, 0x4800, 0x3, 0x40, 0x7, 0x4, 0x7c7, 0x1, 0x1, 0x5, 0x8, 0x80000000, 0x7, 0x6, 0x2, 0x401, 0xe9f, 0x4, 0x7, 0x7, 0x800, 0x20, 0x5, 0x0, 0x13f, 0x1, 0x839c, 0x0, 0x7, 0x100, 0x7, 0x20, 0xfffffc00, 0x8, 0x8, 0x400, 0x4e2e, 0x7, 0x7ff, 0x7fffffff, 0x0, 0x0, 0x8000, 0x1, 0x8, 0x6009, 0xfffffff8, 0x400, 0x9, 0x8, 0x8, 0x101, 0x4, 0x6, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x13, 0x3, 0x401, 0x9, 0x3, 0x7, 0x4, 0x7, 0x1, 0x3, 0x8, 0x6, 0x6, 0x5, 0xd7, 0xc8, 0x1, 0xcd, 0x24e, 0x81, 0x9, 0xc4, 0x3f, 0x9, 0x8, 0x0, 0x8, 0x1, 0x3, 0x0, 0x2, 0x7, 0x2, 0x80, 0x5a9f, 0x8, 0x858, 0x6, 0x94, 0x4, 0x5, 0x3f91, 0x3, 0x80000001, 0xfffffff6, 0x5, 0x0, 0x4, 0x10001, 0x182a, 0x6, 0x4, 0x1000, 0x80, 0xffff, 0x0, 0x77, 0x2, 0x1, 0x8, 0x4, 0x8001, 0x3ff, 0x0, 0x9, 0x5, 0x6, 0x7fff, 0x9, 0x2, 0x8001, 0x5, 0x3f, 0x1000, 0x6, 0x4, 0x4, 0xfffffff9, 0x204, 0x4a1, 0xc7, 0x6e97, 0x0, 0x7, 0x6, 0x4, 0x7, 0x20, 0x80000001, 0x3f, 0x7, 0x9, 0x5, 0x1ff, 0x80000000, 0xffffff40, 0x80000001, 0x6, 0x8, 0x1, 0x7f, 0x2118, 0x1, 0x5, 0x3ff, 0x10001, 0x2, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x1, 0x4, 0x8001, 0x6, 0x9, 0x5, 0x0, 0xa479, 0x7fffffff, 0x6, 0x1, 0x1, 0xfffffc01, 0x0, 0xb6, 0x9, 0xff, 0x3ff, 0x1, 0x6, 0x4, 0x4, 0x1f4ecb2d, 0x3, 0x101, 0x9, 0x4, 0x4, 0x2, 0x3ff, 0x0, 0x2, 0x800, 0x2000, 0x5, 0x1000, 0x6, 0xe6a9, 0x3, 0x1, 0xfff, 0x9, 0x200, 0x0, 0xfffffffe, 0x5, 0x7fff, 0xb5, 0x9, 0x3, 0x7fff, 0x3, 0x73c1, 0x5, 0x1, 0x1, 0xfffffff7, 0x5, 0x8c, 0x4, 0x20, 0x6, 0x6, 0xc9, 0x100, 0x20, 0x1, 0x2, 0x5, 0x8, 0x0, 0xffffffff, 0x4, 0x2, 0x9, 0x4, 0xfffff631, 0x3, 0xee, 0x1, 0x2, 0xed2d, 0xff, 0x5, 0x7, 0x1, 0x8001, 0x7, 0x8, 0x9c, 0x3f, 0x8, 0x7ff, 0xffffffff, 0x0, 0x800, 0xc4, 0x5, 0xffffffe1, 0x2, 0x3, 0x101, 0x3, 0xc000, 0x3, 0x1, 0x10000, 0x9, 0x3ff, 0x80000001, 0x7, 0x1f, 0xefbcb00, 0x5, 0x101, 0x0, 0x1, 0x5d, 0x20, 0x76b9, 0xfffffbff, 0x0, 0x6, 0x9, 0x4, 0x1, 0x1000, 0x2, 0x400, 0x10001, 0x400, 0xfffeffff, 0x0, 0x9, 0x80000000, 0x9, 0x1, 0x8c00, 0x1, 0x8000, 0x5, 0x63, 0x0, 0x0, 0x7, 0x80000001, 0x0, 0x3, 0x0, 0x3f2, 0x8e2, 0x3, 0x2, 0x7, 0x2, 0x9, 0x9, 0x0, 0xffff, 0xd70b, 0x7ff, 0x0, 0xa16, 0x7, 0x6, 0x0, 0xba, 0x8, 0x4, 0x6, 0x4, 0x5, 0x80000000, 0x8, 0x3, 0x4, 0x42f2, 0x2, 0x1, 0x4, 0x2, 0x2, 0x1448, 0x5, 0x7f, 0x0, 0x2d6, 0x8, 0x200, 0x3, 0x3, 0xd3c, 0x81, 0x7fff, 0x6, 0x8000, 0x2, 0x2, 0x6, 0x2, 0x3, 0x8, 0x5e, 0x5, 0x8, 0x1, 0x5, 0x9, 0x3, 0x6, 0x1ff, 0x4, 0x4, 0x0, 0x5, 0x0, 0x9, 0x15, 0x3711, 0x930150fe, 0x81, 0xaf27, 0x4, 0x9, 0x6, 0xf8f, 0x9, 0xfffffff9, 0x1f, 0x2, 0x10000, 0xebe, 0xffffffff, 0x200, 0x2, 0x0, 0xb5, 0x9, 0x94a, 0x10001, 0x7a, 0x3, 0x4, 0x8, 0x9, 0x7ff, 0x10001, 0x9, 0xffffff5f, 0xc23a, 0x1, 0x2, 0x800, 0x0, 0x10000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_RESULT={0x8}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff3, 0x6}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x2}, @TCA_TCINDEX_SHIFT={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}]}, 0x453c}, 0x1, 0x0, 0x0, 0x8010}, 0x8010)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:29 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x9000000}, 0x0)

23:06:29 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000200)={0x9e0000, 0x2, 0xffffffc1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9a090d, 0x2, '\x00', @p_u8=&(0x7f0000000180)=0x7f}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x401})
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x4800)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={<r2=>r1, 0x836f, 0xf2, 0x1f})
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x2000000a})
ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0xc9cb, 0x5, 0xd4bd, 0x40, 0x350, 0x6})

23:06:29 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1384.567970][T22095] FAULT_INJECTION: forcing a failure.
[ 1384.567970][T22095] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1384.630077][T22095] CPU: 1 PID: 22095 Comm: syz-executor.2 Tainted: G        W         5.13.0-syzkaller #0
[ 1384.639927][T22095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1384.649994][T22095] Call Trace:
[ 1384.653378][T22095]  dump_stack_lvl+0xcd/0x134
[ 1384.657999][T22095]  should_fail.cold+0x5/0xa
[ 1384.662521][T22095]  _copy_from_user+0x2c/0x180
[ 1384.667209][T22095]  kstrtouint_from_user+0xb5/0x240
[ 1384.672331][T22095]  ? kstrtou8_from_user+0x210/0x210
[ 1384.677631][T22095]  ? lock_acquire+0x442/0x510
[ 1384.682337][T22095]  proc_fail_nth_write+0x79/0x220
[ 1384.687369][T22095]  ? proc_task_getattr+0x1f0/0x1f0
[ 1384.692476][T22095]  ? proc_task_getattr+0x1f0/0x1f0
[ 1384.697577][T22095]  vfs_write+0x28e/0xa30
[ 1384.701813][T22095]  ksys_write+0x12d/0x250
[ 1384.706132][T22095]  ? __ia32_sys_read+0xb0/0xb0
[ 1384.710880][T22095]  ? syscall_enter_from_user_mode+0x21/0x70
[ 1384.716766][T22095]  do_syscall_64+0x35/0xb0
[ 1384.721172][T22095]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1384.727063][T22095] RIP: 0033:0x4192bf
[ 1384.730946][T22095] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48
[ 1384.750547][T22095] RSP: 002b:00007f2707993170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1384.758952][T22095] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004192bf
[ 1384.766908][T22095] RDX: 0000000000000001 RSI: 00007f27079931e0 RDI: 0000000000000004
23:06:30 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x200, 0xfffffffe})
openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000100), 0x4, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000200)=0x5)
r4 = dup(r2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635004000000f30baf80c66b8169d2e8966efbafc0cb80010ef0f08b80b000f00d0f6c3000f2823660f3a410e000000b892008ee866b8b79a6ee40f23c00f21f86635030000000f23f80baad70b", 0x56}], 0x1, 0x0, 0x0, 0x0)
ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000140))
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0x6, 0x1})

23:06:30 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xc000000}, 0x0)

23:06:30 executing program 4:
syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="66b85b008ec0c74424000c800000c74424027f220000c7442406000000000f011c24b805000000b9f10000000f01d9400f1237c7442400a6000000c744240201000000c7442406000000000f01142466baf80cb8fe2bc68fef66bafc0cb0c9eec4216610dfc44229b9d5470f1c0366b8ad008ee0", 0x74}], 0x1, 0x2f, 0x0, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x94})

[ 1384.774905][T22095] RBP: 00007f27079931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1384.783040][T22095] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1384.791188][T22095] R13: 0000000000a9fb1f R14: 00007f2707993300 R15: 0000000000022000
23:06:30 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:30 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:30 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x2040c0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x45a001, 0x0)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat(r3, &(0x7f00000000c0)='./file0\x00', 0x10040, 0x100)
ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000080)={0x80, 0x3})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
lseek(r0, 0x2, 0x1)

23:06:30 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0x40000, 0x8000, 0x8, r0, 0x0, &(0x7f0000000040)={0x9a091f, 0xe4ed0400, '\x00', @ptr=0xfff}})

23:06:30 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xe000000}, 0x0)

23:06:30 executing program 4:
syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)

23:06:30 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xf000000}, 0x0)

23:06:30 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:30 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x20181)
syz_open_dev$video4linux(&(0x7f0000000040), 0xa3af, 0x400100)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:30 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:30 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x8000000, 0x0, 0x0, 0x8001, 0x91})

23:06:30 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x8, 0x2, 0xf9, 0x100, 0xfffefffe, 0x0, 0x2})

23:06:30 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x0, 0xb, 0x4})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x88)
r6 = signalfd4(r4, &(0x7f0000000180)={[0x6]}, 0x8, 0x80800)
ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000000080)={0x200, "02c402dd54f3f10640d4109cc9f845926c95bf922be10b01d8b2da653afcdad3", 0x2, 0x20, 0x8, 0x6, 0x10, 0x4, 0x800006, 0x9})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:06:30 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x1f000000}, 0x0)

23:06:30 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x10, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:30 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x27b4, 0x400)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000005, 0x10, r3, 0x76309000)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = dup(r4)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r11, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000000c0)={0x80000001, 0x7})
ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x4, 0x7, 0x1011, 0x7, 0x6, 0x4, 0x0, 0x5}})

23:06:30 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:30 executing program 4:
syz_usb_connect(0x0, 0x656, &(0x7f0000000180)={{0x12, 0x1, 0x340, 0x7c, 0xa3, 0xf0, 0xe7, 0xbda, 0x8173, 0xc955, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x644, 0x2, 0x1c, 0x5, 0xc0, 0x9, [{{0x9, 0x4, 0x8b, 0x6f, 0xe, 0x7c, 0x1b, 0xf0, 0x8, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0x200, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3a1, 0x0, 0x7ff}, @country_functional={0xa, 0x24, 0x7, 0x0, 0x2, [0x5, 0xffff]}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x1f, 0x9}, @country_functional={0x6, 0x24, 0x7, 0x3, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9b}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, ','}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0x61, 0x40}, {0x6, 0x24, 0x1a, 0x9, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x3f, 0x4, 0xff}, @acm={0x4, 0x24, 0x2, 0x15}, @mbim={0xc, 0x24, 0x1b, 0xa000, 0x40, 0x3, 0x4, 0xddd7, 0x7f}, @mdlm={0x15, 0x24, 0x12, 0x3}, @mdlm={0x15, 0x24, 0x12, 0xca1f}]}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x2, 0x3, 0x3}}, {{0x9, 0x5, 0x6, 0xc, 0x7af, 0x40, 0x6, 0x1f, [@generic={0x48, 0x8, "e36214f6477e250dd67692c865eb99fc088acfefd5ef6b84133112dedc64cd43e5763bfea00e89ee44900e56a49ce98c7eb436c9f16cde7ea0fa45820a88632ae7da5298f0e8"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x81, 0x3f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa0, 0x645d}]}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0x9, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7}, @generic={0x17, 0x4, "894be577f8922b0a5c94ba10508a22105e205fdd49"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x4, 0x0, 0x72, [@generic={0xcb, 0x8, "46329e7527e0a1ad0acf4a38e8e016ffeef9b871d2de1af835aed28bb53a9256fe971bef8edb51637d08b26ee96a53fcb93478ade9ae75ead25e23aaf583c20b7c285966220ce8989e4cb50433bc4035deb9776fb60ba75fdac05960e3a934699cb0300aa5c58bacc804c9e38b0fce2230d171b36fcfc331b3e558b5c1838e89dcb9dec659d7eb8307a39dc5f56c77f5daa03d15bdbbec9f16a6df9f7938fbc203f34799462e2b98b31bd05648ff75de7222da7742e6b00262c7081d2c206fc43a9f76f89158ff2333"}, @generic={0x1f, 0x22, "79f9666cdbe3c451c765d44acb2ef57c550d93daf500c9bca7e5914c9f"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x80, 0x7, 0x8, [@generic={0xb6, 0x22, "48bbbc138cc8a6a0302fc8aa3d16ca276748ee7227df3e8f2fd78da662f40ea29c28870ef7a238d984427db878e269f4bc1dafca6e954a43922466241f7370d78b2fe35e2a66b1a19e30c4ca05ce8f66db3b1fd972b99cbd2e278faaa49b513f93930a1bba1ea966cd178d8359f9c3de91ed70bd7636efe118ec6a68dc75aac7fdd6979d56b9d4a237eb05f8ae8ac497f96faf5763898052492ca2585cf906a282fe9ad0ad21351892ce2a080ea1a58783fb40c5"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x0, 0x0, 0x8, [@generic={0xe5, 0xc, "cfe9137563a345cc87ace55672e089daf054c72e33b5a6b8d30335eb40183460272947c62538a4e9b08515d471e6c48dd98f39ae79aaea4259f03adb2ab1a6240f1efa477c397368883a3c8d1cac57bee898b82ddcee2e759f9a81b42fb2c4be3f6245f5335587444551f7c07e8d42bf8adf1ae4f687246c8d93d0211447b7d2a7ad8c07d7431b99e0e564dbf7e79135dbccd3e66e36e90cbd085e7720e3b125fa7ba2a1ce8a17bcea64fc7d953f098c04ab670daa62d57605c02861f05bda7f541457462cf4ab381e2fa70e747c17887d8fbe390efe888ff20a055109895a612b82a5"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8e, 0x81, 0xd6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4d, 0x1, 0x1, [@generic={0x51, 0xb, "1a386da6586aa72111287978b879521cda0a2a874e6ff4f719d1d4ce7a990a92e41bb3041739a8a5d91d223a3154754168b6d516d0ca495f6dc98fe5a7aa33685b34c6d474288566e18150622708a2"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x3, 0xcf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x5b3d}]}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x4, 0x0, 0x9}}, {{0x9, 0x5, 0x9, 0x0, 0x7df, 0x1, 0x40, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x3}]}}, {{0x9, 0x5, 0xd, 0x2, 0x3ff, 0xff, 0x0, 0xf8}}, {{0x9, 0x5, 0x6, 0x8, 0x10, 0x7f, 0x1, 0x7}}]}}, {{0x9, 0x4, 0xe1, 0x80, 0x3, 0xca, 0xee, 0xfc, 0xd9, [@uac_control={{0xa, 0x24, 0x1, 0x8000, 0x40}}, @generic={0x40, 0x1, "2ae7208ad94bbb0a6194cdf0b82d6dcf6b0c45e54be9499a6b2b6e5bdf9bd6814dde30834c80ec00ff80b0393fc1ab487545ae61a01a00267857d5439ac6"}], [{{0x9, 0x5, 0xb, 0x8, 0xafc202d55e270fdc, 0x2, 0x28, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3ff}, @generic={0xa7, 0x3a, "d48cc171756590a017eefbdd0d999bc6c0df2aadf4d0893cf94db4410c536b5fc92f47b477d487a32aa19839a34546cafe5297b0e28efc9fb40ef0c60efa1cacfa387f1ab5afc093037e1382e27e0669e7395e30598f09b48a815ab1114361f404247d5d21c7a39ad1539b159b93ce16e7cc6b74e085ec0eb2e9bf6f6a01fff388933df91989a6e96a4ebfa69378c430fa97c3522a244155f117a8bfaa6df0080eeaa37aeb"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x46, 0xff, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x3f, 0xc9, 0x3f, [@generic={0x8a, 0xe, "611627bf20e3851a7e8a491229540b94358adaa76d295c1fd09db2e33da03d69e34f5e410123df270d5c156433270f0ca492dd882db1c6914aad3c8775f636988a470dcda27d32ca1aa90f160500b216895f73845fefdb4cdfa5caddba91317b076f5c7dd944cabd17f417603f8902b562622f67429691bd6301e9578ba2cc041f662d036090c9c9"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xe9}]}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x310, 0x81, 0x2, 0x8, 0xff, 0x1d}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x68, &(0x7f0000000900)=@string={0x68, 0x3, "e62370c80ad904a38f4ff6061d6f408b30144347c8616b59f69bf762c4d54f54a7f5960de8fb4d2a60fca50d5f9d05ce4425347fb1c26afe97a55aca627f1c7c66914de10688e92191e13bae3a754487ace498e6662ecf2d8c49f221c7d7d6fec0d73f3d9939"}}, {0xf3, &(0x7f0000000980)=@string={0xf3, 0x3, "782017ecdf88b3482cbc091f8bce413aeb340045d06440dc7fbdb9d9989fcb17ce303ba787399b4753ed641481965520c22c5faef70e6544062c8aefc546124be964809b117357c511798cd7b78924ea8ae771692d0c9173ef8519b50ee9390eacb8b50120d5abf940e03668f36b0e50f1e6e824837ec6a66b34af3c2ee1e524ed4a98d4ac0a0ef058a3b4be4ccb7211542c6ab60ef6beff8550d50a7b481db542ce0f28118b0a65c6ba2182c44dfc3fff150713ba766ecad3b173f510410af5e555202d570c7ab10bf103cca2a914d6714b8c2efe81bdfff625b258e40e0b9595a1a3db66a17391c651db267feb292e3f"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1844}}, {0xb5, &(0x7f0000000b00)=@string={0xb5, 0x3, "72f9063d923fe65d2a1f04cc1592a12aa1ef35de8f63fa591702821b750f315f87ae46f75cb8218c248e3be7fe4a5a1075885813818ea180265ed15958b606fdcedb8d01d4287e8d8ace12845e0f4660457aec373ecd40aae689f1a96b2992f9ccdeed9f11a020c06aa8ce717f59287fb540e2c78fc3c0520933004b52f1ab299d757bd36e3f942fe819a95f4a3e3fc198c252409a27dbdbc5838bee31e5bf8b440117601ad5fc7b4db24ade03a63b6412bd48"}}]})
syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000040)=[@exit_looper, @decrefs={0x40046307, 0x2}, @exit_looper, @enter_looper], 0x67, 0x0, &(0x7f0000000080)="a797f8e3b71d4a741e4b2f13485f7ca0761237117ec9f5f091b2efcdd758f145fb60d2de9b18014eb5add0dd06fce6d09e298f7de27c00c36696f03ddf139c993faecda2a15de1bd204b6cb98750b8ca98e569eacbbda38d5d848a2dcc9a58801e36c57c69cc22"})
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = dup(r5)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0xc0585605, &(0x7f0000000100)={0x3, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x6})

23:06:30 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x3f000000}, 0x0)

23:06:30 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4c01, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:30 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:30 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x60000000}, 0x0)

23:06:31 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x80000003)
r2 = socket$inet6(0xa, 0x6, 0x0)
accept$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2}, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:06:31 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x541b, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:31 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0)
ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x3, 0x7, '\x00', &(0x7f0000000080)=0x3b})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x436de541202f0195})

23:06:31 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:31 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x888effff}, 0x0)

23:06:31 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x20c103)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:31 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x5421, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1385.738932][ T9683] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1385.948878][ T9683] usb 5-1: device descriptor read/64, error 18
[ 1386.221510][ T9683] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1386.439040][ T9683] usb 5-1: device descriptor read/64, error 18
[ 1386.570633][ T9683] usb usb5-port1: attempt power cycle
[ 1386.998917][ T9683] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1387.098899][ T9683] usb 5-1: Invalid ep0 maxpacket: 231
[ 1387.251477][ T9683] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1387.348878][ T9683] usb 5-1: Invalid ep0 maxpacket: 231
[ 1387.354586][ T9683] usb usb5-port1: unable to enumerate USB device
23:06:33 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
dup2(r0, r1)

23:06:33 executing program 0:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
dup(r1)
ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000140))
r2 = dup(r0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0xffffffffffffffd2}], 0x1, 0x0, 0x0, 0xffffff99)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10)
r6 = fcntl$dupfd(r3, 0x0, r4)
getpeername$packet(r2, &(0x7f0000000300)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000002140)={'ip6tnl0\x00', &(0x7f00000020c0)={'syztnl1\x00', <r9=>0x0, 0x2f, 0x5, 0x7f, 0x9, 0x10, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x20, 0x2, 0x100}})
sendmmsg$inet(r6, &(0x7f0000002280)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000140), 0x0, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x228d}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1d}}}}], 0xd8}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000500)="571250ac0aa6f58389225496eb790c60f1fcabf7fae292b51613b86632ceb3dc03498c611f9fb8cd742d987bb141943d1e7e4dc699f02af13a96eaa734067e4c063a8f50826ee68449395ebe3ede2bbf80191837848d6d9a21f77856a88dfce813a507bb4b97b4576f5d13c5b53c3a3018f2a1b084d0d41e68e7a1fa7ef257fb440318090a8b12723dad51987320fd6b1441ef0af43dba508d1453b9030734096d5ac07c4f2c7ab8311887c92e6b69e925c595286369f6f551dedc8e40144c9bc07d2054213b426d4ff7620a7887e6ff596b2644a57d24695ec178eca24e8f79de42", 0xe2}], 0x1, &(0x7f0000000640)=[@ip_retopts={{0x64, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0xc, 0x43, 0x1, 0x5, [{@empty, 0x2}]}, @ssrr={0x89, 0xb, 0x41, [@remote, @multicast2]}, @end, @timestamp_addr={0x44, 0x24, 0x81, 0x1, 0x3, [{@private=0xa010101, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x17ba49a9}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x1}]}, @lsrr={0x83, 0x13, 0x39, [@dev={0xac, 0x14, 0x14, 0x31}, @broadcast, @loopback, @multicast2]}, @noop, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x80}}, {{&(0x7f00000006c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000700)="ef5af4c228cdaa7c30839a338594dc4c2e4d9d0959af0f718c79eadc3d1226f5aac5cb6f2be3a34a71e4382e87a7ad99e648f63e8c92991ec99eaf445c5481fa99d5e042793ff579831edc04ab5310db43cb9af66e9f817ea871d16b848a6c81822b135003ef3508d6c7929be489ff6dc2936a478466f6aa9e1cf515a96b581bacff7f070a5105679eb9de46fa6dedeee97d1c900a", 0x95}, {&(0x7f00000007c0)="06b75959ec2cec00f494a0d56b7a77462e3295e6faa1606201736ec9c882abc95a6eac5134f22509e61cc3157e44c904449621d6eadca472332ff2631272721a75b46d0698154b3fbfeeab1da97fbc78a1f16b4dc0601683ca0aa616adbf", 0x5e}, {&(0x7f0000000840)="519c7b81111a50e315c0ad175886f183421c8d4e8ecf0e215179937af541d815ac35dcc8c2b25b9af5e68e34", 0x2c}, {&(0x7f0000000880)="5c33adf15a89196085fa473a56b02cdda83022175a4627c7b21ecd84ac27b391971f473d4145672702542077f6d0ae528c48d3193fdc6c027cf4506bcb8c086920a3efc3c37fce709a8c359f62752de35a6e3bb3994f9e405ccc87a702d5f40bfd5720fd49b3d9b3db284eab81c3831dee68e84aafe393b28411e18686001a503a94f86ea587ed692148b6dc18d8c96ea838ab1ccdf9fbcc884519ecee32e16c424711fbe1", 0xa5}, {&(0x7f0000000940)="2cb722413018da4c4f5c51886ef15b0669662ad2b02d73fe1a9c11d494388a1eba14e55ef7eaf899c51698b58af1c13bd0677379c865118b7141b00b48c6b0e15bc22a370fdbf2fe9dc40a0475cbfdc31278b04783227946f60aed597a14e8199e2401ff1e321b69", 0x68}, {&(0x7f00000009c0)="2bb1cb0377fdf4b28327e087e78eaba5d33fad7f458d7da370f389f2907b57bbf90906da5781f7174945a14ddfd6267c59ad1c299a5019feaa1bdbfd94e20a7f2cd6e975783565fc618206c09fc7939dc25a46e98489520a143a9bf4bdaaad9b7d52caad7289bc6ac8ea773c063ccb6d949dbfbed67e1e084f25087ec3c10b007cf8120970953599b9cc4ee1a0363bd48fa6cc66bd60f28d9d52e5dc7f89375cba663ac87d67acbe2c92367f79062ea24bf65be0448486f6359b228b79", 0xbd}], 0x6, &(0x7f0000000b00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}, {{&(0x7f0000000b40)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000b80)="2e6cfa1e92e4fe6ecf96fe1ed8a87bd8e03695be9bf5e0193d31f205dcc3baf53deefa6411856ec553a7084a42ab7edaabbd5b3b087e8cc74ecd81a40a5f429d8db3392a2627e45afe625a4d2bbbc8797b75d398e50987d915fba8fa8a923f8679638b0b02441c6077c49037a832f505805ac7", 0x73}, {&(0x7f0000000c00)="b6ef49fa737ca05211aee468cfeaaaf709820e9ba256d6b63bee2c8cddf1eadcc2baf2b0c7a934619899c9c84f10e4ad710ac13acacf8ad4db2d729e66b0cfc3fcc682a4fdcad4fc2efa313b0f72ee6dde440dc389e79a8f7247f0dad6aa35a56d40eda4a5b55740ef15546de1ef78512e890e6456650c7d35b573c60daee19c85efea5ac76938022aa2ddda5f7877c98d51b7dc08c72a206edde071b30b197392cfd6fc4e205f09c156252f92e64709e63c20a6971cd88cf02df3578b0c38a6bef8e40ebceea93a96777470d3f4f0926f4d021f35f51dd2c554", 0xda}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="65f468dbcf113687a989bf136537eef038dd09309d2c", 0x16}], 0x4, &(0x7f0000001d80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11}}], 0x80}}, {{&(0x7f0000001e00)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001e40), 0x0, &(0x7f0000002180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x14, 0x1, [{0x4, 0xe, "8dfeaabed849a6c030358d83"}]}, @lsrr={0x83, 0x27, 0x4c, [@dev={0xac, 0x14, 0x14, 0x32}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @empty, @remote, @multicast2, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x8f, 0x3, 0x8, [{@remote, 0x4}]}, @noop]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@cipso={0x86, 0x23, 0x0, [{0x0, 0x5, "72d69c"}, {0x7, 0x12, "c76d27302873a47b78473c2e0d3612f9"}, {0x5, 0x2}, {0x0, 0x4, 'C3'}]}]}}}], 0xc8}}], 0x5, 0x20000081)
r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r10, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:33 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:33 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x9effffff}, 0x0)

23:06:33 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x5450, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:33 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000a00)={{0xfffb, 0x8, 0x200, 0xcd3d}, 'syz1\x00', 0x1})
tee(r1, r0, 0x7, 0x4)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
dup2(r1, r1)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x404000, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(0xffffffffffffffff)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000980)={{0x0, 0x0, 0x6, 0x20}, 'syz1\x00', 0x53})
r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x98100, 0x0)
ioctl$VIDIOC_G_ENC_INDEX(r10, 0x8818564c, &(0x7f0000000a80))

[ 1388.484629][T22274] validate_nla: 46 callbacks suppressed
[ 1388.484649][T22274] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:33 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x5451, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1388.541632][T22284] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:34 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xf0ffffff}, 0x0)

23:06:34 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
syz_open_dev$video4linux(&(0x7f0000000040), 0x43e0, 0x208000)

23:06:34 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

[ 1388.605238][T22274] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1388.614079][T22284] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:34 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x201, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x80000000, 0x6, 0x4, 0x1, 0x2, {0x77359400}, {0x5, 0x1, 0x7, 0x81, 0xff, 0x20, "a6ae2b71"}, 0xfffff979, 0x3, @planes=&(0x7f0000000040)={0xfffffffa, 0x152d401, @userptr=0x40, 0x8}, 0xfffffffc, 0x0, r2})

23:06:34 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x5452, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:34 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:34 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0x7, 0x7})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = creat(&(0x7f0000000080)='./file0\x00', 0xb0)
ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f00000000c0)={0x0, "cf05fa06e05a7443e3ae91f31a5dd05da3745cce8de39f25e9ee87fd1130e7c5"})

23:06:34 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xfcffffff}, 0x0)

23:06:34 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0x9b0000, 0x1ff, 0x70, r0, 0x0, &(0x7f0000000040)={0xf1dd9b09fee71d16, 0x200, '\x00', @value64=0x5}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:34 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x5460, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1388.858600][T22320] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:34 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x3ff, 0x1})
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x9, 0xe4, 0x3009, 0x1, 0x6, 0x8, 0x73637d4fd697c58e, 0x7}})

23:06:34 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = signalfd(r0, &(0x7f0000000040)={[0x7]}, 0x8)
ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000080))

[ 1388.903003][T22320] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1388.935594][T22320] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:34 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xfd040000}, 0x0)

[ 1388.971678][T22332] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:34 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x6e})

23:06:34 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:34 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x5501, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:34 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x0, 0x0, 0x4, 0xe000, 0x4, {}, {0x4, 0xe, 0xff, 0x7c, 0x7, 0x0, "936ed853"}, 0x0, 0x1, @offset=0x800, 0x8, 0x0, <r1=>0xffffffffffffffff})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)={0x3, 0xc, 0x4, 0x1, 0x0, {0x77359400}, {0x2, 0x1, 0x8, 0x4, 0x1, 0x8, "b56102aa"}, 0xffffffff, 0x1, @userptr, 0x8, 0x0, r1})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40200)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x0)
mmap(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0xc, 0x1010, r3, 0x25ce5000)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = dup(r4)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000280)={0xffffff00, 0x1, 0x3})
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r9, 0x4004556b, 0x0)
pidfd_getfd(r8, r9, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x80000001, 0x0, 0x4, 0x100000, 0xfff, {0x77359400}, {0x5, 0x4, 0xc4, 0x40, 0x0, 0x81, "a87ec847"}, 0x20000f2, 0x4, @offset=0x7, 0xdf, 0x0, r2})

23:06:34 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000040)={0x4, "78bac5102a932249f2af6f55d9cc36ebb4922454c18edd5e09d58744985bd2fb"})

23:06:34 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x5509, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:34 executing program 0:
r0 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x7, 0x80, '\x00', &(0x7f0000000040)=0x20})
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000140)={0x7f, "6266d6f75c1db1550780c3f3db53d21b14899eaa8218884b2a54e021f918a97b", 0x2, 0x80, 0xfee, 0x7, 0x8, 0x0, 0x40, 0x6})
dup2(0xffffffffffffffff, r1)

[ 1389.136307][T22352] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1389.173314][T22352] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:34 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xffff8e88}, 0x0)

23:06:34 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x5})

23:06:34 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:34 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x5, 0xffffffff, 0x0, 0xffffffff})

23:06:34 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x5646, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:34 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x577582)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xb, 0xea42, 0x8, 0xc800})

23:06:34 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xfffff000}, 0x0)

23:06:34 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:34 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x9ff, 0x408040)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x3, 0xfffffffd, 0x2003, 0x2, 0x3, 0x7, 0x0, 0x1}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0xcc)

[ 1389.430436][T22394] Debayer A: =================  START STATUS  =================
[ 1389.450375][T22394] Debayer A: Debayer Mean Window Size: 3
23:06:34 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x3923, 0x7fffffff, 0x10001}})
fallocate(r1, 0x5, 0xffffffffffffffb2, 0x1)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x5966bb1db5149ff1, 0x0, {0x9, 0x81, 0x201b, 0x0, 0x0, 0x3, 0x2}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0xffff, 0x5, 0x7, 0x0, 0xfffffffc, 0x0, 0x4})
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
pipe2$9p(&(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x0)
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x5, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r3, r4]}, 0x3)
r5 = dup(r2)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r9, 0x4004556b, 0x0)
pidfd_getfd(r5, r9, 0x0)
r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$VIDIOC_STREAMON(r10, 0x40045612, &(0x7f00000001c0))

23:06:34 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x103100, 0x41)

[ 1389.502165][T22394] Debayer A: ==================  END STATUS  ==================
23:06:34 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xffffff7f}, 0x0)

23:06:34 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

23:06:34 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x6364, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:35 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:35 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x2000)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:35 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x8903, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xffffff9e}, 0x0)

23:06:35 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x80000005, 0xc40)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:35 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:35 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x440280)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x4, 0x6})
syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffa, 0x10000)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data=[0xffffffff, 0x8, 0x8, 0x6129, 0x6, 0xc0c, 0x2000000, 0x9, 0x40, 0x20, 0x63d, 0x3f, 0x6, 0x6, 0x7fffffff, 0x5, 0x7f, 0x2, 0x9, 0x40005, 0x3f, 0xfffffffb, 0x100, 0x0, 0x1, 0x7ff, 0x1c, 0x0, 0xffffffec, 0x1, 0x8000, 0x6]})

23:06:35 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = syz_open_dev$video(&(0x7f0000000140), 0xfffffffffffffff8, 0x101200)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
r2 = eventfd(0xffffff00)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0xf000000, 0x1f, 0x4, r2, 0x0, &(0x7f0000000080)={0x990966, 0x2, '\x00', @p_u8=&(0x7f0000000040)=0x8}})

23:06:35 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x8912, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xfffffff0}, 0x0)

23:06:35 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
splice(r1, &(0x7f0000000040)=0xfffffffffffffff9, r0, &(0x7f0000000080)=0x400, 0x3ff, 0x4)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0))

23:06:35 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:35 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14)
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x65, 0x5, 0x1009, 0x8, 0x0, 0x3, 0x2, 0x5}})
close(r0)

23:06:35 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x2442)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000040)=0x5)

23:06:35 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x8913, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:35 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xfffffffc}, 0x0)

23:06:35 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x4, 0x800102a, r2, &(0x7f00000001c0)='./file0\x00')
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x4002, 0x0)
ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000180))
ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000040)={0xf0, 0x7, 0x4, 0x800, 0x29, {0x0, 0xea60}, {0x3, 0x8, 0x7, 0xb8, 0xc1, 0x6, "5b359029"}, 0x7fffffff, 0x3, @userptr=0xffffffffffffffff, 0x7})

23:06:35 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x8914, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:35 executing program 1:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8, 0x80000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2005201}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00020104000000002000380025aafdcd03008921b85d747574c344899ab9bf7941412088cb", @ANYRES32=r1, @ANYBLOB="0c00580044000000000000000c00580020000000000000000c00580004000000000000000c0058000f000000000000000c00580038000000000000000c0058001a00000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x41)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x100)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getaddr={0x14, 0x16, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040024}, 0x814)

23:06:35 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = epoll_create1(0x0)
r2 = epoll_create(0x5db1)
r3 = dup2(r2, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100))
pread64(r2, &(0x7f00000001c0)=""/144, 0x90, 0x10000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0))
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180))
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x3000000000000}, 0x0)

23:06:35 executing program 1:
syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffffffffff, 0x220200)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00040, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xa340})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000080)={0x0, 0xfffffff9, 0x8e, '\x00', &(0x7f0000000040)=0xa6})
close(r1)

23:06:35 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:35 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x8933, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:35 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xb, 0x102, 0x2, {0x2, 0xffff, 0x796850fd, 0x7fffffff}})

23:06:35 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0xc0000000, 0x6, "0c34de8ba8802541c546b8280cbd85018e278da87d748cbb629de89cc11f1e44", 0x200000002, 0x8, 0x402, 0xbbb4, 0x5f95, 0x0, 0x17, 0x3, [0x8004, 0x2, 0x7, 0x6676]})

23:06:35 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x40030000000000}, 0x0)

23:06:35 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x7, 0x4, '\x00', &(0x7f0000000080)=0x4})

23:06:35 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xae01, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:35 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x5, 0x5})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x0)
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = dup(r3)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f0000000140)={0xe4af, 0x4, 0x3})
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0))

23:06:35 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xae41, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:35 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:35 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000140)={0x401, "6a5e7394e7beb3702671e3b2f8bb6b8d44021589981dc0d74855a96b9546cf06", 0x2, 0x2, 0x5, 0x80000, 0x2})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x6, 0x3, '\x00', &(0x7f0000000040)=0x8})

23:06:36 executing program 4:
r0 = fork()
waitid(0x1, r0, &(0x7f0000000040), 0x40000000, &(0x7f0000000140))
wait4(r0, 0x0, 0x40000000, 0x0)
waitid(0x2, r0, &(0x7f0000000200), 0x40000000, &(0x7f0000000280))
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2)
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000340)={0x7, {0x9, 0x7, 0x9, 0x7}})
waitid(0x2, r0, &(0x7f0000000380), 0x1, &(0x7f0000000400))

23:06:36 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xf0ffffffffffff}, 0x0)

23:06:36 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xae60, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1390.696999][T22551] Debayer A: =================  START STATUS  =================
23:06:36 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

[ 1390.737812][T22551] Debayer A: Debayer Mean Window Size: 3
[ 1390.749546][T22551] Debayer A: ==================  END STATUS  ==================
[ 1390.762423][T22551] Debayer A: =================  START STATUS  =================
[ 1390.775497][T22551] Debayer A: Debayer Mean Window Size: 3
23:06:36 executing program 1:
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4)
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:06:36 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x100000000000000}, 0x0)

[ 1390.786415][T22551] Debayer A: ==================  END STATUS  ==================
23:06:36 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:36 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xae80, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:36 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000140)={0x0, @src_change})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:06:36 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000140)={0x1, 0x5b80ac414ea74a4d, @raw_data=[0x1, 0x8, 0x7fffffff, 0xff, 0xffffffff, 0x9, 0xee, 0xffffff80, 0x4, 0x9, 0x5c49, 0x0, 0x0, 0x100, 0x6c, 0x9]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000280)={"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"})
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r6)

23:06:36 executing program 1:
ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = socket$nl_audit(0x10, 0x3, 0x9)
dup2(r0, r1)

23:06:36 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x200000000000000}, 0x0)

23:06:36 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x121002)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x7, 0x16000)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x4, 0x6, 0x4, 0x100000, 0x3, {r1, r2/1000+10000}, {0x3, 0xc, 0x3f, 0x8, 0x87, 0xc1, "bba0b551"}, 0x193358f5, 0x4, @planes=&(0x7f0000000080)={0x9, 0x4, @mem_offset=0x3f, 0x3}, 0x1, 0x0, r3})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:36 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001200", 0x2e}], 0x1}, 0x0)

23:06:36 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xaeb7, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:36 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x240001, 0x0)
preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/123, 0x7b}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/97, 0x61}, {&(0x7f0000000400)=""/196, 0xc4}, {&(0x7f0000000500)=""/184, 0xb8}], 0x7, 0xfff, 0x1000)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000640)=0x1)
ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000040)={0xffff8000, "939b2e9b040cd2cbeb03db5d4c168de9f46c8deee66243cfd1df0849703feee9", 0x3, 0x200, 0x8, 0x3a, 0x10, 0x2, 0x6, 0x8})

23:06:36 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x4, 0xa, 0x4, 0x400, 0x20, {0x77359400}, {0x4, 0x0, 0x5, 0x3, 0xa7, 0xae, "ed4549f3"}, 0xc5, 0x4, @fd, 0x20, 0x0, r3})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:36 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x300000000000000}, 0x0)

23:06:37 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x400448c9, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:37 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2)
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @bt={0x9, 0x4b, 0xadd2, 0x100, 0x8, 0x7, 0x8, 0x7}})
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0xffffff02, 0x6, 0x2024, 0x0, 0x0, 0x8, 0x1}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:06:37 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000120e", 0x2e}], 0x1}, 0x0)

23:06:37 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x1000, 0xfffffff8}})
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:37 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x0)
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fda000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000040)={0x5, 0x0, 0x300f, 0x8ad, 0xff, 0x5, 0x2})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:37 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x400000000000000}, 0x0)

23:06:37 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x400448dd, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:37 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x200001, 0x0)
ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000140))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)={0x0, 0x8, 0x4, 0x100, 0x2, {}, {0x0, 0xc, 0xcd, 0x6e, 0x4, 0x0, "1e98bff6"}, 0x7, 0x4, @offset=0x7, 0xfc7b})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000040)={0x1ff, 0x3, 0x8, 0x21, 0xfffffff8, 0x5c, 0x3})

23:06:37 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001252", 0x2e}], 0x1}, 0x0)

23:06:37 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000140)={0x80000000, 0x100, "4910f10e78adaf34a96fadf97babbd2ad80fbaae2fe003cbec524132599b7b8a", 0x2, 0x8, 0x7fffffff, 0x6, 0xe7, 0x0, 0x8, 0x7, [0xcff5, 0x527a, 0x0, 0x80000000]})
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x2, 0x101, 0x4, {0x7, @raw_data="d8abd4188eaa6d29e7598bba585f9f463f5e475a55b13270ea08a0af6baf519e8edff5677dfae2f8f38de83fa8902af1bbcd0487f2aee4f3537943e2dfdd454dc881eb868e684f220e79f61d85511e4440824699c12a382f09ccaa5148dafd313f088c794456d1d7e0b138750a6efc87795340fd9d8596d24cd3592799d983ff60d4620c4c69d2239f6ee02b50239514283cf652cfb3e6427778b40c7ffbfae84f65c0f523b6646c78f548373838a3939f2cbf1f1e1ff2ea23cfb185bee38294c1553d6af74dbfc4"}, 0x9})

23:06:37 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x400454ca, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:37 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x500000000000000}, 0x0)

23:06:37 executing program 0:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x1, 0x4, [0x4, 0x6, 0x2, 0x3]}, &(0x7f0000000080)=0x10)
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:37 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001253", 0x2e}], 0x1}, 0x0)

23:06:37 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4004550a, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:37 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
syz_open_dev$video4linux(&(0x7f0000000040), 0x80, 0x100)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0xe4, 0x5, 0x0, 0x20, 0xffff4871, 0x2, 0x4})

23:06:37 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = dup(r6)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x4, 0x9, 0x4, 0xe000, 0xe219, {0x77359400}, {0x0, 0x8, 0x6, 0x8, 0x5, 0x3, "ec2c2a05"}, 0x88, 0x1, @offset=0x6, 0x45, 0x0, r7})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x6, 0x81, 0x2019, 0x1, 0x6, 0x8, 0x2, 0x6}})
r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r11, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x4, 0xffff, 0x9, 0x40}})

23:06:37 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x600000000000000}, 0x0)

23:06:37 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001254", 0x2e}], 0x1}, 0x0)

23:06:37 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x45800)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000080)=0x9)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:37 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40045564, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:37 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x8000, 0x5, 0x0, 0x0, 0x3})

23:06:37 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x700000000000000}, 0x0)

23:06:37 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001255", 0x2e}], 0x1}, 0x0)

23:06:37 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x800000000000000}, 0x0)

23:06:37 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400})

23:06:37 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4004556b, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:37 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x10000, 0x0, 0xb7})

23:06:37 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x3})

23:06:37 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x181000)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:38 executing program 0:
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10)
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x1})

23:06:38 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001256", 0x2e}], 0x1}, 0x0)

23:06:38 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x10000, 0x2, 0x4, 0x0, 0xfffffffc, 0x8, 0xfffffffc})

23:06:38 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40049409, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:38 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x900000000000000}, 0x0)

23:06:38 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000140)={0x2, 0x4a, &(0x7f0000000040)="1ee38e1286ec7b257b31b29dcf394005633456e6efb65f19c51ddb5027d46102f692b70e1fc7f616c9e0fa25c04e90fb59a3a4bae4c22769e3491e0a63e32fd52945de8487bc85ad7ce5f75ded1601891602cdebdc965c05c53ef15001fee3657d73018ea363ad7ca2f0dbfffdbc9272072bbed9ac766147803f5e5717f5a71fa1d279c2ef01088815b40090a1ef85886d8670a79092", {0x8, 0x9f, 0x4745504a, 0x0, 0x7, 0x25fb, 0x6, 0x20}})

23:06:38 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001257", 0x2e}], 0x1}, 0x0)

23:06:38 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x2, 0x4})

23:06:38 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40085503, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:38 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x3})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
syz_open_dev$char_raw(&(0x7f0000000040), 0x1, 0x40c02)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
fsetxattr$security_capability(r2, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x5, 0x3}, {0x0, 0x801}]}, 0x6a, 0x1)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x8, 0x2})

23:06:38 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xc00000000000000}, 0x0)

23:06:38 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00')
ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000140))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = dup(r1)
ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x9, 0x8, 0x1002, 0xf, 0x19, 0x3, 0x2, 0x6}})
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000080)={0x0, 0x0, 0x1f, '\x00', &(0x7f0000000040)=0x1})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
fcntl$addseals(0xffffffffffffffff, 0x409, 0x9)

23:06:38 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newae={0x5c, 0x1e, 0x1, 0x0, 0x0, {{@in6=@dev, 0x4}, @in6=@local}, [@replay_esn_val={0x1c}]}, 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, 0xa, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3f}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7f}, @IPSET_ATTR_PACKETS={0xc}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xa6e}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:38 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xe00000000000000}, 0x0)

23:06:38 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001258", 0x2e}], 0x1}, 0x0)

23:06:38 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4008556c, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:38 executing program 1:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="060000000000000001000000000000d29c14d819cbbf867ee98e4552f1460002000000240001801400018008000100e000000108000200ac1e00010c0002800500010000000000240002801400018008000100ac14140008000200ac1e00010c000280050001003750bd1039f127acf2687c288931000000"], 0x78}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x48}}, 0x0)
dup3(r1, r2, 0x0)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28579be0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpgrp(0xffffffffffffffff)
r3 = mq_open(&(0x7f00005a1ffb)='eth0\xd2', 0x42, 0x38, 0x0)
mq_timedsend(r3, &(0x7f0000001080)="7ab50fb3a93e9b73f9b098a0", 0xc, 0x400, 0x0)
r4 = dup2(r3, r3)
mq_notify(r4, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}})
mq_timedsend(r4, &(0x7f0000000080)="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", 0x1000, 0x1e, &(0x7f0000000000)={0x0, 0x989680})
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040))
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r5, 0x80045643, 0x3)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:06:38 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001259", 0x2e}], 0x1}, 0x0)

23:06:38 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x600c0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x3})
r1 = socket$phonet(0x23, 0x2, 0x1)
r2 = socket$inet6(0xa, 0x1, 0x40)
clock_gettime(0x0, &(0x7f00000000c0)={<r3=>0x0, <r4=>0x0})
ppoll(&(0x7f0000000080)=[{r1, 0x2140}, {r0, 0x20}, {r2, 0x202c}], 0x3, &(0x7f0000000100)={r3, r4+60000000}, &(0x7f0000000140)={[0x5c]}, 0x8)

23:06:38 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xf00000000000000}, 0x0)

23:06:38 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40085618, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:38 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x15b671247ccaaaf5)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x5})
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x990000, 0x800, 0x5, r0, 0x0, &(0x7f0000000000)={0x9e0904, 0x200, '\x00', @ptr=0x4}})
ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000140))
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000180)={0x20, 0x9})

23:06:38 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x2})

23:06:38 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40086602, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:38 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000125a", 0x2e}], 0x1}, 0x0)

23:06:38 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x1f00000000000000}, 0x0)

23:06:38 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x252000, 0x0)
dup(r1)

23:06:38 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x4, 0x1, 0x2002, 0x8, 0x6, 0x2, 0x2, 0x4}})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r4=>0x0, <r5=>0x0})
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)={0x2, 0xc, 0x4, 0x10, 0x100, {}, {0x2, 0x0, 0x0, 0x5, 0x3f, 0x8, "b24b9561"}, 0x440, 0x2, @userptr=0xf, 0x7, 0x0, <r6=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000300)={0x1ff, 0xf8d00baf1f42c0a4, 0x4, 0x10100, 0x4, {r4, r5/1000+60000}, {0x3, 0x0, 0x1d, 0x0, 0x20, 0x4, "390265af"}, 0x2, 0x2, @fd, 0x0, 0x0, r6})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000140)={0x1, 0x0, {0x2, 0x1, 0x1010, 0x8, 0x0, 0x0, 0xdc3e51b4b3d15c1d, 0x5}})
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x2}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:38 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
dup(r0)

23:06:38 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000125b", 0x2e}], 0x1}, 0x0)

23:06:39 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1, 0x50880)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0x4, 0x3001, 0x1})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:39 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4008ae89, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:39 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x3f00000000000000}, 0x0)

23:06:39 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x202000)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffc1})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:06:39 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000125c", 0x2e}], 0x1}, 0x0)

23:06:39 executing program 4:
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x5, 0x3ff, 0x7ff, 0x2e}, 0x7ff, [0x9, 0x3, 0x2, 0x1, 0x2, 0x5, 0x2, 0x81, 0x1, 0xfffffe01, 0xfff, 0x1, 0x8, 0x9, 0x7, 0x6, 0x35, 0x2, 0xee31, 0x82, 0x5, 0x5, 0x4, 0x80000000, 0x468, 0x0, 0x3, 0x5, 0x7, 0x101, 0x2, 0x101, 0x8000, 0x5, 0x4, 0x0, 0x80000002, 0x1, 0x103, 0xea6, 0x1, 0x38e, 0xb5, 0x7, 0x401, 0x2, 0x59, 0x1f, 0xfffffff9, 0x2, 0xfff, 0x8000, 0x1, 0x81, 0x2, 0x7, 0x7, 0x3, 0x1, 0x6, 0x9, 0xb1, 0xafa1, 0x8], [0xffffff33, 0x5, 0x6, 0xfffffff9, 0x9, 0x1, 0x0, 0x1ed, 0x3, 0x0, 0x8, 0x0, 0x2, 0x8001, 0x20, 0x6, 0x400, 0x8, 0x4, 0xfffffff9, 0x7, 0x2, 0x6, 0x7ff, 0x201, 0x8, 0x49e, 0x9c, 0x8, 0x5, 0x931, 0x54cf00f1, 0x8, 0x8000, 0x7505, 0x4, 0x7, 0x0, 0x0, 0x0, 0x1, 0xd5, 0x9, 0x3, 0x8, 0x3ff, 0xffffffff, 0x25eb31d0, 0x3ff, 0xffffffff, 0x0, 0x10001, 0xffffffe1, 0x9, 0x9, 0x30, 0x8000000, 0x8, 0xb344, 0x5, 0xffff, 0x63dd6fd8, 0x6, 0x84b], [0x1, 0x5, 0x1, 0x0, 0x8000, 0xb1fb, 0x2, 0xfffeffff, 0x2, 0x80000001, 0x3, 0xff, 0x7fff, 0x9, 0x7, 0x0, 0x5, 0x7, 0xbc86, 0x9, 0x20a8, 0xff, 0x0, 0x6, 0x0, 0x1, 0x9, 0x5, 0x7f, 0x80000001, 0x9, 0x401, 0x6, 0x3, 0xff, 0x9, 0x400, 0x100, 0x101, 0x7fff, 0x5, 0x1ff, 0x1800000, 0x8, 0x81, 0xfffff001, 0x80000000, 0x3, 0xff, 0x9, 0xc502a156, 0x7fffffff, 0x8, 0x80, 0x5, 0x7, 0x101, 0x5, 0x7ff, 0x6, 0x9, 0x3, 0x40, 0x7f], [0x4, 0x5, 0x7, 0x401, 0x6, 0x1f, 0x8001, 0x40, 0x1a, 0x7fffffff, 0x3, 0x9, 0x80, 0x3e80, 0x10001, 0x6, 0x9, 0x5e88, 0x81, 0xfffffff7, 0x9, 0x5, 0x38d, 0x8, 0x7fffffff, 0x1, 0x6, 0x1, 0x3, 0x4, 0x7fffffff, 0x9, 0x200, 0x9, 0x0, 0x6, 0x17de, 0x4, 0x0, 0x0, 0x8001, 0x4, 0xf99c, 0xfffff001, 0x4, 0x6, 0x6cfd, 0x8, 0x100, 0x0, 0x3, 0x4, 0xe8, 0x6, 0x80000000, 0x8, 0x4, 0x4, 0x1ff, 0x1, 0x6728, 0xdcd, 0xfffffff7, 0x80000000]}, 0x45c)
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000040)={0xfff7fffc, 0x1})

[ 1394.158981][T22887] validate_nla: 93 callbacks suppressed
[ 1394.159001][T22887] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:39 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xa45, 0x100)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000})
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x240, 0x80000001, 0x2024, 0x3, 0x7, 0x1, 0x2, 0x6}})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000180)={0x3, 0x0, '\x00', {0x0, @reserved}})
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x7, 0x40, '\x00', &(0x7f00000000c0)})

23:06:39 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)=',', 0x1, 0xfffffffffffffffd)
r3 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f00000014c0)="e2185064a34921170c485e5ba7189ecc9b7bb7d3603ddb40e805f5f14665edcaa2832ee941c8f0bade3e54fab7614426b9dad2df28e2afdda157f9d8ed32d0d304a5616fda09cf2dc5ab374395b1b703c8050b58a16f340937239ceb97ba20bc67e8197426176027b4b9dbf5291e10b75aa09121f5e638a9794479cd5e2a3d29dd2e8282c45220e36777326cf9de22f1244a6e0b7fb55e0e36a1e6f747c6372da9571ff4cbcca8e8047d6eceef80560db32e34c90b195a92592d2fa122f6e455", 0xc0, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)=',', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000380)={r2, r3, r4}, &(0x7f00000015c0)=""/161, 0xa1, &(0x7f0000000440)={&(0x7f00000003c0)={'crct10dif\x00'}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:39 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x6000000000000000}, 0x0)

23:06:39 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4008ae90, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1394.259220][T22896] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1394.280935][T22887] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1394.292793][T22896] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:39 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5e5956dcd7b1df7194a6fcced3f86834d1f139cdcc29451b33fd5143cb9907773b8af61676b0f86f97ec5edebc593f3111c5bb1f5dc5fd118cd46ddd1ab8f3b3b3d1cb658db91a87958f28ed5dcbef31302665df1f781361da7eae86c628160b1b0a89cba4dbd3c72465eb49c976ea29ee1cee6ab90411"], 0x92c83)
r3 = dup(0xffffffffffffffff)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f00000002c0)={0xb, 0x24, &(0x7f0000000240)="7a5a8a399ceda3b20a015ad509e38cc94f950165084c15e20407fb5c4eaf0229d1ea7ba88157af6d3e0fc75170e5a66cdb32c97f39273853087c5d599516e45bf3356670d32df8ac30ec30d82b0647", {0x14e144bf, 0x4, 0x31324d59, 0x6, 0x6, 0x8, 0x4, 0x9}})
r7 = dup2(r1, r2)
ioctl$VIDIOC_QUERYSTD(r7, 0x8008563f, &(0x7f0000000080))
r8 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x408900, 0x0)
ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x8, 0x5, 0x1})
dup2(r0, r0)
fdatasync(0xffffffffffffffff)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r9, 0x4004556b, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000200)={0x2, 0x1})

23:06:39 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000125d", 0x2e}], 0x1}, 0x0)

23:06:39 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40095505, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:39 executing program 4:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080))
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffffa, 0x8000)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
syz_open_dev$video4linux(&(0x7f0000000040), 0x1f, 0x3)

23:06:39 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x888effff00000000}, 0x0)

[ 1394.478011][T22921] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:39 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x0)
fdatasync(r2)
r3 = dup(r1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x9, 0x7, 0x7f, 0x8}})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:06:39 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4010ae68, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1394.563472][T22934] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1394.585561][T22921] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:40 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000002c0)={0xfffffbf7, 0xffffffff})
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = dup(r2)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="f30faef0670f7ef5b809008ed80fc7ab0028660f1edb6766c7442400bfe6815d6766c7442402c74900006766c744240600000000670f011c246765f267c2ea4a66b8010000000f01c1660f72f5023ed81f", 0x51}], 0x1, 0x48, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r5=>0x0, <r6=>0x0})
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000340)={0x6, 0x7, 0x4, 0x8, 0xfff, {r5, r6/1000+60000}, {0x4, 0x2, 0x1, 0x7f, 0x6, 0x23, "e52881f7"}, 0x1000, 0x2, @fd, 0xfffffffb, 0x0, r3})
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x3c, 0x0, 0x2008, 0x9, 0x6, 0x6, 0x3, 0x6}})
ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000140))
r7 = dup3(r4, r2, 0x80000)
ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0xf13, 0x2, 0x1, "387d65f0471613058b3c7b8b83f64b8c786a17d63c769ccb52533eda1cba4bf6", 0xb5315258})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

[ 1394.618600][T22934] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:40 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000125e", 0x2e}], 0x1}, 0x0)

23:06:40 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x9effffff00000000}, 0x0)

23:06:40 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x1)

23:06:40 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40186366, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:40 executing program 1:
pipe(&(0x7f0000000040))
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x3, 0x1})

23:06:40 executing program 0:
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x1, 0x4, 0x40, 0x8, 0xffffffffffffffff})
syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100))

23:06:40 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0xfffffffc})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@flat=@handle={0x73682a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x10a, 0x1}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x1}], 0x7b, 0x0, &(0x7f00000001c0)="c4935c452f6596b6600016734ed072ff029163117ca0130d9ddc7a463a807dc10317d9b09913dd7887825cbe117c2a1890b41ffc3554f15c647372cfbebddd0c63a6171774e06061bee2a5b597b855a0a19755dc5e8e52240392d65b64caf4d720be8ec0e6baf45cd67e1c74977918a052d758e57849a7bec8e512"})

[ 1394.820430][T22965] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:40 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x401c5820, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:40 executing program 1:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xab, 0xab, 0x8, [@restrict={0x1}, @const={0x4, 0x0, 0x0, 0xa, 0x4}, @datasec={0xc, 0x5, 0x0, 0xf, 0x3, [{0x5, 0x240000, 0x1ff}, {0x1, 0x401, 0xffffff6c}, {0x5, 0x5ac2, 0xe3}, {0x4, 0x6, 0x6}, {0x4}], '&V;'}, @struct={0x8, 0x4, 0x0, 0x4, 0x0, 0x81, [{0x5, 0x4, 0x2fe8}, {0x4, 0x3, 0xff}, {0x7, 0x5, 0x9}, {0x2, 0x0, 0x4}]}, @restrict={0xd, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x30, 0x2e, 0x5f]}}, &(0x7f0000000040)=""/28, 0xcc, 0x1c}, 0x20)
fcntl$getflags(r0, 0x1)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc040564a, &(0x7f00000000c0)={0x0, 0x3, 0xfffffc01})

[ 1394.888931][T22973] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:40 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000125f", 0x2e}], 0x1}, 0x0)

23:06:40 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xf0ffffff00000000}, 0x0)

23:06:40 executing program 0:
ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000040)={0x1, 0x1})
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:40 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4020565a, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:40 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xfcffffff00000000}, 0x0)

23:06:40 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000040)={0x0, @motion_det})

23:06:40 executing program 4:
syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x1, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x9})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000180))
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x0)
r4 = dup2(0xffffffffffffffff, r3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = socket$bt_hidp(0x1f, 0x3, 0x6)
fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000140))
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000040)=0x10000)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @pic={0x6, 0xff, 0x1f, 0x1, 0x1, 0x5, 0x3, 0xde, 0x0, 0x1, 0x7, 0xfb, 0x3, 0xe0, 0x1, 0x7f}})
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x7)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ff5000/0x6000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f00000001c0)="cee464e5cb56fef19df6360f068cefb3a6cb40e67b66ebe079482d36ead0f06abc0bfadef2f4c241ab54b66aa93baa60021dbe483369a9", 0x37}, 0x68)

23:06:40 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001260", 0x2e}], 0x1}, 0x0)

23:06:40 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4020565b, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:40 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001261", 0x2e}], 0x1}, 0x0)

23:06:40 executing program 0:
syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@sco, 0x80, 0x0}}, 0x0)
r3 = syz_io_uring_setup(0x1dda, &(0x7f0000000080)={0x0, 0x40b947, 0x2, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000001c0)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r5}}, 0x80000000)
r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = dup(r6)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat(r7, &(0x7f0000000180)='./file0\x00', 0x100, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)="00ba8dabff2195622344d3074c4b3cd2a27187c01c76cbcbde6bd6fe040bf768337e6dca738c34044b31c26a63afb3247fc068f51ae18f92886af592f6bdf4a58ff81f6d8a56d275e24d93df4090779caf27ff50964e5a343c05dd6b0e9bba", 0x5f, 0x20040000, 0x0, {0x0, r5}}, 0xfffff1c6)
r11 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x2c0001)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r11, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:40 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xfd04000000000000}, 0x0)

23:06:40 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001262", 0x2e}], 0x1}, 0x0)

23:06:40 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4020940d, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:40 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x80100)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x100, 0x8, 0x4, 0x100, 0x10001, {r2, r3/1000+10000}, {0x4, 0x0, 0x7, 0x0, 0x1f, 0x7, '}Jzy'}, 0x0, 0x2, @planes=&(0x7f0000000180)={0x9, 0x10001, @fd, 0x7f}, 0x18c7, 0x0, r4})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585605, &(0x7f0000000100)={0x4, 0x4, 0x3, 0x1, 0x6, 0xfffffffc})
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0xf41c, 0x0, 0x1005, 0x7, 0xc, 0x6, 0x1, 0x5}})

23:06:40 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffc)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r8 = syz_io_uring_complete(0x0)
syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="0f2350b8180d8ec00f20d86635080000000f22d82e0f01c30f785ff6260f01c9ba4300b8653aef0f01d10f3a0fe500660f388104", 0x34}], 0x1, 0x5, &(0x7f00000001c0), 0x0)
ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x0)
write(r7, &(0x7f0000000140), 0x0)
syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x4, 0x732, 0x9, r0, 0x0, &(0x7f0000000080)={0x9f0903, 0xfffffffb, '\x00', @p_u32=&(0x7f0000000040)=0x3ff}})

23:06:40 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xffffff7f00000000}, 0x0)

23:06:40 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:40 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0xc, 0x3, 0x1, {0x1, 0x5, 0x7, 0x4}})
clock_gettime(0x0, &(0x7f0000000080))
r2 = dup(r0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x0, 0xa, 0x4, 0x100000, 0x672, {0x77359400}, {0x4, 0x1, 0x9, 0x2, 0x10, 0x6, "000400"}, 0x1, 0x4, @offset, 0x4, 0x0, r2})
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)

23:06:40 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001263", 0x2e}], 0x1}, 0x0)

23:06:40 executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0xc0, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x101, 0x105040)
ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x8000, 0x9, '\x00', &(0x7f0000000080)=0x8})
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000240))
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x14022591, 0xfb1, 0x2017, 0x8, 0x6, 0x0, 0x1, 0x6}})
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0xc0280, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x140d, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040081}, 0x41)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xfff})

23:06:41 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4040ae77, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:41 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xffffffff00000000}, 0x0)

23:06:41 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x10081)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x20, 0x200000, 0x1})

23:06:41 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001264", 0x2e}], 0x1}, 0x0)

23:06:41 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000080)={0x0, 0x9, 0x7fffffff, '\x00', &(0x7f0000000040)=0x81})

23:06:41 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10)
tee(r0, r1, 0x1f6, 0x0)

23:06:41 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x0)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x10)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xfffffffd})

23:06:41 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4040aea0, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:41 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0xfffffffffffff000}, 0x0)

23:06:41 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001265", 0x2e}], 0x1}, 0x0)

23:06:41 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x509241)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x402000, 0x24)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})

23:06:41 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:41 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
r2 = dup2(r1, r0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x311000, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x48, 0x0, &(0x7f0000000280)=[@register_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/142, 0x8e, 0x1, 0x28}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}], 0x6f, 0x0, &(0x7f0000000300)="e4f68e1d127096a0a8f2c4f212bda6dd18b1ab411a62b92c32909eefc947484d0139c35854cc41c6009f87917c36fbc8120ffaeb1ee0bf1501b3bcc3dbdc918ec00dc2903fb7e1de242aef23da3d6e89f9a7f07743bbdc19b3b443405aa2b4946ce31a8b72f65d6f6eda289daea454"})
r4 = syz_open_dev$midi(&(0x7f0000000480), 0x3, 0x40)
lseek(r4, 0xffffffff7fffffff, 0x2)
openat$incfs(r2, &(0x7f0000000440)='.pending_reads\x00', 0x2000, 0x105)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000400)={0x9f0000, 0x208c92cb, 0x8001, r5, 0x0, &(0x7f00000003c0)={0x9a0914, 0x9f, '\x00', @ptr=0xfff}})
dup2(r3, r0)

23:06:41 executing program 1:
syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc040564a, &(0x7f0000000100)={0x9, 0x1, 0x0, 0x9, 0x0, 0xfffffffd})

23:06:41 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x2}, 0x0)

23:06:41 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001266", 0x2e}], 0x1}, 0x0)

23:06:41 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000080)={0x6, 0x1f})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000040)={0x2, 0x1, 0x0, 0x40, 0x73, 0x3f})

23:06:41 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x405c5503, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:41 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x8100000000000, 0x0)
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x1, 0x6, "c9eb3911674ed4ab070d90c171e29e8dfffda48229e0f8a38e4a3130fb760556", 0x7, 0x6af3, 0x9, 0x7f, 0x100})

23:06:41 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x3}, 0x0)

23:06:41 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001267", 0x2e}], 0x1}, 0x0)

23:06:41 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4090ae82, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:41 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data=[0x5, 0xd715, 0x8, 0x2, 0x3, 0x2fb599b9, 0x7, 0x7ff, 0x45a, 0x4, 0x3ff, 0x7ff, 0x7, 0x20, 0xfff, 0x1a936eaa, 0x6, 0x7, 0x7fff, 0x8, 0x401, 0x7, 0x6, 0x20, 0x9, 0x101, 0x101, 0x2, 0x572fad3, 0x5, 0x7, 0xec8]})

23:06:41 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001268", 0x2e}], 0x1}, 0x0)

23:06:41 executing program 4:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x280201, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x1})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x8, 'bond_slave_1\x00', {'ipvlan0\x00'}, 0x1f})
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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")
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x7, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x2}, {0x5, 0x2b, 0xff}, {0x7, 0x9, 0x8, 0x38}, {0x4, 0x2, 0xae, 0x5b800000}, {0x47, 0x3, 0x1f, 0xa48}, {0x0, 0x6, 0x4, 0x42adb62d}, {0x8, 0x3a, 0x6, 0xff}]}, 0x10)

23:06:41 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x0, 0x4, 0x21b, 0x4, 0x22, 0x80, 0x4})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:41 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x4}, 0x0)

23:06:41 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x41015500, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:41 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x45800)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000080)=0x9)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:41 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001269", 0x2e}], 0x1}, 0x0)

23:06:41 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x0)
fcntl$setstatus(r3, 0x4, 0x40400)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@handle={0x73682a85, 0x1101, 0x1}, @flat=@weak_binder={0x77622a85, 0x110a, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/25, 0x19, 0x0, 0x33}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}], 0xd8, 0x0, &(0x7f0000000240)="9dfe47fb0cf2ab0ada0968511a36f863a1aa9d5efba3ac0f92c43e3693c753abb19862c7ccd768bf698d0710a5229a1944252aac1ccc720b1ec3582647cd8314f2c9f1472d9732dcf75f13c5d29ae10e2c6e43a66fa41eed8b3fdb2ae71fb36c7464b169e71a26b83b910b4cee211ad36b0e054569796776c1691653f3670d84e7420f95537f6b12e697d275f352bdda1ddc2f9c059a947086f02999e92197ab752c2ea3626ac6866e95e82657cec4a97fca7aa173f111144c8c96ec10adb0465276d941bf7145457291f59f988700ebe9fc0ee87c5c7ba7"})
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))

23:06:41 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x5}, 0x0)

23:06:41 executing program 1:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x2e)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r1=>0x0)
fcntl$setown(0xffffffffffffffff, 0x8, r1)
r2 = eventfd2(0x80000001, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f00000000c0)={0x0, 0x1, [0x2008, 0x15bf, 0x6, 0x8, 0x31db, 0x7]})
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4c840, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
read$FUSE(r5, &(0x7f00000043c0)={0x2020}, 0x2020)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000280)={0x0, @motion_det})
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x5)
fchdir(r7)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0xc040564a, &(0x7f0000002280)={0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe})
ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000140)={0xa, @raw_data="06aba6f82a9397e77f3bed53662982116647621d7eb68919a1d8aa1bc7fc2b1c7d1359bd02ad07254d1c334e0380cfa705e11d85296c6e9f23bb3d67ebef7a45c164c414fc40cc2e8cc5517b664318354fe32836bd7bab2d3e7171d34b7095253ea5179b886d37d207f86859bd7709c869a7faac0ebcf269ba9142f1bbf6e27b986d2fe391b2b8f34bbceb6166d037b2ae3407e758a9698d3de4de02c8743b84691aaf454f3e22fc45b59d555f42b92d8b593e976e8e19d82e141b76e3e75b3de86bf8f1bb43b5a8"})

23:06:41 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4138ae84, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:41 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x45800)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000080)=0x9)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:42 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000126a", 0x2e}], 0x1}, 0x0)

23:06:42 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0xfffffff8, 0xa, 0x4, 0x100000, 0x4, {r1, r2/1000+60000}, {0x4, 0x2, 0x3, 0x4, 0xa1, 0x0, "df531ad6"}, 0x4, 0x2, @planes=&(0x7f0000000080)={0x0, 0x3, @mem_offset=0x4, 0x8}, 0x6f5})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:06:42 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x4f, 0xffff])
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:42 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x45800)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000080)=0x9)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:42 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x6}, 0x0)

23:06:42 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x4188aea7, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:42 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000126b", 0x2e}], 0x1}, 0x0)

23:06:42 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
pipe2(&(0x7f0000000040), 0x45800)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:42 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x7}, 0x0)

23:06:42 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x80085502, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:42 executing program 1:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x7ff, 0x101800)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x0)
fcntl$setstatus(r1, 0x4, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000080), 0x5, 0x455800)
preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/205, 0xcd}, {&(0x7f0000000240)=""/186, 0xba}, {&(0x7f0000000080)}, {&(0x7f0000000400)=""/230, 0xe6}], 0x4, 0x5aaab271, 0x100, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4000000000002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:06:42 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000126c", 0x2e}], 0x1}, 0x0)

23:06:42 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:42 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x8}, 0x0)

[ 1397.078980][    T7] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1397.359534][    T7] usb 1-1: too many configurations: 186, using maximum allowed: 8
[ 1398.159376][    T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1398.168859][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1398.176864][    T7] usb 1-1: Product: syz
[ 1398.189455][    T7] usb 1-1: Manufacturer: syz
[ 1398.204783][    T7] usb 1-1: SerialNumber: syz
[ 1398.269506][    T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1398.858867][    T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1399.081911][    T7] usb 1-1: ath9k_htc: Invalid TX pipe: 0
[ 1399.087599][    T7] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
23:06:45 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x80085617, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:45 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x3, 0x100a, 0x0, 0x2, 0x8, 0x2, 0x5}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:06:45 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000126d", 0x2e}], 0x1}, 0x0)

23:06:45 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x9}, 0x0)

23:06:45 executing program 4:
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

[ 1400.023225][T23265] udc-core: couldn't find an available UDC or it's busy
[ 1400.030012][T20268] usb 1-1: USB disconnect, device number 69
[ 1400.030232][T23265] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1400.050321][    T7] ath9k_htc: Failed to initialize the device
23:06:45 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_complete(0x0)
r3 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1, 0x0, 0xe4, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r3, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r5, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1400.076058][T20268] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1400.100610][T23275] validate_nla: 58 callbacks suppressed
[ 1400.100628][T23275] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:45 executing program 4:
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:45 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x8008563f, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:45 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xc}, 0x0)

23:06:45 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
dup2(r0, r1)

[ 1400.184549][T23289] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:45 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
r3 = syz_io_uring_setup(0x1dda, &(0x7f0000000080)={0x0, 0xb947}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, 0x0, &(0x7f0000000180)=<r4=>0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x81, 0x101200)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0xfffe, 0x80101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r6, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:45 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x80086301, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1400.237592][T23275] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1400.257857][T23289] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:45 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000126e", 0x2e}], 0x1}, 0x0)

23:06:45 executing program 4:
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:45 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = dup(r3)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x6, 0x8, 0x4, 0x40, 0x8, {r1, r2/1000+60000}, {0x5, 0x8, 0x7, 0x3, 0x1f, 0x2, 'cR_a'}, 0xfffffff8, 0x1, @fd=r4, 0x7, 0x0, r8})

23:06:45 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xe}, 0x0)

23:06:45 executing program 4:
r0 = syz_open_dev$video4linux(0x0, 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:45 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x80086601, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1400.403592][T23312] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1400.475892][T23316] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1400.515612][T23312] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:45 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xf}, 0x0)

23:06:45 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
dup2(r1, r0)

[ 1400.536465][T23316] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:45 executing program 4:
r0 = syz_open_dev$video4linux(0x0, 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:45 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:46 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
fsetxattr$security_ima(r1, &(0x7f0000000100), &(0x7f0000000380)=@md5={0x1, "0ff1f1fbc76b68d79b6438b050ceb9bf"}, 0x11, 0x3)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:46 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000126f", 0x2e}], 0x1}, 0x0)

23:06:46 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x60}, 0x0)

23:06:46 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x0, 0xca)
ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000140)={0x0, 0x3, "3173f8f90b405c4ddb835b3758947e77f158cfb797fefb9b5f4d03f0bbd51acf", 0x81, 0x3, 0x9, 0x2, 0xfffff7e9, 0x6, 0x40, 0x200, [0xffffffff, 0x6a32, 0x80000000, 0x9]})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x0)
ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x8}, {r0, 0x440}, {r2, 0xd345}, {r1, 0x15c9}, {r3, 0x2338}, {r4, 0x80}], 0x6, &(0x7f0000000080), &(0x7f00000000c0)={[0x5]}, 0x8)

23:06:46 executing program 4:
r0 = syz_open_dev$video4linux(0x0, 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:46 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x80189439, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:46 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x801c581f, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:46 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

[ 1400.995104][T23362] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:46 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xf0}, 0x0)

23:06:46 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:46 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x3, 0x1005})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f00000000c0)={0x4, 0x1, 0x7, 0x8, 0x7, 0x7fff, 0xa})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

[ 1401.056969][T23367] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:46 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001270", 0x2e}], 0x1}, 0x0)

[ 1401.321325][T20268] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 1401.650391][T20268] usb 1-1: too many configurations: 186, using maximum allowed: 8
[ 1402.479696][T20268] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1402.488891][T20268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1402.496882][T20268] usb 1-1: Product: syz
[ 1402.501471][T20268] usb 1-1: Manufacturer: syz
[ 1402.506099][T20268] usb 1-1: SerialNumber: syz
[ 1402.549400][T20268] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1403.128955][T20268] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1403.361301][T20268] usb 1-1: ath9k_htc: Invalid TX pipe: 0
[ 1403.367046][T20268] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
23:06:49 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x7956, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r1, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={<r2=>r1, 0x400, 0x1, 0xa1})
ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x40, 0x5, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:49 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001271", 0x2e}], 0x1}, 0x0)

23:06:49 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x80405600, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:49 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:49 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x5, 0x5, 0x2018, 0x4, 0x3, 0x7, 0x1, 0x6}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x3})

23:06:49 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x300}, 0x0)

[ 1404.283923][T23405] udc-core: couldn't find an available UDC or it's busy
[ 1404.290890][T23405] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1404.307245][   T20] usb 1-1: USB disconnect, device number 70
[ 1404.327093][T20268] ath9k_htc: Failed to initialize the device
[ 1404.354147][   T20] usb 1-1: ath9k_htc: USB layer deinitialized
23:06:49 executing program 4:
syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:49 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001272", 0x2e}], 0x1}, 0x0)

23:06:49 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x4000)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x1020000000000401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:49 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x80845663, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:49 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x4fd}, 0x0)

23:06:49 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040))
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:06:49 executing program 4:
syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:49 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001273", 0x2e}], 0x1}, 0x0)

23:06:49 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x80885659, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:50 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x500}, 0x0)

23:06:50 executing program 4:
syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:06:50 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffffffff7f, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x290b, 0xbf2, 0x2017, 0x7, 0x4, 0x2, 0x3, 0x1}})

23:06:50 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001274", 0x2e}], 0x1}, 0x0)

23:06:50 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x600}, 0x0)

[ 1404.970471][   T20] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 1405.269112][   T20] usb 1-1: too many configurations: 186, using maximum allowed: 8
[ 1406.089142][   T20] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1406.098310][   T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1406.108228][   T20] usb 1-1: Product: syz
[ 1406.112543][   T20] usb 1-1: Manufacturer: syz
[ 1406.117259][   T20] usb 1-1: SerialNumber: syz
[ 1406.169540][   T20] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1406.818852][   T20] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1407.030609][   T20] usb 1-1: ath9k_htc: Invalid TX pipe: 0
[ 1407.036284][   T20] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
23:06:53 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x6, 0x3, 0x100a, 0x3, 0x4, 0x6, 0x1, 0x2}})
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f00000002c0)=""/94, 0x5e}], 0x2, 0xa2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0x76, 0x10000})

23:06:53 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, 0x0)

23:06:53 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001275", 0x2e}], 0x1}, 0x0)

23:06:53 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x700}, 0x0)

[ 1407.952812][T23490] udc-core: couldn't find an available UDC or it's busy
[ 1407.956774][ T1224] usb 1-1: USB disconnect, device number 71
[ 1407.963184][T23490] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1407.972572][   T20] ath9k_htc: Failed to initialize the device
[ 1407.989100][ T1224] usb 1-1: ath9k_htc: USB layer deinitialized
23:06:53 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1, 0xfffffffe}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:53 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x8138ae83, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:53 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x81f8943c, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:53 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x900}, 0x0)

[ 1408.085506][T23510] validate_nla: 22 callbacks suppressed
[ 1408.085525][T23510] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1408.124753][T23510] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:53 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, 0x0)

23:06:53 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x0, 0x2}})
read$hidraw(0xffffffffffffffff, &(0x7f0000000480)=""/47, 0x2f)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_io_uring_setup(0x15c3, &(0x7f0000000400)={0x0, 0x24f4, 0x8, 0x2, 0x5c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000380))
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:53 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0xca000, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000})
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

[ 1408.134485][T23510] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1408.155487][T23515] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:53 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001276", 0x2e}], 0x1}, 0x0)

23:06:53 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x8208ae63, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:53 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xc00}, 0x0)

23:06:53 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, 0x0)

23:06:53 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1408.281563][T23530] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1408.314914][T23530] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:53 executing program 1:
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000))

23:06:53 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xe00}, 0x0)

23:06:53 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100))

[ 1408.372045][T23530] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1408.407443][T23540] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:53 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x301040, 0x4)

23:06:53 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1408.528902][ T1224] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 1408.819221][ T1224] usb 1-1: too many configurations: 186, using maximum allowed: 8
[ 1409.649064][ T1224] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1409.658214][ T1224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1409.666545][ T1224] usb 1-1: Product: syz
[ 1409.670956][ T1224] usb 1-1: Manufacturer: syz
[ 1409.675543][ T1224] usb 1-1: SerialNumber: syz
[ 1409.719415][ T1224] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1410.308911][ T1224] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1410.531959][ T1224] usb 1-1: ath9k_htc: Invalid TX pipe: 0
[ 1410.537741][ T1224] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1411.454925][T23571] udc-core: couldn't find an available UDC or it's busy
[ 1411.462130][T23571] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1411.472499][T23494] usb 1-1: USB disconnect, device number 72
[ 1411.482722][ T1224] ath9k_htc: Failed to initialize the device
23:06:56 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
read$hidraw(0xffffffffffffffff, &(0x7f0000000100)=""/1, 0x1)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:56 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba80000012f2", 0x2e}], 0x1}, 0x0)

23:06:56 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xf00}, 0x0)

23:06:56 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100))

23:06:56 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0085504, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:56 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000040))

[ 1411.499411][T23494] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1411.560903][T23585] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1411.576471][T23585] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:06:57 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100))

23:06:57 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc008561b, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:06:57 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x1f00}, 0x0)

23:06:57 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba80000012f8", 0x2e}], 0x1}, 0x0)

23:06:57 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x0, 0x2}})
read$hidraw(0xffffffffffffffff, &(0x7f0000000480)=""/47, 0x2f)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_io_uring_setup(0x15c3, &(0x7f0000000400)={0x0, 0x24f4, 0x8, 0x2, 0x5c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000380))
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:06:57 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x3f00}, 0x0)

[ 1411.968863][T23494] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 1412.108886][T20268] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1412.308891][T23494] usb 1-1: too many configurations: 186, using maximum allowed: 8
[ 1412.389356][T20268] usb 5-1: too many configurations: 186, using maximum allowed: 8
[ 1413.208896][T20268] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1413.218326][T20268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1413.230654][T20268] usb 5-1: Product: syz
[ 1413.234967][T20268] usb 5-1: Manufacturer: syz
[ 1413.241847][T20268] usb 5-1: SerialNumber: syz
[ 1413.268887][T23494] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1413.286593][T23494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1413.289526][T20268] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1413.302063][T23494] usb 1-1: Product: syz
[ 1413.308099][T23494] usb 1-1: Manufacturer: syz
[ 1413.322135][T23494] usb 1-1: SerialNumber: syz
[ 1413.371878][T23494] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1413.878858][T20268] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1414.008873][T23494] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1414.151387][T20268] usb 5-1: ath9k_htc: Invalid TX pipe: 0
[ 1414.157219][T20268] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1414.233593][T23494] usb 1-1: ath9k_htc: Invalid TX pipe: 0
[ 1414.239400][T23494] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1415.081871][ T9683] usb 5-1: USB disconnect, device number 51
[ 1415.095304][T20268] ath9k_htc: Failed to initialize the device
[ 1415.103021][ T9683] usb 5-1: ath9k_htc: USB layer deinitialized
23:07:00 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
close(r1)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1415.167420][T23592] udc-core: couldn't find an available UDC or it's busy
[ 1415.177115][T23592] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1415.205636][    T7] usb 1-1: USB disconnect, device number 73
23:07:00 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc008561c, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:00 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba80000012f9", 0x2e}], 0x1}, 0x0)

23:07:00 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x6000}, 0x0)

23:07:00 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000012c0)={0x0, @l2tp={0x2, 0x0, @empty, 0xfffffffc}, @l2={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6, 0x1}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000300)='veth0_macvtap\x00', 0x1, 0x10000000000000, 0x1})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000018c0)={<r7=>0x0, ""/256, <r8=>0x0, <r9=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001ac0)={"6cc3e040ce2f7ef8cb505ce038b3ebf1", r6, r10, {0x1, 0x7}, {0x5, 0x2}, 0x83, [0xf43, 0xd0, 0x9, 0x8, 0x8, 0x6f, 0x2, 0x7, 0x1, 0x6, 0x2da, 0x57, 0x4, 0x10001, 0x7, 0xe830]})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000001c0)={{r1}, r10, 0x4, @inherit={0x68, &(0x7f0000000140)={0x0, 0x4, 0x3, 0xbfb9, {0x2a, 0x9, 0x0, 0x9, 0x80000001}, [0x9, 0x7c, 0x100, 0x3ff]}}, @subvolid=0xffffffffffffffff})
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
finit_module(r11, &(0x7f00000000c0)='\x00', 0x2)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000040)={0x0, {0xffffffff, 0x9}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004ee40)={0xfffffffffffeffff, [], 0x1, "d77c10c393aa50"})
r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r12, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000004da40)={0x0, ""/256, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f000004dc40)={0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r12, 0xd000943d, &(0x7f000004ee40)={0xfffffffffffeffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13, r14}], 0x1, "d77c10c393aa50"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053380)={0x200, [{r3, r5}, {r8}, {}, {0x0, r5}, {}, {}, {r8, r9}, {r4}, {r8, r9}, {r4, r5}, {0x0, r5}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {r8}, {}, {r8, r9}, {r8, r5}, {r7}, {r4, r5}, {0x0, r5}, {}, {r8}, {r8}, {r7}, {}, {r3}, {r3}, {}, {0x0, r5}, {}, {}, {r7, r5}, {r4}, {0x0, r9}, {}, {r8}, {0x0, r5}, {r4}, {r4, r9}, {0x0, r5}, {0x0, r5}, {r7, r5}, {r8, r9}, {0x0, r5}, {r7}, {r8, r5}, {0x0, r5}, {}, {0x0, r9}, {}, {r8, r5}, {0x0, r5}, {r7, r5}, {0x0, r9}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r3, r9}, {r4}, {0x0, r5}, {0x0, r9}, {r3}, {0x0, r9}, {r7, r5}, {}, {r3, r5}, {}, {}, {r8}, {r7}, {r3}, {}, {0x0, r9}, {r3, r5}, {}, {r7}, {r8, r9}, {0x0, r5}, {0x0, r5}, {}, {r7}, {0x0, r9}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {r7}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {r4}, {r7, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r7, r9}, {}, {r3, r9}, {}, {0x0, r5}, {0x0, r5}, {0x0, r9}, {}, {0x0, r5}, {r3}, {0x0, r9}, {r8}, {}, {r7, r9}, {r4, r5}, {r7}, {r7}, {r3}, {}, {r7, r5}, {r3}, {r4}, {0x0, r9}, {r3, r9}, {0x0, r9}, {r3, r5}, {r7}, {r8}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {r3, r5}, {0x0, r9}, {}, {r4}, {}, {0x0, r5}, {}, {r3}, {r3}, {}, {r3, r5}, {r8}, {r4}, {r8, r5}, {r3}, {}, {}, {r7}, {r4}, {}, {}, {}, {}, {r4}, {}, {r7}, {0x0, r9}, {}, {0x0, r5}, {r7}, {0x0, r9}, {r3}, {r4, r5}, {r4}, {}, {0x0, r5}, {r8}, {r8}, {}, {}, {}, {r3}, {0x0, r9}, {r7}, {r8}, {}, {0x0, r9}, {}, {r8, r5}, {}, {r8, r5}, {r3}, {0x0, r5}, {}, {}, {r8, r9}, {r8, r5}, {0x0, r5}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {r3}, {}, {}, {}, {}, {r4, r5}, {r3, r5}, {r3, r5}, {}, {r7, r5}, {0x0, r9}, {r8, r5}, {0x0, r9}, {0x0, r5}, {r4, r5}, {r3}, {}, {0x0, r5}, {r4}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r4, r9}, {r8}, {0x0, r9}, {}, {r4, r5}, {r8}, {0x0, r9}, {0x0, r5}, {0x0, r9}, {0x0, r5}, {}, {}, {0x0, r9}, {}, {}, {r7}, {r8, r5}, {r3, r5}, {r3}, {0x0, r9}, {}, {r7, r9}, {}, {}, {r13, r5}], 0x6, "dc2f8a4d75373f"})

23:07:00 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x4000)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x1020000000000401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1415.227192][T23494] ath9k_htc: Failed to initialize the device
[ 1415.252163][    T7] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1415.265742][T23664] validate_nla: 6 callbacks suppressed
[ 1415.265759][T23664] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:00 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc008ae05, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:00 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x4000)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x1020000000000401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1415.336801][T23673] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1415.360935][T23664] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:00 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000080)={0x9, 0x0, 0x2004, 0x1, 0x9, {0x6, 0x7a}})
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000280)={0x0, 0x2, @start={0x3, 0x1}})
syz_open_dev$video4linux(&(0x7f00000000c0), 0x1ff, 0x14800)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000240)={0xa20000, 0x581, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990900, 0x0, '\x00', @p_u16=&(0x7f00000001c0)=0x7}})
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x9d, 0x5, 0x1005, 0x9, 0x6, 0x3, 0x1, 0x5}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:07:00 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xf000}, 0x0)

23:07:00 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x3ff, 0x0)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x8, 0x40000003, 0x0, 0x4ac, 0x0, 0x1}, 0x7)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0xfffffffffffffe63, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e6ea, [{{0x9, 0x2, 0xffffffffffffff1b}}]}}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x3, 0x440080)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r3, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000380)=@conn_svc_rsp={0x0, 0x0, 0xa, "ed97235a", {0x3, 0x102, 0x0, 0x2, 0x101, 0x81, 0x2}})
syz_open_dev$hidraw(&(0x7f0000000180), 0x0, 0x1)
syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)=ANY=[], &(0x7f0000000c40)={0x0, 0xf, 0xed, {0x5, 0xf, 0xed, 0x5, [@ptm_cap={0x3}, @generic={0xa2, 0x10, 0x3, "e8737c6675910bf85d638ae9e51a6212a667637628cdc32434786dacae0f3a68fb38207c81d581f17ffe731a1ac18a91b4c50c11dc14d46bb45fa008cae741443cc2cef145f2171fca4b83d0d3a2a72334239a940ee42e24568a25cbec9183f95190da75f9455801a0cc640b2651e70fa6217c827bad92aff086e4007195acc6f5bf9a78002700cebfb92f52a8e74d22ee26898fc7bd71c9bcbb78e5e0143c"}, @generic={0x39, 0x10, 0x3, "89fe896083703bc3327bd6a04cd3ed0b227f8c1b473d2af7c19aeff864e4bc186a5613cf81781fdaf137b4eaa27bbbacfca6f80edb69"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0xf, 0x2, 0x1}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0xb, 0x8, 0x6, "b60ec13c", "b360d20f"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x4, 0x1f, 0x0, 0x374e, 0xfff}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000780)={0x40, 0x16, 0x1d, "8bd340ef013b07d62e14c83d526116d23a1b4cdf5cab6ad0c791dec615"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xe0}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x2c0, 0x8, [0xf0]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x6f}, &(0x7f0000000940)={0x40, 0xb, 0x2, "d45e"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x17, 0x6}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "95ed"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x4}})
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1415.392811][T23673] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:00 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba800000121f", 0x2e}], 0x1}, 0x0)

23:07:00 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:00 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba80000012e0", 0x2e}], 0x1}, 0x0)

[ 1415.512043][T23692] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1415.523852][T23692] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1415.534545][T23692] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1415.543842][T23696] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:00 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0189436, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:01 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xfd04}, 0x0)

23:07:01 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000300), 0x5, 0x5a9700)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0xfffffffd})
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)={0x2, 0xd, 0x4, 0x4, 0x63, {0x0, 0x2710}, {0x5, 0x8, 0x21, 0xff, 0x5, 0x9, "b5d1e330"}, 0x2, 0x4, @userptr=0x5fc8, 0x7, 0x0, r3})
r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r9 = dup(r8)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r9, r12, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000280))
ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f0000000140)={0x2, 0x0, {0xfc8, 0x3, 0x5001, 0x7, 0x6, 0x8, 0x0, 0x4}})
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0xffff, 0x7, 0x4, 0x40, 0xffffff01, {}, {0x5, 0xc, 0x2, 0x7e, 0x3, 0xc3, "6766e572"}, 0x24, 0x3, @offset, 0x2, 0x0, r7})

23:07:01 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1415.644739][T23709] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1415.682898][T23709] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:01 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0xa}], 0x1}, 0x0)

[ 1415.761352][ T1224] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1415.771162][    T7] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1416.058898][    T7] usb 1-1: too many configurations: 234, using maximum allowed: 8
[ 1416.079562][ T1224] usb 5-1: too many configurations: 186, using maximum allowed: 8
[ 1416.189051][    T7] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[ 1416.197013][    T7] usb 1-1: can't read configurations, error -22
[ 1416.370315][    T7] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 1416.648884][    T7] usb 1-1: too many configurations: 234, using maximum allowed: 8
[ 1416.769129][    T7] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[ 1416.777165][    T7] usb 1-1: can't read configurations, error -22
[ 1416.785972][    T7] usb usb1-port1: attempt power cycle
[ 1416.969043][ T1224] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1416.978261][ T1224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1416.987391][ T1224] usb 5-1: Product: syz
[ 1416.992102][ T1224] usb 5-1: Manufacturer: syz
[ 1416.997438][ T1224] usb 5-1: SerialNumber: syz
[ 1417.049423][ T1224] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1417.198844][    T7] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 1417.329098][    T7] usb 1-1: too many configurations: 234, using maximum allowed: 8
[ 1417.448924][    T7] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[ 1417.457101][    T7] usb 1-1: can't read configurations, error -22
[ 1417.608869][    T7] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 1417.708865][ T1224] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1417.738910][    T7] usb 1-1: too many configurations: 234, using maximum allowed: 8
[ 1417.859133][    T7] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[ 1417.867190][    T7] usb 1-1: can't read configurations, error -22
[ 1417.875015][    T7] usb usb1-port1: unable to enumerate USB device
[ 1417.951054][ T1224] usb 5-1: ath9k_htc: Invalid TX pipe: 0
[ 1417.956967][ T1224] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
23:07:04 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
fsetxattr$security_ima(r1, &(0x7f0000000100), &(0x7f0000000380)=@md5={0x1, "0ff1f1fbc76b68d79b6438b050ceb9bf"}, 0x11, 0x3)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:04 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:04 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x30000}, 0x0)

23:07:04 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = fcntl$dupfd(r0, 0x605, r0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000040)={0x8, 0x0, 0x201e, 0x1, 0x4, 0x5})
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000140)={0x2, @output={0x0, 0x1, {0x7, 0x5}, 0x1, 0xe9}})

23:07:04 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0xf}], 0x1}, 0x0)

23:07:04 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(r0, &(0x7f0000000a80)=""/22, 0xfffffffffffffe68)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
r5 = syz_usb_connect(0x2, 0x382, &(0x7f0000000ac0)={{0x12, 0x1, 0x310, 0x4d, 0xbd, 0xaa, 0xff, 0xdf6, 0x2c, 0xe9c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x370, 0x2, 0x2, 0x6, 0x0, 0x8e, [{{0x9, 0x4, 0xb7, 0x81, 0x9, 0x9b, 0xe0, 0x41, 0x2, [@hid_hid={0x9, 0x21, 0x400, 0x6, 0x1, {0x22, 0xac}}, @uac_as], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x8, 0x5, 0x2, [@generic={0x21, 0xc2419580e64bbd62, "50250a8fc9438dc94b6f9bcb7a3c2aa89b4bf54c443a63928daa7b3cf0c804"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7f, 0x6c}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x50, 0x5, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x2f, 0x401}, @generic={0x5f, 0x2, "9494379c3ce86cb1d869f104b15e4e0e1f794899c67b1ffd8082943199fc29950f832323eee672ac0330a3fe006a69ff9935685b4595faaeeb46d1578c6d9e0315a1daf1296f2a415df40a6afd08634784141a2174d1bbf8151c159398"}]}}, {{0x9, 0x5, 0x5, 0x15, 0x200, 0x80, 0x2, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xca, 0x9}, @generic={0x93, 0x23, "203146851119c5c37a1bc0c6f04e4a9232bdf86e3e9281045405ec3b0430b5bf61db4f211b1a1829c87607ddc67e699bae967db06086436904b7f05f7745acc5ed67140744beafeee9b22142c460f152729cb56170d357d334ee5e5e4cc5f5ab5a23a54da421a2e76a71ab3ffe3b567186be9f27a8b94490dde88fac635fc21a05fd6a048c97f57295770730bc14a5da13"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x4, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x9, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x2, 0xdb79}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x8, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc5, 0x7f}, @generic={0x91, 0x6, "03d10d32df3b5fc81ffb52bea52f5f8cab6c92f10050f9a1b1bffaa0b7ee088094f2adf23275843313f3af3de67ebbdb2969ab144e7f97c757f27f2e2783b00b1a19495f416f6bfabb39dd4f2d4fb958b43d9a43c7a8939114ac96c47b6de780de0932a2b91cfb497a82e9ab46a8fb61c4ea55da6a4d732c2a5b57feeb354908ffdd3b33d957549cb0cbe14ca7956e"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x81, 0x0, 0x2}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x7, 0x3, 0x3, [@generic={0xf4, 0x23, "a50688e0d98884059a239f66b6d74ffd4843ebfbf296d8c688292e9ae363ed0e5b7921a6f476329156fd9408141e97fee07c30e9d7118370496cc3ca8d19d3822ce585ebb6736b326ff4c9e42c2dff92baec078c83fe97aeb32247d60aba768374bb77b4f8cfde84e0b02be4c2c595f80342d3babf0cde280cf09ea0b3e1701c47a42f61778a84b5f7f6be1fcb81ffa2e1061eae319e610388aadbb0d750c39a80779db0ace0d05ca43f6e7e6c1cd1561e99a4074826b996affd109a184dcc42c16f97744744564fc2f2797ffc55f55cbf353642d11e2498d9c9e2d95bfcc82ab010990a26a76b2f1436d2b7c72153cdfc15"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x20, 0x0, 0x72}}]}}, {{0x9, 0x4, 0xa1, 0x3, 0x4, 0xba, 0xe9, 0x25, 0x0, [], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x1, 0x29, 0xff}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x1, 0xda, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd8, 0x2}]}}, {{0x9, 0x5, 0x80, 0x14, 0x200, 0xa8, 0xc0, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x5, 0x68, 0x1}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x40, 0x50, 0x1, 0xff}, 0x75, &(0x7f0000000780)={0x5, 0xf, 0x75, 0x6}, 0x2, [{0x0, &(0x7f0000000100)=@lang_id={0x0, 0x3, 0x404}}]})
syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000a40)=@ready={0x0, 0x0, 0x8, "c6c18e91", {0x1, 0x4, 0x3b, 0x0, 0x9}})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1418.881576][T23494] usb 5-1: USB disconnect, device number 52
[ 1418.913200][ T1224] ath9k_htc: Failed to initialize the device
23:07:04 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x10}], 0x1}, 0x0)

[ 1418.934096][T23494] usb 5-1: ath9k_htc: USB layer deinitialized
23:07:04 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x34000}, 0x0)

23:07:04 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000080)={0x2, 0x3})
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x9, 0x8, 0x1, 0x4000})

23:07:04 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:04 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
fsetxattr$security_ima(r1, &(0x7f0000000100), &(0x7f0000000380)=@md5={0x1, "0ff1f1fbc76b68d79b6438b050ceb9bf"}, 0x11, 0x3)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:04 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x400300}, 0x0)

23:07:04 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x25}], 0x1}, 0x0)

23:07:04 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
fsetxattr$security_ima(r1, &(0x7f0000000100), &(0x7f0000000380)=@md5={0x1, "0ff1f1fbc76b68d79b6438b050ceb9bf"}, 0x11, 0x3)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:04 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = signalfd4(r0, &(0x7f0000000040)={[0x7fff]}, 0x8, 0x81000)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x0, 0x1ff})

23:07:04 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:04 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x3d}], 0x1}, 0x0)

[ 1419.238791][   T20] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 1419.571350][   T20] usb 1-1: too many configurations: 186, using maximum allowed: 8
[ 1419.588810][    T7] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1419.869616][    T7] usb 5-1: too many configurations: 186, using maximum allowed: 8
[ 1420.478952][   T20] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1420.488290][   T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1420.497264][   T20] usb 1-1: Product: syz
[ 1420.501883][   T20] usb 1-1: Manufacturer: syz
[ 1420.506474][   T20] usb 1-1: SerialNumber: syz
[ 1420.551054][   T20] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1420.668915][    T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1420.678241][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1420.686956][    T7] usb 5-1: Product: syz
[ 1420.691453][    T7] usb 5-1: Manufacturer: syz
[ 1420.696123][    T7] usb 5-1: SerialNumber: syz
[ 1420.739472][    T7] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1421.168926][   T20] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1421.308862][    T7] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1421.391047][   T20] usb 1-1: ath9k_htc: Invalid TX pipe: 0
[ 1421.396772][   T20] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1421.550680][    T7] usb 5-1: ath9k_htc: Invalid TX pipe: 0
[ 1421.556588][    T7] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1421.593719][T23765] udc-core: couldn't find an available UDC or it's busy
[ 1421.600947][T23765] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
23:07:07 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x105, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
lsetxattr$trusted_overlay_redirect(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x8, 0x1)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x2e, &(0x7f0000000100)=@generic={0x1, 0x2, 0x26, "90ae13e6", "ded6b9f36dc4cb22bf13410c92bf2568f45ab38d5e1c3b953216b24e731cc3b1857dd762f154"})

[ 1422.322881][T23765] udc-core: couldn't find an available UDC or it's busy
[ 1422.330214][T23765] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1422.337959][T23846] udc-core: couldn't find an available UDC or it's busy
[ 1422.345274][T23846] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1422.365593][T20268] usb 1-1: USB disconnect, device number 78
23:07:07 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xf0ffff}, 0x0)

23:07:07 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0xffffffff, 0x1, 0x748, 0x0, 0x0, 0x0, 0x80000})

23:07:07 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc020f509, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:07 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x44}], 0x1}, 0x0)

[ 1422.380278][   T20] ath9k_htc: Failed to initialize the device
[ 1422.392064][T20268] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1422.416903][T23853] validate_nla: 14 callbacks suppressed
[ 1422.416920][T23853] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:07 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0xdf, 0x8dc, 0xa2b9b617dfc40ceb, 0x0, 0xa, 0x4, 0x3, 0xef27fb9615e4a8e1}})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d80)='/sys/module/dvb_usb_vp702x', 0x2000, 0x126)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000e00)={0x2, 0x9, 0x4, 0x2000, 0x3e76, {}, {0x5, 0x0, 0x7, 0x1f, 0x3f, 0x4, "10aad451"}, 0x7, 0x4, @planes=&(0x7f0000000dc0)={0x9, 0x7, @fd=r3}, 0x80000000})
clock_gettime(0x0, &(0x7f00000000c0)={<r7=>0x0, <r8=>0x0})
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x41, 0x3, 0x4, 0xf060, 0x3, {r7, r8/1000+10000}, {0x3, 0xc, 0x83, 0xb0, 0x2, 0x9, "c24ae2e2"}, 0x0, 0x4, @fd=<r9=>0xffffffffffffffff, 0x2})
write$binfmt_elf32(r9, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x40, 0xaf, 0x4, 0x2, 0x6, 0x20, 0xd1, 0x38, 0x2e1, 0x20, 0x8, 0x20, 0x1, 0x40, 0x6}, [{0x6474e551, 0x7, 0x488d, 0x10001, 0x745, 0x7ff, 0x0, 0x2}], "44d2e86a335f0997834d61f9d0d8f9f7803e7184ab1595338ac4214d77b44d3bae4fcba563606df91c0536db3c945a374f3a053df3cbaf278a74ad0d961dfbe8bece27d209367255da4cc8c8a0ffe61bbd9b1636af840625474baebbe6c7031158209345ffe1616f966b0f84f4512e3c3644233f24e8be9b4513a65774c49d10f0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xad9)
r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000080)={0x3, 0x4, 0x3, "380e0309265f301ed50c500f6b5e4175b11f628b2f29fb5b454123b2d5149ee1", 0x64737664})
r11 = fsmount(r10, 0x1, 0x4)
ioctl$VIDIOC_CROPCAP(r11, 0xc02c563a, &(0x7f0000000d40)={0x4, {0x80000001, 0x2, 0x7}, {0x1000, 0x5, 0x7, 0x3ff}, {0xedc9, 0x9}})

23:07:07 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:07 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x45}], 0x1}, 0x0)

[ 1422.464331][T23853] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1422.478940][T23853] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1422.487708][T23865] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:07 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(r0, &(0x7f0000000a80)=""/22, 0xfffffffffffffe68)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
r5 = syz_usb_connect(0x2, 0x382, &(0x7f0000000ac0)={{0x12, 0x1, 0x310, 0x4d, 0xbd, 0xaa, 0xff, 0xdf6, 0x2c, 0xe9c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x370, 0x2, 0x2, 0x6, 0x0, 0x8e, [{{0x9, 0x4, 0xb7, 0x81, 0x9, 0x9b, 0xe0, 0x41, 0x2, [@hid_hid={0x9, 0x21, 0x400, 0x6, 0x1, {0x22, 0xac}}, @uac_as], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x8, 0x5, 0x2, [@generic={0x21, 0xc2419580e64bbd62, "50250a8fc9438dc94b6f9bcb7a3c2aa89b4bf54c443a63928daa7b3cf0c804"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7f, 0x6c}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x50, 0x5, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x2f, 0x401}, @generic={0x5f, 0x2, "9494379c3ce86cb1d869f104b15e4e0e1f794899c67b1ffd8082943199fc29950f832323eee672ac0330a3fe006a69ff9935685b4595faaeeb46d1578c6d9e0315a1daf1296f2a415df40a6afd08634784141a2174d1bbf8151c159398"}]}}, {{0x9, 0x5, 0x5, 0x15, 0x200, 0x80, 0x2, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xca, 0x9}, @generic={0x93, 0x23, "203146851119c5c37a1bc0c6f04e4a9232bdf86e3e9281045405ec3b0430b5bf61db4f211b1a1829c87607ddc67e699bae967db06086436904b7f05f7745acc5ed67140744beafeee9b22142c460f152729cb56170d357d334ee5e5e4cc5f5ab5a23a54da421a2e76a71ab3ffe3b567186be9f27a8b94490dde88fac635fc21a05fd6a048c97f57295770730bc14a5da13"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x4, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x9, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x2, 0xdb79}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x8, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc5, 0x7f}, @generic={0x91, 0x6, "03d10d32df3b5fc81ffb52bea52f5f8cab6c92f10050f9a1b1bffaa0b7ee088094f2adf23275843313f3af3de67ebbdb2969ab144e7f97c757f27f2e2783b00b1a19495f416f6bfabb39dd4f2d4fb958b43d9a43c7a8939114ac96c47b6de780de0932a2b91cfb497a82e9ab46a8fb61c4ea55da6a4d732c2a5b57feeb354908ffdd3b33d957549cb0cbe14ca7956e"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x81, 0x0, 0x2}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x7, 0x3, 0x3, [@generic={0xf4, 0x23, "a50688e0d98884059a239f66b6d74ffd4843ebfbf296d8c688292e9ae363ed0e5b7921a6f476329156fd9408141e97fee07c30e9d7118370496cc3ca8d19d3822ce585ebb6736b326ff4c9e42c2dff92baec078c83fe97aeb32247d60aba768374bb77b4f8cfde84e0b02be4c2c595f80342d3babf0cde280cf09ea0b3e1701c47a42f61778a84b5f7f6be1fcb81ffa2e1061eae319e610388aadbb0d750c39a80779db0ace0d05ca43f6e7e6c1cd1561e99a4074826b996affd109a184dcc42c16f97744744564fc2f2797ffc55f55cbf353642d11e2498d9c9e2d95bfcc82ab010990a26a76b2f1436d2b7c72153cdfc15"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x20, 0x0, 0x72}}]}}, {{0x9, 0x4, 0xa1, 0x3, 0x4, 0xba, 0xe9, 0x25, 0x0, [], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x1, 0x29, 0xff}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x1, 0xda, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd8, 0x2}]}}, {{0x9, 0x5, 0x80, 0x14, 0x200, 0xa8, 0xc0, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x5, 0x68, 0x1}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x40, 0x50, 0x1, 0xff}, 0x75, &(0x7f0000000780)={0x5, 0xf, 0x75, 0x6}, 0x2, [{0x0, &(0x7f0000000100)=@lang_id={0x0, 0x3, 0x404}}]})
syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000a40)=@ready={0x0, 0x0, 0x8, "c6c18e91", {0x1, 0x4, 0x3b, 0x0, 0x9}})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:07 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
r5 = signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x4004, @fd, 0x800, &(0x7f0000000540)=""/64, 0x40, 0x2, 0x0, {0x0, r6}}, 0x7)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:07 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1422.551933][ T8828] usb 5-1: USB disconnect, device number 53
[ 1422.584330][    T7] ath9k_htc: Failed to initialize the device
23:07:08 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x1000000}, 0x0)

[ 1422.614161][ T8828] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1422.639850][ T3263] ieee802154 phy0 wpan0: encryption failed: -22
[ 1422.646174][ T3263] ieee802154 phy1 wpan1: encryption failed: -22
[ 1422.696937][T23887] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:08 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc02c5625, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:08 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x2000000}, 0x0)

[ 1422.780305][T23898] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:08 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x6})
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x10d0c0)
dup2(r1, r0)

23:07:08 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(r0, &(0x7f0000000a80)=""/22, 0xfffffffffffffe68)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
r5 = syz_usb_connect(0x2, 0x382, &(0x7f0000000ac0)={{0x12, 0x1, 0x310, 0x4d, 0xbd, 0xaa, 0xff, 0xdf6, 0x2c, 0xe9c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x370, 0x2, 0x2, 0x6, 0x0, 0x8e, [{{0x9, 0x4, 0xb7, 0x81, 0x9, 0x9b, 0xe0, 0x41, 0x2, [@hid_hid={0x9, 0x21, 0x400, 0x6, 0x1, {0x22, 0xac}}, @uac_as], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x8, 0x5, 0x2, [@generic={0x21, 0xc2419580e64bbd62, "50250a8fc9438dc94b6f9bcb7a3c2aa89b4bf54c443a63928daa7b3cf0c804"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7f, 0x6c}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x50, 0x5, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x2f, 0x401}, @generic={0x5f, 0x2, "9494379c3ce86cb1d869f104b15e4e0e1f794899c67b1ffd8082943199fc29950f832323eee672ac0330a3fe006a69ff9935685b4595faaeeb46d1578c6d9e0315a1daf1296f2a415df40a6afd08634784141a2174d1bbf8151c159398"}]}}, {{0x9, 0x5, 0x5, 0x15, 0x200, 0x80, 0x2, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xca, 0x9}, @generic={0x93, 0x23, "203146851119c5c37a1bc0c6f04e4a9232bdf86e3e9281045405ec3b0430b5bf61db4f211b1a1829c87607ddc67e699bae967db06086436904b7f05f7745acc5ed67140744beafeee9b22142c460f152729cb56170d357d334ee5e5e4cc5f5ab5a23a54da421a2e76a71ab3ffe3b567186be9f27a8b94490dde88fac635fc21a05fd6a048c97f57295770730bc14a5da13"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x4, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x9, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x2, 0xdb79}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x8, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc5, 0x7f}, @generic={0x91, 0x6, "03d10d32df3b5fc81ffb52bea52f5f8cab6c92f10050f9a1b1bffaa0b7ee088094f2adf23275843313f3af3de67ebbdb2969ab144e7f97c757f27f2e2783b00b1a19495f416f6bfabb39dd4f2d4fb958b43d9a43c7a8939114ac96c47b6de780de0932a2b91cfb497a82e9ab46a8fb61c4ea55da6a4d732c2a5b57feeb354908ffdd3b33d957549cb0cbe14ca7956e"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x81, 0x0, 0x2}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x7, 0x3, 0x3, [@generic={0xf4, 0x23, "a50688e0d98884059a239f66b6d74ffd4843ebfbf296d8c688292e9ae363ed0e5b7921a6f476329156fd9408141e97fee07c30e9d7118370496cc3ca8d19d3822ce585ebb6736b326ff4c9e42c2dff92baec078c83fe97aeb32247d60aba768374bb77b4f8cfde84e0b02be4c2c595f80342d3babf0cde280cf09ea0b3e1701c47a42f61778a84b5f7f6be1fcb81ffa2e1061eae319e610388aadbb0d750c39a80779db0ace0d05ca43f6e7e6c1cd1561e99a4074826b996affd109a184dcc42c16f97744744564fc2f2797ffc55f55cbf353642d11e2498d9c9e2d95bfcc82ab010990a26a76b2f1436d2b7c72153cdfc15"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x20, 0x0, 0x72}}]}}, {{0x9, 0x4, 0xa1, 0x3, 0x4, 0xba, 0xe9, 0x25, 0x0, [], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x1, 0x29, 0xff}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x1, 0xda, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd8, 0x2}]}}, {{0x9, 0x5, 0x80, 0x14, 0x200, 0xa8, 0xc0, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x5, 0x68, 0x1}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x40, 0x50, 0x1, 0xff}, 0x75, &(0x7f0000000780)={0x5, 0xf, 0x75, 0x6}, 0x2, [{0x0, &(0x7f0000000100)=@lang_id={0x0, 0x3, 0x404}}]})
syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000a40)=@ready={0x0, 0x0, 0x8, "c6c18e91", {0x1, 0x4, 0x3b, 0x0, 0x9}})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:08 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc02c564a, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1422.858083][T23887] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1422.873383][T23898] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:08 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x5b}], 0x1}, 0x0)

23:07:08 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:08 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x40001)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x2})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0xc5, 0x5, 0x300c, 0x0, 0x6, 0x8}})

[ 1422.958919][T20268] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 1422.988134][T23917] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:08 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x3000000}, 0x0)

[ 1423.009233][T23917] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1423.259148][T20268] usb 1-1: too many configurations: 186, using maximum allowed: 8
[ 1423.269017][ T8828] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1423.571377][ T8828] usb 5-1: too many configurations: 186, using maximum allowed: 8
[ 1424.149266][T20268] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1424.158673][T20268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1424.168096][T20268] usb 1-1: Product: syz
[ 1424.173091][T20268] usb 1-1: Manufacturer: syz
[ 1424.177883][T20268] usb 1-1: SerialNumber: syz
[ 1424.219583][T20268] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1424.428974][ T8828] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1424.438584][ T8828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1424.447268][ T8828] usb 5-1: Product: syz
[ 1424.451906][ T8828] usb 5-1: Manufacturer: syz
[ 1424.456512][ T8828] usb 5-1: SerialNumber: syz
[ 1424.499572][ T8828] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1424.868905][ T3600] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1425.081128][ T3600] usb 1-1: ath9k_htc: Invalid TX pipe: 0
[ 1425.087078][ T3600] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1425.129017][ T8828] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1425.371990][ T8828] usb 5-1: ath9k_htc: Invalid TX pipe: 0
[ 1425.377969][ T8828] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1425.573801][T23910] udc-core: couldn't find an available UDC or it's busy
[ 1425.580960][T23910] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
23:07:11 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
syz_open_dev$hidraw(&(0x7f0000000100), 0x8, 0x1e003)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc3, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:11 executing program 1:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000340)={0x3, 0x5, 0x4})
preadv2(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/124, 0x7c}], 0x1, 0x7fff, 0x377, 0x1)
r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = dup(r7)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r8, 0x40184150, &(0x7f0000000200)={0x0, &(0x7f0000000280)="5419e2bb895e34734fb06e74757929aec2fb5e2ef42caa763f0a8f1d5468189196d3979a4c952a2e6389c7715037eab5aefffca02631582b2001c63b272dd1c3d0c4497fb9276cee477620efb1300cbd60f5d9ff6b5b2a73ed39feb9ba4a30097efbdc646f67382355228eb7be3fb92458f72c42e2c75d1a3c4d4d5bfc3af951507b646e6f6d103b392e97bf2b4decd032b5b2a97f100dea5df1dae7ea81ff052bb36a7686", 0xa5})
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r11, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_CROPCAP(r8, 0xc02c563a, &(0x7f0000000080)={0xa, {0x15, 0x800, 0x2, 0x401}, {0x33, 0xc0, 0xfe7, 0xa000000}, {0x0, 0x2}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x4})
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000040)={0x0, 0x3, 0x2011, 0x1})

23:07:11 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0305615, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1426.002317][T23955] udc-core: couldn't find an available UDC or it's busy
[ 1426.006420][ T9683] usb 1-1: USB disconnect, device number 79
[ 1426.013798][T23955] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1426.023946][ T3600] ath9k_htc: Failed to initialize the device
[ 1426.039910][ T9683] usb 1-1: ath9k_htc: USB layer deinitialized
23:07:11 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0xc0}], 0x1}, 0x0)

23:07:11 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x4000000}, 0x0)

23:07:11 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0305616, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:11 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0xec0}], 0x1}, 0x0)

23:07:11 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000440)={0x0, 0x2bd, 0x1, 0x0, 0x8000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300)=<r3=>0x0, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x401, 0x1, &(0x7f0000000100)="2c3dfa3a", 0x10001, 0x0, 0x0, {0x1, r4}}, 0x7)
r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000400), 0x0, 0x81)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r6, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:11 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x5000000}, 0x0)

23:07:11 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc038563b, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:11 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000080)={0x7, "d77aafaaad113994ea483c6787e3080175aefb558051de5e715b58f945e8c9d9", 0x2})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:07:11 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
r5 = signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x4004, @fd, 0x800, &(0x7f0000000540)=""/64, 0x40, 0x2, 0x0, {0x0, r6}}, 0x7)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1426.328694][   T20] usb 5-1: USB disconnect, device number 54
[ 1426.345491][ T8828] ath9k_htc: Failed to initialize the device
[ 1426.379363][   T20] usb 5-1: ath9k_htc: USB layer deinitialized
23:07:11 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x33fe0}], 0x1}, 0x0)

23:07:11 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc038563c, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:11 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x6000000}, 0x0)

23:07:11 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000300)={0x0, @ctrl={0x0, 0x0, @value64}})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000180)="360fc7bee0280fc777f40f20d86635080000000f22d866b9980800000f32baf80c66b8544b438b66efbafc0c66b80b00000066ef0f23822ef6a3df11363e360fc776776bc1000f9209", 0x49}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)={0x0, @ctrl})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r6 = fcntl$dupfd(r5, 0xaed9fd72f51ba3c6, r0)
clock_gettime(0x0, &(0x7f0000000200)={<r7=>0x0, <r8=>0x0})
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x1, 0x3, 0x4, 0x1000, 0x2, {r7, r8/1000+60000}, {0x3, 0x0, 0x3, 0xdc, 0x7, 0x0, '%]xs'}, 0x9, 0x2, @userptr=0x8001, 0x1, 0x0, r6})
ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140))

23:07:11 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
r5 = signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x4004, @fd, 0x800, &(0x7f0000000540)=""/64, 0x40, 0x2, 0x0, {0x0, r6}}, 0x7)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:11 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040563d, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:12 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x200000ee}], 0x1}, 0x0)

[ 1426.668927][ T9683] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 1426.959156][ T9683] usb 1-1: too many configurations: 186, using maximum allowed: 8
[ 1427.759236][ T9683] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1427.768477][ T9683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1427.777427][ T9683] usb 1-1: Product: syz
[ 1427.782057][ T9683] usb 1-1: Manufacturer: syz
[ 1427.786654][ T9683] usb 1-1: SerialNumber: syz
[ 1427.829466][ T9683] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1428.398939][ T9683] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1428.621761][ T9683] usb 1-1: ath9k_htc: Invalid TX pipe: 0
[ 1428.627425][ T9683] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1429.543689][T24070] udc-core: couldn't find an available UDC or it's busy
[ 1429.550860][T24070] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1429.564962][ T8828] usb 1-1: USB disconnect, device number 80
[ 1429.580390][ T9683] ath9k_htc: Failed to initialize the device
23:07:14 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0xff, 0x5c9000)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:14 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
r5 = signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x4004, @fd, 0x800, &(0x7f0000000540)=""/64, 0x40, 0x2, 0x0, {0x0, r6}}, 0x7)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:14 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x7000000}, 0x0)

23:07:14 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040563e, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:15 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x7ffff000}], 0x1}, 0x0)

23:07:15 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x3, 0x1, 0x1002, 0x2, 0x0, 0x4}})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @ctrl={0x0, 0x0, @value64}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000000)=[0xcab3, 0x0, 0x5, 0x1, 0x7, 0x7f, 0x4], 0x7, 0x80800, 0x0, <r1=>0xffffffffffffffff})
ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000180)={0x6, {0x7, 0xb5d8, 0x401, 0xead}})

[ 1429.590682][ T8828] usb 1-1: ath9k_htc: USB layer deinitialized
23:07:15 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564b, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1429.660346][T24089] validate_nla: 16 callbacks suppressed
[ 1429.660365][T24089] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1429.698064][T24089] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:15 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x2}, 0x0)

23:07:15 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0405667, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:15 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x8000000}, 0x0)

[ 1429.812130][T24101] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1429.823128][T24101] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:15 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0445624, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:15 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x9000000}, 0x0)

[ 1429.856348][T24101] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1429.883506][T24107] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1429.948902][    T7] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1430.068942][ T8828] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 1430.288964][    T7] usb 5-1: too many configurations: 186, using maximum allowed: 8
[ 1430.378937][ T8828] usb 1-1: too many configurations: 186, using maximum allowed: 8
[ 1431.128921][    T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1431.137991][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1431.146289][    T7] usb 5-1: Product: syz
[ 1431.150683][    T7] usb 5-1: Manufacturer: syz
[ 1431.155332][    T7] usb 5-1: SerialNumber: syz
[ 1431.201737][    T7] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1431.220622][ T8828] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1431.230368][ T8828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1431.238352][ T8828] usb 1-1: Product: syz
[ 1431.244266][ T8828] usb 1-1: Manufacturer: syz
[ 1431.249978][ T8828] usb 1-1: SerialNumber: syz
[ 1431.289588][ T8828] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1431.768893][    T7] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1431.858902][ T9683] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1431.991712][    T7] usb 5-1: ath9k_htc: Invalid TX pipe: 0
[ 1431.997617][    T7] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1432.081934][ T9683] usb 1-1: ath9k_htc: Invalid TX pipe: 0
[ 1432.087608][ T9683] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1432.919971][ T3600] usb 5-1: USB disconnect, device number 55
[ 1432.948419][    T7] ath9k_htc: Failed to initialize the device
[ 1432.954788][ T3600] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1433.003254][T24141] udc-core: couldn't find an available UDC or it's busy
[ 1433.011194][T24141] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1433.028427][T23494] usb 1-1: USB disconnect, device number 81
23:07:18 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = fcntl$dupfd(r0, 0x0, r0)
read$hidraw(r1, &(0x7f0000000400)=""/180, 0xb4)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r3 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r3, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r5, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:18 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x3}, 0x0)

23:07:18 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xc000000}, 0x0)

23:07:18 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0485619, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:18 executing program 1:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = dup(r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x1000, 0x1, 0x3, "a70dec35024dfc880543554a28cd6415d407c41ed292bb94c7ea717d4f452607", 0x3031334d})

23:07:18 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000440)={0x0, 0x2bd, 0x1, 0x0, 0x8000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300)=<r3=>0x0, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x401, 0x1, &(0x7f0000000100)="2c3dfa3a", 0x10001, 0x0, 0x0, {0x1, r4}}, 0x7)
r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000400), 0x0, 0x81)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r6, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1433.049005][ T9683] ath9k_htc: Failed to initialize the device
[ 1433.069326][T23494] usb 1-1: ath9k_htc: USB layer deinitialized
23:07:18 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1433.114309][T24160] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1433.150331][T24160] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:18 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000440)={0x0, 0x2bd, 0x1, 0x0, 0x8000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300)=<r3=>0x0, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x401, 0x1, &(0x7f0000000100)="2c3dfa3a", 0x10001, 0x0, 0x0, {0x1, r4}}, 0x7)
r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000400), 0x0, 0x81)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r6, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:18 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xe000000}, 0x0)

[ 1433.196519][T24160] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:18 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:18 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0)
bind(r0, &(0x7f0000000040)=@can, 0x80)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

[ 1433.278898][T24171] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:18 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x5}, 0x0)

[ 1433.551407][T23494] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 1433.631349][ T1222] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1433.849076][T23494] usb 1-1: too many configurations: 186, using maximum allowed: 8
[ 1433.929130][ T1222] usb 5-1: too many configurations: 186, using maximum allowed: 8
[ 1434.648979][T23494] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1434.658244][T23494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1434.666731][T23494] usb 1-1: Product: syz
[ 1434.671219][T23494] usb 1-1: Manufacturer: syz
[ 1434.676012][T23494] usb 1-1: SerialNumber: syz
[ 1434.723204][T23494] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1434.741355][ T1222] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1434.750620][ T1222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1434.758630][ T1222] usb 5-1: Product: syz
[ 1434.764953][ T1222] usb 5-1: Manufacturer: syz
[ 1434.769798][ T1222] usb 5-1: SerialNumber: syz
[ 1434.809732][ T1222] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1435.308949][T23494] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1435.408919][ T1224] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1435.530861][T23494] usb 1-1: ath9k_htc: Invalid TX pipe: 0
[ 1435.536521][T23494] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1435.650792][ T1224] usb 5-1: ath9k_htc: Invalid TX pipe: 0
[ 1435.656608][ T1224] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
23:07:21 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000240))
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r5, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:21 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xf000000}, 0x0)

23:07:21 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:21 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x7}, 0x0)

23:07:21 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000300)={0x1, 0x0, {0x5, 0x0, 0x300a, 0x1, 0x0, 0x1}})
r2 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200000, 0x1b8, 0x11}, 0x18)
r3 = fcntl$dupfd(r2, 0x406, r0)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @raw_data=[0x2, 0x3ff, 0x7, 0x3, 0x9, 0x5, 0x7, 0x1, 0x2, 0x200, 0x5, 0x3, 0x3, 0x9, 0x80000001, 0x6, 0x2, 0x4, 0x2, 0x40, 0x2, 0x3f80, 0x0, 0x8, 0x401, 0xec5, 0x8d, 0x9, 0x3f, 0x5, 0x2, 0x10000]})
ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x1ff, 0x1000, 0x2009, 0x8, 0xa, 0x4, 0x2, 0x7}})
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x0)
fgetxattr(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="75060000002f6405000000346c2d7375626465762300"], &(0x7f0000000280)=""/16, 0x10)

[ 1436.454480][T24210] udc-core: couldn't find an available UDC or it's busy
[ 1436.461660][T24210] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1436.461814][ T9683] usb 1-1: USB disconnect, device number 82
[ 1436.479085][T23494] ath9k_htc: Failed to initialize the device
[ 1436.487283][ T9683] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1436.552251][T24226] validate_nla: 4 callbacks suppressed
[ 1436.552269][T24226] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:22 executing program 1:
syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x4800)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0xfffff6a3})

23:07:22 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x1f000000}, 0x0)

[ 1436.623927][T24229] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1436.637471][T13788] usb 5-1: USB disconnect, device number 56
[ 1436.660143][ T1224] ath9k_htc: Failed to initialize the device
23:07:22 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = fcntl$dupfd(r0, 0x0, r0)
read$hidraw(r1, &(0x7f0000000400)=""/180, 0xb4)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r3 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r3, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r5, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:22 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:22 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r0, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0)
signalfd(r3, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1436.676926][T13788] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1436.687122][T24226] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:22 executing program 1:
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4000})
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x3, 0x2, 0x9, 0x0, 0x400, 0x5, 0x7ff})

[ 1436.735212][T24229] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:22 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x8}, 0x0)

23:07:22 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x3f000000}, 0x0)

23:07:22 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:22 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = fcntl$dupfd(r0, 0x0, r0)
read$hidraw(r1, &(0x7f0000000400)=""/180, 0xb4)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r3 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r3, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r5, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:22 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x165140, 0x0)
splice(r1, &(0x7f0000000080)=0x3ff, r0, &(0x7f00000000c0)=0xd4, 0x4, 0x8)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

[ 1436.877167][T24257] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:22 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585611, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:22 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x60000000}, 0x0)

[ 1436.917607][T24257] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1436.955548][T24257] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:22 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = fcntl$dupfd(r0, 0x0, r0)
read$hidraw(r1, &(0x7f0000000400)=""/180, 0xb4)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r3 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r3, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r5, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1436.990357][T24265] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:22 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x78, r5, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x78}}, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r5, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7a}}}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x7fff}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000000)
r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000000c0)={0x9a0000, 0x5, 0xb4, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa00903, 0x8001, '\x00', @p_u16=&(0x7f0000000040)=0xf}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:07:22 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc058565d, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1437.078897][T23494] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 1437.341780][ T1224] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 1437.360111][T23494] usb 1-1: too many configurations: 186, using maximum allowed: 8
[ 1437.648918][ T1224] usb 5-1: too many configurations: 186, using maximum allowed: 8
[ 1438.229154][T23494] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1438.238257][T23494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1438.247718][T23494] usb 1-1: Product: syz
[ 1438.252843][T23494] usb 1-1: Manufacturer: syz
[ 1438.257541][T23494] usb 1-1: SerialNumber: syz
[ 1438.301366][T23494] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1438.498862][ T1224] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1438.507907][ T1224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1438.517032][ T1224] usb 5-1: Product: syz
[ 1438.521999][ T1224] usb 5-1: Manufacturer: syz
[ 1438.526698][ T1224] usb 5-1: SerialNumber: syz
[ 1438.569520][ T1224] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1438.919047][T23494] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1439.132104][T23494] usb 1-1: ath9k_htc: Invalid TX pipe: 0
[ 1439.137783][T23494] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1439.219000][ T1224] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1439.461757][ T1224] usb 5-1: ath9k_htc: Invalid TX pipe: 0
[ 1439.467459][ T1224] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
23:07:25 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
r5 = signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])
write$hidraw(r5, &(0x7f0000000400)="da090ad55046ba123b07cde842110d704467942354bee91ebc5b2204bb29fd55d41c7455bede5dda4c0923164045e22742f262e80ff5ecaeb0f2dfe1d82439f5a0071ee8fffcb166b6c55f0b810a22bd6665bafd6bbc680a9168e8cd84b93fb368af6a32aa0aca722770", 0x6a)

[ 1440.051982][T24314] udc-core: couldn't find an available UDC or it's busy
[ 1440.057301][ T3600] usb 1-1: USB disconnect, device number 83
[ 1440.059576][T24314] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1440.081433][T23494] ath9k_htc: Failed to initialize the device
[ 1440.087569][ T3600] usb 1-1: ath9k_htc: USB layer deinitialized
23:07:25 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x888effff}, 0x0)

23:07:25 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x1b}, 0x0)

23:07:25 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0845657, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:25 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)={0x0, @ctrl={0x0, 0x0, @value64}})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x35)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r2, 0x0, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r4, 0x0)
stat(&(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lstat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
syz_fuse_handle_req(r1, &(0x7f0000000200)="a5831b3d773a91b82d03b934af6d3f4ac6b868c09b0d6aa27aa522040bab390314b02ba05d58a5f381d82bac9edf2b35bcf33d0f2ce82022bccbc9c010eb2131f7b052d34e1df1002eb572c472b483c1982dcced10b3ab2ae9bb3af06dfa47fdcb5413e98075bec1d9caf028d8f13830597e22129bfff131afc3f28e39af1e10c85d6e593d83cbf4979d9d92506399ebff1a82baa0ba85114e344ac1c0fe26ae90aeb14cbed8a52eea2cb7cffb08082278ee135db7668858d36a8c6d5f8a0aad7a6c0b665dc72b212034e77f93683273ac722cb97b8d342e2c3a6fb33c94e441d89a7fcdf2cd5ec34c16e559bc04e62e4af9b391d523ba9533aaa9ee07e0152ab8e71aa6e438aed7754bcfa34f5b38c37c74dd061be4c2ec89762f7e66e7db4cd0a98e578294a8e48de83ea14cfc94fee3ab2b9de35ebdc9e15dd28db0873ce17e8c308392b3b0030daa65773b30932f29331c5a431639848c478eeacd1228c1ffa20c86efef39335c819d3134118ec139e223f731f9467bb747a2383a1b523a35ad0f0186587cd57bb1fbefca00e89e15901b9a57168179983c1b27dc95182ed29e1cd232fcf3884baedf495ee91f25ec19d2bacfe88b3548a1e46b197eea3a1aaed0ae1e708a6393e92dc17757395cb12c1315801ec3a76925532fee941c8674ea6fd1a1a8681e281842ae8cbfcfdf74abc4fa34adf9f9a1daedc56ab838e2e8aa992fb38c2787fea666d019f892f7928366a10c911d50e5b82337216bcf3e934b614dec077b8a7709e6f3af9d8801d61f7f5b35073a9c1dc24c810d8c5259fdd70a2497f6ce269da0d22778a8ea96b4597364272df4f8206b02164d620539b344709494d5cf6788457b3d580c5dee7a6763a7945991b3d97e86a9dd6d14a27164838150d7ecc754e2f4401865510e2e73bd3ce9a67a39a145720cdaec31e04e67646ab74917b02e0b008ddb5f57b15b9f8c2c86dd26dd43859e4d43a6e6eb7a000252308eaa65ff39c9bd5d51af43b93cc06bad10a1392785776670956701ba208551994b135a4507b8a493887f1ca1f6a40f8c27bab75272da03acb26e608e25f783d3d9dbe42559aae8ce73dab1d1fc0750963be5fbf18b13c55b23a50c649ee9c36938b23d85cd37b79f53df7bb1c005ddda2135a8c4e7bc228794de609b56ed712993ca87b2021b0986f3bb9c53b169df47518c01d0478fd9088dd3a37dcf00579cd5046a44f00f5171862682ae914b8c7857c259deb7c4e22533592d9709bee53c3c3e1e9b181fd3a6726cf84d9d0266df0ea0cd242670a4c85547cf9b5ff64fef9aaa88e306bdad3c6e1b5b146bc1a881f0cda3f8bcf6cea00421565467257b1bbf10825ee0b7d35ed26720cd9ef8344c770961aca27104d9af8ce5f1c83e47c42ae51deb2274416659347d91d6badc681ac4ab97602f943aacb651bbbdc9d60b7faf056532bc39ecccd85b7960e0c66c5e0f24850ac5c367b8adf45fa2aa26c0209f78e41e4c8b1c9480573878b369e22cdf1b63d9fc264bbcda53652092a786433f5ec1079548e25773520c6050211f238c6c62a0c886c1bed6a447ece11c6c6fd98ba83718a8d29a856526e4700ce8b926ea22682730bd40c4bace0fde3893f4e13962c5aa737fad34304d1664f3ec77d95be1e8992c60f8cb6ad058c29a5dad353e6ef74ee84db3ebfc290ec31d7ce493caf3e61d0a1042a7cfa085ff567d515856e973fa4edafdf29cbeb70fb9d5ad72e901e58a95407374d985511f480b393e5e44a1e28a692abdbb58af0428ed3f6486635d2f4f2d983a82e4f64171267fcaf3b798ee0af3915d11f147ea4fb4325df38b047fffdfd3b7525b7cb3115416c30e5d4fc7221417fc66311f0e58376259c7fe5c85bd2184953a77bdc94cb5f58724231b7d90aecad87c4a0a301ece40fa92d19c0a42fb50b7017803e323fbfb07b2c50c8896fa9b6fa7a04f3d7758516bca16bcfc73cc77a7e9030fa7da449bf7abb75a1fc6849cbb767ad3edb959c99da6201fe832085d0ed0863a888e87b6fe8b5efdf1201f1b951e1b39370aeceaaf0685fdd15775205668cb29665ff3814fd7ba02388e9036c45560eb1177ad3faa370dad561f81342b8aa57c9c4bf613cb0e0120b83007ad6bc27687b7fe57ab066384b446abdfb1f9591a4ffef4c298c7488d200a6bbd49f44eeea59ec262f423c3afad668f0f15e8b17917c3060fc5b5bcd342d7ded147f485f053b000885e7870b0ce53a0d1a1fced2e7066d2831d8044ea739eeb1655012711319a31667aa11e8552afb73c641c943914e13c9e7e4660c48dd6f70ed3ab316258ca4f820a1f8dbd8acff04ea790cf494b75fd98f7ca50e9634719074dcedf61b6798a0624b75b85b4806a835ef021960c7a73fc98275faeb568ca897bb01a30d75ca7b11422602c2783b3def5bfdc0bfd56a479c575573d9da6a3f1fa857d4c3c354f19196b723fe133f6cf55f093653f23a46c8f790dfcb821d5cdb66479a10a7088c2cf6facf69b4c1828d2173b1a382115ac8ce9755ad39d935ecaad2267dd6c7bd85562bb2faa2b1bad641994d3edfc1b14bb4a0c36aafb418d01b2a66888d099b382afb6a15dd71851462079d6109cbb39c7bcbc129359bdca8f5c549d33985412e7a3e3a219c2cb8450d8e61d52a3c1b1316d58b6735da3499a760ddc2464956ffc71d165448cb6cbc62606ae16691f6546197cdc84ace4074b0dc2ee58a4ac60f1bfc8ac6e20689e9d88469d2a032f7f8d49da7603442e355bda3b2cc72b49b3f72bf8fbb9f8631b417d281e13fb58a2b8c7e86cb4be7d4e4e9d602b4875aef5e58f8c133a10731a98e4898cf4167aea10c523cc5ea8b7928acb6b6752f87d6e0a36992ce4eb2933db87eab42999f73fc15bcea9e8bb6c34bef1337552420dff5b926f732b2a12b3b433794cce3c60fd282d1dbe6739bc5172ba7980e465a95bbef258ba8dca7d75b88c582205d4c7ad7f90b1d75a8edfc5bd0997018e0ef366402a4171583f386fc4e876a49b275bedda303104ac847f15789fc68cbb1505b5d4f41d061d036cb9314bef24a02a735b25b844143c235efdbf4b165a5e17f27eddb7ca4b30257e8503393c32552b27c9e036a93b4a5a37bea0c49977385c69a921acce2c26bb819251f0144f0d03cac7fa58f085d2b10637c673e080e9627d62c14584723ca40d25df1de7aca1460da6c03578ef5b5418c0e9784540067e1d9ea16b4ad84cc82b1583ac6277e1c5f4169669e54f94af74a5e3f6b7c111d14a0c622287f52d9b9a62f49afc31cbf6bcd375b3cf0c19ce1b0d393280b5811d5579699a6cfff15d081142061fb8a489d239d4cbee11db629734d9322e62938e97961c2b874d2372b7b1ddf923d022a3bb7f50b584140eec9d031ce74f53111700b04f955fdc30c732e42e0d72b488d729c000e02bc7025e906e6bd8b478f539def50adb59a2ec5575a51e392226f61950b93b9ac95ea4eef00de258d670caaa3d0f6dc4d8c2fe16de889786e2ec1bf90d9b177a624289ca041b095fcc38b3a373c638cbbd3412887dcc5dcd21f7ea09c8c37c3d22091f20ac5832a10c3f504ea6ff6589e1e710c4f2b5482f15704335feaae77be24d1d7bfe87f0bed829a32b79ec418e659e47f8cab6230b15cabc697303d34a8f3cb3abeae9ff54c645a67aeca26201c70a1d8de9b4f2c2bf75ccfc08663f8c67cba7a9f093ddad6d71b021f8dc6f6ef8d3fc059673bbc4e758fc8bce59f2ead570098fa775a3116f761330a31611bf29b03f21a0523795331e90711429de6d54c616ec19a59ea88e57193233e8b3599ab9917fd449fac3faba4dbde65d85bbb2b331cb1b32aeb63ab135e98090e37c0b229ddd5db4f559fc72982597173f9fc985467e2b57275e129e0121afe19035808045f5843667f8846c6326fe987e7ddffa5871863c1874277f0edc87a57b4689532e9ea6b0916fd3626a771787360ec52c414782927ae2a74dcdaddf2056b6a809089e0e4f77040de62d6df27344321437504e2f9129038cfe2d3acc344958bdcbe1c0d0ca07e600678bb421acd7dbf0225e364dd22d3703c5f4e99aaad18965b394d3bf734040254f37a5378e4554bd8c8271aa79697286f8294697307b79e0030ca4f29b10a0423b6dd00418cae1cc437f5b2ed984b84bb53be6eb7dc34b6c45241efe5cabbd6132e0ec6b08b4a16a761b29b3ae7b29268e48e45402890d08d626e87cf82cd2875c55f068d1466891190e3ae17a9b45ac0d8999d6e7ad9f7cfa4d79625a6599129a762ae2afc2bcfc82dfd563ef0e1c707aa5411c0974d720cb4fcd17a5763b9b1e995e95c33f45a52d411eab890867df9e0ca887854c0fd1c3421fcf1a185ccec247da48f69ab9f831d40dba17ae443dc18aa1342a3f026727c0cd1a8c5f4bfb7607f5fe48726b61ddec8d18036b142650b531b48636b9c201e750ec960242a846fbf3938125b4d7822f925baf32196ac97ab192791daaf305844d27cd847e3d43619d4a6b7b0ab693aef68df1f0d6e5e8b55972661992ebead0680f219c432d17b1444c2a0a2b1614ef14b2dc0a192f1254d9c8db76ac75677bb29c6f7262812219163d46ed5e7d1266cd5d20099b489b8df8077a917019d03aaf8d1810cf633d7f9dc2b454016592e7671f0003f3f02ccda91395085d758e02b31e5eb209d6bd378c9ea1c4278b51976affc55bb0ecd0071aef79404a68420b9fd3a1e205d978c3a4bfc725169418416e77f7782bfbcfe3f6bcd92c1a3a3e275843210f33b0a0e88839b2a81ffcbf99460a330086cb09538f9b798ffbbf907c933da9733f7690c8cdb9ea95fbe503486ae26678a99075f3da13ea37cebde0213de1d3b440ff97376d24d7ab32e24453b4de51d1117d6a7d2dd293c339d697547fc195d8f03d719cd6064a420ab549211d3b3c589f0921004bee1eb46fdfaae8ae88f21c306966b88b670e303439f7d8262b06e2f85aaa69b047b9c0cd6189b658696ec14bd6b56b9110d25b5eb3982b698811d05b849f236a1b86ffc0478ab1e6c3cabe6426d11838b2c73673d491b8b6619a87d9971fa28b8f27afcdfdb13914622c98e30d41c170eb36e1d163767cec196fe68f1362119a8b6d66a210e291a4c9dc908ac671fac5a67f95299c19138b47523d80ad56e10491ad8ac8eb4b8cb0ec806e9ba46468e952dbbf342900af271c461153dd8338505305f966be27231884fbc3466cd8503cd1ada4300091eedb549017f10189396b9864d91259a2116d413d9dcd8884607c7544ff2516c3246c832ca9fe41f3a3505d3c03050b9c990db43d7f01e6041494cd14d28bf20e3c435eba0b86f9e3184a0585b92339be4400f3b0841f3cbc48b31bc2c47661108043495944a6348c0fdef82a64464883003b8a2555fe7335e46f9426b116d5369e63c2cee4ee767aabe1132873acda4f435425d4fc08fbb035e0d27c862cdf647f97346cc7e07e9a3ac9ea7da6faa29e260904293e4acc9300d34fdf6fcc34f84ab0a5cccf81b7931b0d5aafdd0bb79fcc32e9fa5b143ee4e27fa556d4151a82b58b7547305b6cac7f586292262776349f83c9ff4ceacba127f817781b8e7f00959a0ffc26bf1650ce0c15fdc7de6e27e931fd64c3c892e912721d4083d5d1f3e91ca141c468d6db14fcf60540beb593576216f66c208f0ac05c3bf338e80954067c742ce61077d9de277f05e2906c144b1e1612fa0a1e30503d21b0b79b688c722352c5c1018ab9e91a46dffc9b0db59041d9224a8218d06315283b35198f6aa13b78e3c55e1f7481d28e489690c1bde52655dffe4d552e0612ef445daca3b2756e5a07cc57b365607d99924ae8b696bce805f5b79e96e92c4b9b45db5992ce07ae1bd585c3eaf0fd1c594fa0b656e6de0d7b6330f653d0cbcdd49122b19c6f552ecc71d3f233e17072a75524d2c7549618b80e2a3d9d2e1c6b8e44648a9ef320b9f2af8e604ddc3cb2667e1a2c7110a45f77a087ec301115758cab2664f782b231833be5711e73eda420a7096e215da3d59c0fdd69cd3fc467d7b5396abf65ba74a9284a4aa3c85b1462355af7102d6c8b78387353e8c715b0d52335e2225aefa0af2e04fc94579be8a1fbc3113e79fab360ef924986eb365f5e4504135f3222136e83208b76bb21c1522c4141b629775578f8e4ab6234084fe660d4889efe0043e16166f8316d790b97a867966ae8b3691fdf270813fb187c405d09acf836da06414a9ceb2ba6c82576008c24dd930a91d470d3f9f9ce5f91420b6576edf449a1db6051a770feb1dff6483dfd00dfc47a02c97acfa269c142ef2e81043646ebca8480eea9d8d7f706e8353e0728c4fd25e331fa5bf34db08b92d54a4f24bbc1492b47223f7f4c1e702469b6de03c4b49c2bdf4f235501f393faf5bd23f0d7e9191dcd6b4a154c9726fafddcb09e5fe88373f51215eccbc0728c7ec3d9f7a6c77c879ef78aa3b7d32bad9c01a40a0c8ced0473f696e6a6cab92924d1940428969bf5255869259be72c649f04baa6b6953909dba3af9636175db48a154a95bca6eb825f085b85415c8754c9f1419cea1c1755dc6b842882aa9bbc4f43d022dc0c052fe0e1b1c2fd155e5b3cf917618878b3288bccb4bc8ebcf161ab1a1c8e7ece83749acef36d7ba0eedad89b2633d21b9f80daada6d67711a02453f4e1af764e1f82cf202d3403e65bd53916389af22ef1c03c1e85930523934cc38ed1d62f7319fa68f4e54bf06a09db338ca03503c93dad5c3d750f4b19f302471a524e58f2810dffd18205c6739be91fc7847786f0a127480b087832b7266a5f877aa4bf18da3302555ff1287e27f0a7aa35ea9b053e1c0f8b279bb82c60d6d401f826bd3d1028eae41409d44aea613293f2f2a7fe33aad38e25a8e902bee19e09c31f602b3e6153254777f14a79920f81267802471e23f6b2f1229af131aa8aac139b8c8acc4559d800dcc46a4b967f6082491c906cf5c22a689cf95c74a45f4f584a849ce7364917426fde4f0e1ea2ecd04505d4477b5945312876ca874eaf613a243415fd00e6d2de134f83a9488cea5fca63df6dfea9d834294c7f27b8dee50f6f74f9703b5d284a2c5b2b9994d9e76b64e1c04789cd62eeb3ab82ac1440a979957fa4a59dfe03ae74c02b103b40441b3212d3f54a87cf74ebc60962c96a24feca6351752116f1e4e070399f5ba966af3ea1e5fb0c2e5d48ada2b410fc3bf7cff0abe531853e4e0b73ba2951c98cb304bcda5a69ef770e3a16fd6845e01e5683cadcc11b00151da4724010fcbcbd4fa82207e49e34746912133864d7f756e879cc3f7ecfbc1a8055a8f6c59fceac2eb61f287a8f3f3cf0bfa6a67d9470671464aae0b785924e2b4f038325c114a91af50edfbea6c2daf8ae79873b049933ed828debf157a684b4ca7284fe1e5040f0fe24414c6bd96c6bfb60beea3ff88c5c0c3cd6690f4edf5a9b313fabdb63b2f64798e72822fc0811e5d8e84d8c45aef576ea336435e158c1cf6954995d85b067dc4cb11e257f4aa5da2586604f643022f491813155c56bb50377d221de9cdfa2bef0f95512b1409c84ea03048663e97b3ddfb1bae0640113a93917ab8f4488db2dd2b9e8928dc3b45d578dad2c99e3de015daf5c6769c0fa130089985165a7a2ce0aba7de8640c1e96d62a667a5b4338f3683be218a18ad35b3b9160557fa28bd315d27e9bde48421b0ed5569b74cfa454745d38a2792450fa93f191dfc7035a060ca91362582073d438064207601d6d3956391e1ffae822709fc400ce131b596584d50a154d5976d76564b6a9a9fd538b8bae0e91c5b26c47c0cb0981be590ea629cc435ed17947f7948eb4503bb30a40cc34ce5f6b144b81c427f76b2f317f3b7bbe7ae08e278ae94533dce80ce7ea8c1162ae1f0b5229b929a830a8db4e8fec5871ef30fe9d9fdf50f7f9dabd82ef1133ea6a916fda8ac8e0159d995f4b55df1e9ff944aec6efc654bbc4c0d0ed0271ac765f85919171291e839ee96ddeff111430a5a6ef3835e6da0aec62bc89a56d325c2f9ffe55f0fe0710cac124c2f376944d36ee46fed381fdefa25c9076727c7efa0304da2d53b6d53827202827d4612fcec6271a875e66f7fb3771fd1d8725e2cdc4147876c5e6154903fec4afc690403bd8529363fa35a9049cf824fc9426a503a4c62fcdae1ece2b048455d7b373b4053e4dcdb57113ee3e607ae9d2bdb986e151d5adfdc84a7bba4fc8f955a8191f8ada903964c2c508002b919e1cb40c266d16216543f1fd6d44522d28fce50ece5dcd878b774d8a7714e72935385bcbc3c1803d0f5938d11ffcd25d8cb3ca87f95b0c679a80c063b02da2e24754c13f1383d5da9d6f96591bee184a7137ca4e22cb9bded0376b96af7ed3021a8fd2919246866a11a43cacb8fbe988415e489667876ee1e09bdadb020b962dab9f00d2284f2d9bef5aa80c99a97fe6e56ca44435678d91c78e8bab448365c004072831118b3530e8159b5ff0904c9c19a0eb92df60b52920970d9b107bc35f42fda22ecb225379dc67be35c709591c9bafcfaaf9249e830f72e9bdf425c67954fa2c28d0eca8b7721eb00404801d277d43d9c9629944aaf620d10151bdc1b0e6678eff533ea9d4795cd4628a09ce3facf88238e13082637adb1a576224edfc2a7c8870bddcef9339f8bf0d568196a68243de8498062052b65750cd5fd34d0e1097f396bbc7ba777be602848ba898d114c78f3dfe8d6463012758db8cf7d625315bc4dbb1d0eaa730faf1953fdf27af51a97c2a0282768408b1848da3b2d6a60b30707b81d119ddbc6b63baf09fa5f579017f1e722193db62de20fcc85e6a4fd3e8dd50bb94ed1e2339b7a92ee26dd29f03183d62b73225681dfb7569dcf20825be0e1eee0f00b47e119514acda3de8213573377b02109a78afe9bc256966ea930d2b4ea4fd2878b16328bff61b45efa0285b5cf69714c23fd085a7003cf11a440569bc9627aebc21bb07e74a54bc855facf7cf3b2b903d3873927e672601f23b411f273b86f7b23129fae98266a942d3deef3c76fb2abd49aa0bad4bb7fb7f793ffd6465e9dccd4f7fa2cb87af9c4763b9b013209658f4db3eab0a84b63937edc8d3b6aa15afcaa7f324c61fdf24fe22176a92397e58761f7e8568aa27085ce7ac753fec83c086de4182a389760f635ad5b86ad78d38b35e7cce14e79281ec493a4192a247fb304af8383ceae1a8db879e37001c5773bd568fd0672701e587617294ab83e82143caa4cab470526534676d5575a65df1e14f59ec97204208e88721079b86a89d00f420bc8265a54f4c56375161b5328ef0073c0e6c425bdc49f6c95a6de82cc7fcd7da3075384dd80abb3098481c4c50ce532e5718620eb3fe8201dac2f18fa56da4f7a95987c0439ca10aeb184bda0907241ae6ee0e49e0fd3c0006c0291eb39cdbf9af102d69de79c3530960fea994d3ee2180f389485f83aef2b90351ca6bd150b0a1351352f6e62f7000b5e72d7829a5c24a86ea0ddb4f7baa87276e2812926ede8cdcea40cd8ba0c5310d460cd576dd2e0ee177d6841ffa4e6b74329205b499600159bd7f6495b4d9783f2006abfd58a2d3c534c106d9374b7ae8d107ffa4b847250f474fb03630de9c972dfa6d29f44e326e6647f97065d8e9d647bf3aae4cb313dd36c53782e907407abd1a84ffdf151d84e0d0f5233434870df6a251b12abee53c4fb02d7c4c0f06bd241a51301ad34f9a522b56fec9c94f86581d00cfe0e94203f3a0f6d534f63956c402291e1d8eb3cfc3eeaad6aacd5990157453ba6a4ddadc0a53388026985cfc573de1f26c61a1b04c1f83237f2c0fa087ac66b58ef508cb4746cebe2fa5c1f42fe207a445e22f085c154431274e973c3bdfdfa952a0abcded944faf2d6ae7fe2398e55b3d7a8cd793e6bf47ca9d2a97f723d925f680fa9590141de8d8ab618c0a8b87e1f2456a8510f6b6525d878f2354cfd052f17c69f3a458c028f0a1deb367297d1e223eb0cf364fab98e3a61e891aed804b6a77f2bbe576aa54451d43c1648072992a1bc8fb70b7b281bc2a99e3c1b84bcef71752086589ab7cc16b34a3646a60a740fa260d3e34378eeee1ba8aa5465e1bd4e587c0edb75fbd6c1e3ef5e44afe5029cd806345fb897ef73c92bfff62021e3fda101974133a010dfc2e0ec2a3655af678ba1d37e79d2e4a810644281f3ab9cd9dd6d9fd252a3f5417742becd87bbae3e50d6bd9fb4551c00a67b383d450ac9bef3cb6c99fb2e63c1367e31745e603c4398fb916cd918caf332a111cd634c155ec8aba407160829ad4fd28418bf6c846777384deef97cbda91afb356765cd792937b7ed806dde6c25d3d7750cdf976143c02530080a73bd378c94cdc79bbecfdaf1a9b1004da4b5d14b36495f0645e7a795869926995a5a2b191755369340cf92b75857bd44d665b356abaea6cb6a371cbdc86c96b63e3c83c5305aa640e19ee650a6d5cef6b686d8b78e8841370536a0653ee08e628c49655f586b41ff84a033caab7287d7d738538b64fd98362e1335c5ef1e96a366e35940925b113558f19dcb509cd6563e93d513e2a5f7a4f558c1d3729045323f308a39ecd48eca85ba326e9000bcfd07948f9612cb5acf36e3a4fbeffa573755cb395a37c586aff50519f16990d4e4eb8250c2f824efdc9a123f69cd7d9c494dfaea97485d4a74185be4f42bbcbacaec7719b86de955d1aa2bac19cd7931d380535599a78562f774c16bf09f0e75030d5a5bb76ede5c2d5f8668987ad81d04ca5e987abaa886f155bde750fe97eb0516e51033d9c00da4b275164b1867b3126aaeeeb58bf8abbbfa81fdabf81df89945484a6efba2f288231579f3541bd07874e0e8b1493d6055fdbca5cc23864b33a6de2d916590627b82366cb371b6fdbff3a9d1e1b770824515af98565c47b95e6f8da6a386e8f12ba968a3fe9f33e04f451cbf8dbe471bd95243a14dd24e064118f1247988217473dd12824892ffc944dc8b6dab9608fb8cb32484b683312df758258e2a46620bdc4f6c90bbc4e81aa7d98392b5158a188b6963ef9d099fc0303e8f623d5605e5062256bccba1bb710fe6fd2d94e09b3e50ab691f7786577450374189c3db1be3c333c85a57920bd79dddf08d0cc93c319842ae5f144c81fe153e779e7b0ec367e385cd252faedd8157c2c0000b693125db2ddbbcde28a8d5818e9082c62a88d8331d3e4222ec00187c567cc4ef2cb33eb1480e0713a46459853e462c1efaa833a63da5422c655a2fa58dc1f734f6ac33b34b24fdb51b2efbc415a6f08d905e4bec7c326d50b2e2fde78af342d70e3d29e2ba9fc94ad46e2a96c61dc43e060f7e111002a8e02e50b0829a7e407cd4ca10f91400ed3dcb2ad7a07d3006c2a92e3f29afe8fa63d529d494eaa1761085579764dded37e1589b3e494bbea7756b1d2f0dd43b37622d5ed20f70c8c94f11e4d06ab064b54cdc5eb878a4668330604b6a653440550f61dd9eda2b70abc19951bbe8d84db9c3f866f0b3202ec37521a918dbba72082c91e8c", 0x2000, &(0x7f0000002940)={&(0x7f0000002200)={0x50, 0xfffffffffffffff5, 0x2, {0x7, 0x21, 0xffff, 0x440000, 0x3, 0x5, 0x3, 0x100}}, &(0x7f0000002280)={0x18, 0xfffffffffffffffe, 0x3, {0xff}}, &(0x7f00000022c0)={0x18, 0x0, 0xffffffff00000000, {0xfffffffffffffdcd}}, &(0x7f0000002300)={0x18, 0x0, 0xffffffffffffffff, {0x4}}, &(0x7f0000002340)={0x18, 0x26, 0x8, {0x7f}}, &(0x7f0000002380)={0x28, 0x0, 0x800000000000, {{0xe18c, 0x0, 0x1, r2}}}, &(0x7f00000023c0)={0x60, 0x2f, 0x8, {{0xdd3f, 0x6, 0xee, 0x8, 0x100, 0x3, 0x0, 0x10001}}}, &(0x7f0000002440)={0x18, 0x0, 0x5, {0x1ff}}, &(0x7f0000002480)={0x21, 0x0, 0x7, {'/dev/v4l-subdev#\x00'}}, &(0x7f00000024c0)={0x20, 0xfffffffffffffff5, 0x6, {0x0, 0x6}}, &(0x7f0000002500)={0x78, 0x0, 0x6, {0x5, 0x1, 0x0, {0x2, 0x7, 0x4, 0x8, 0x6, 0xfffffdfffffffffa, 0x6, 0x200, 0x6, 0x4000, 0x7, r4, 0xee00, 0x2, 0x80e}}}, &(0x7f0000002580)={0x90, 0xfffffffffffffffc, 0x1, {0x1, 0x0, 0x480000, 0x0, 0x800, 0x7ff, {0x4, 0xffffffffffff8000, 0x800, 0x7, 0x3, 0x10000, 0x4, 0xcb2, 0x9, 0xc000, 0x4, 0x0, 0xee01, 0x8, 0xfff}}}, &(0x7f0000002640)={0x30, 0x0, 0x9, [{0x4, 0x6, 0x1, 0x5, ')'}]}, &(0x7f0000002a40)=ANY=[@ANYBLOB="030000000000000000000000000000bc881fd2a2e2ab14b8e9ec46bb945a5815aa9c6c2cec99202010"], &(0x7f0000002840)={0xa0, 0x0, 0x6, {{0x6, 0x1, 0xdb, 0x80000001, 0x2, 0x78, {0x0, 0xfffffffffffffffe, 0x7ff, 0x5, 0x7, 0x1, 0x0, 0x20, 0x5, 0x8000, 0x10000, r5, r6, 0x2, 0x7fff}}, {0x0, 0x6}}}, &(0x7f0000002900)={0x20, 0xfffffffffffffff5, 0x1f, {0x52, 0x0, 0x228a, 0x1}}})
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0xa10000, 0x0, 0x716, r1, 0x0, &(0x7f0000000180)={0x0, 0x6f67, '\x00', @p_u16=&(0x7f0000000140)}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f00000029c0)={0x2, 0x1, @raw_data=[0xfffffffe, 0x4, 0x6, 0x3, 0x0, 0xd0, 0x1, 0x2, 0x5, 0x7d, 0x5, 0x0, 0x3, 0xff, 0x6, 0x3]})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:07:25 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0845658, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:25 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x9effffff}, 0x0)

[ 1440.156951][T24329] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1440.175655][T24329] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:25 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x25}, 0x0)

23:07:25 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000580)=@conn_svc_rsp={0x0, 0x0, 0xa, "9a050bb8", {0x3, 0x1, 0x0, 0x4, 0xc4c, 0x7, 0x3f}})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000000000000900010073797a30000000005c000000090a010400010000000000000000000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002200011800d00010073796e70726f7879000000000c0002800600014000000000140000001000010000000000000000000000000a"], 0xa4}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000480)=""/112, 0x70}], 0x2, &(0x7f0000000500)=""/63, 0x3f}, 0x10022)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:25 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r0, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0)
signalfd(r3, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:25 executing program 1:
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000040)=ANY=[@ANYBLOB="0000920047210b116b594f68efd58af288b7859e488a0ddf3249a73aca40fcd0153ea0b34bb2401c9cd327fcba3ce6887050e3d3fe663aa57a94721041d73ffb00aa56012087a9fccd54cf0288c2bc847e3fb02e2ff9f14f2bbf9759d599065a3996ad7ec8335a64bddc9210d05c57ab5e6ac2c684ac1770be74092ef0caf97099202db181daaf7583e793fe4d80"])
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:07:25 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xf0ffffff}, 0x0)

23:07:25 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0905664, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:25 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x3d}, 0x0)

[ 1440.403595][    T7] usb 5-1: USB disconnect, device number 57
[ 1440.431658][ T1224] ath9k_htc: Failed to initialize the device
[ 1440.437871][    T7] usb 5-1: ath9k_htc: USB layer deinitialized
23:07:25 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0945662, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:25 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x44}, 0x0)

23:07:25 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x8000)
syz_open_dev$video4linux(&(0x7f0000000180), 0x4, 0x80080)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2, 0x0], 0x2, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000140)={0x0, 0x5, 0x84a0, '\x00', &(0x7f00000000c0)=0x81})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000001c0)={0x2ec, 0xf9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})

23:07:25 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xfcffffff}, 0x0)

23:07:25 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r0, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0)
signalfd(r3, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:26 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x45}, 0x0)

[ 1440.618818][ T3600] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 1440.899201][ T3600] usb 1-1: too many configurations: 186, using maximum allowed: 8
[ 1440.991243][ T1224] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1441.309206][ T1224] usb 5-1: too many configurations: 186, using maximum allowed: 8
[ 1441.709270][ T3600] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1441.718325][ T3600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1441.726934][ T3600] usb 1-1: Product: syz
[ 1441.731255][ T3600] usb 1-1: Manufacturer: syz
[ 1441.735851][ T3600] usb 1-1: SerialNumber: syz
[ 1441.779482][ T3600] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1442.199036][ T1224] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1442.208090][ T1224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1442.216964][ T1224] usb 5-1: Product: syz
[ 1442.221435][ T1224] usb 5-1: Manufacturer: syz
[ 1442.226034][ T1224] usb 5-1: SerialNumber: syz
[ 1442.279369][ T1224] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1442.348816][ T3600] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1442.948924][ T1224] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1443.172422][ T1224] usb 5-1: ath9k_htc: Invalid TX pipe: 0
[ 1443.178111][ T1224] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1443.439107][ T3600] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 1443.446094][ T3600] ath9k_htc: Failed to initialize the device
23:07:28 executing program 0:
syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r1, 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r2)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r5, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:28 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x4, @win={{0x80, 0x3, 0x2, 0x8000}, 0x0, 0x200, &(0x7f00000000c0)={{0x3, 0x1, 0x2, 0x7}, &(0x7f0000000080)={{0x4, 0x3, 0x7, 0x3}, &(0x7f0000000040)={{0x5, 0x20, 0x9, 0x2}}}}, 0x2, &(0x7f0000000140)="253151a30cc13b168b09a3c81a27cf105d049ede1394506834ade0185cd8314681cb0a3804fa3e7ba82bc31b", 0x3}})

23:07:28 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:28 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x5b}, 0x0)

23:07:28 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xfd040000}, 0x0)

[ 1443.502437][T24409] udc-core: couldn't find an available UDC or it's busy
[ 1443.504338][T13788] usb 1-1: USB disconnect, device number 84
[ 1443.517591][T24409] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1443.537391][T13788] usb 1-1: ath9k_htc: USB layer deinitialized
23:07:29 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xffff8e88}, 0x0)

23:07:29 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0d05604, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1443.591971][T24423] validate_nla: 8 callbacks suppressed
[ 1443.591992][T24423] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1443.611274][T24423] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:29 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x118}, 0x0)

23:07:29 executing program 1:
syz_open_dev$video4linux(&(0x7f0000000040), 0xbd, 0x40)
socket(0x8, 0x3, 0x20000)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x208a02, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000340)=@delqdisc={0x37c, 0x25, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffe0}, {0xfff1, 0xffee}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x1ff}]}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0xfb}}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0x0, 0x5, 0x2, 0x8, 0xfffff800, 0x6}}, {0x10, 0x2, [0x5fd, 0x5, 0x0, 0x20, 0x8, 0x4]}}, {{0x1c, 0x1, {0xe9, 0x5, 0x9, 0x200, 0x2, 0x81, 0x2df, 0x2}}, {0x8, 0x2, [0x7, 0x8]}}, {{0x1c, 0x1, {0x81, 0x8, 0x401, 0x5, 0x0, 0x2, 0xc65, 0x9}}, {0x16, 0x2, [0xfffb, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x7, 0x5, 0x5]}}, {{0x1c, 0x1, {0x5, 0x4, 0x8000, 0x7, 0x1, 0x3f, 0x4, 0x6}}, {0x10, 0x2, [0x5, 0xcfe, 0x2e5, 0xae28, 0x200, 0x3]}}, {{0x1c, 0x1, {0x1, 0x33, 0x4, 0x2, 0x0, 0x2, 0xfff, 0x5}}, {0xe, 0x2, [0xfa2f, 0x7, 0x7, 0x3, 0xf8]}}, {{0x1c, 0x1, {0x2, 0x0, 0x8, 0x1ff, 0x0, 0xaa, 0x6, 0x1}}, {0x6, 0x2, [0x3ac]}}, {{0x1c, 0x1, {0x2, 0x1, 0x8, 0x9215, 0x1, 0xfc, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x2, 0x2, 0x6, 0x2, 0xfffffff7, 0x6, 0x8}}, {0x14, 0x2, [0x9, 0xab2, 0x9, 0xfff, 0x4, 0xa0d, 0xffff, 0x400]}}]}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x29, 0x7, 0x3, 0x100, 0x0, 0x0, 0x23fa, 0x7}}, {0x12, 0x2, [0x7, 0x81, 0x6, 0x1474, 0x0, 0x94ca, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x608}, @TCA_RATE={0x6, 0x5, {0x1f, 0x1}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x71, 0x7b, 0x4, 0x6ae, 0x2, 0x9, 0x1f, 0x1}}, {0x6, 0x2, [0xbc2]}}, {{0x1c, 0x1, {0x8, 0x1, 0x1000, 0x0, 0x2, 0x321, 0x1bf, 0x2}}, {0x8, 0x2, [0x0, 0x8b]}}, {{0x1c, 0x1, {0x1d, 0x4d, 0x4, 0xf194, 0x2, 0x1f, 0x1, 0x2}}, {0x8, 0x2, [0x7, 0x3]}}, {{0x1c, 0x1, {0x40, 0x2, 0x7, 0xffffffff, 0x1, 0xfff, 0x9, 0x7}}, {0x12, 0x2, [0x81, 0x1f, 0x6, 0x7, 0x7ff, 0xe40c, 0x0]}}, {{0x1c, 0x1, {0xff, 0x6, 0xff, 0x80000001, 0x0, 0x8c3d, 0x1, 0x6}}, {0x10, 0x2, [0x8, 0x100, 0x80, 0x4, 0x1, 0x401]}}, {{0x1c, 0x1, {0x51, 0x2, 0xff80, 0x3, 0x1, 0x1, 0x1, 0x1}}, {0x6, 0x2, [0xf8f1]}}, {{0x1c, 0x1, {0x7f, 0x81, 0xfe3, 0x7, 0x2, 0x5, 0x7fffffff, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x1f, 0x3b, 0x2, 0x5, 0x0, 0x7, 0x4, 0x8}}, {0x14, 0x2, [0x35a, 0x0, 0x1, 0x3, 0x4, 0x101, 0x1000, 0x7]}}, {{0x1c, 0x1, {0x20, 0x5, 0x7ff, 0x53f, 0x2, 0x10001, 0x4, 0x3}}, {0xa, 0x2, [0x9, 0xcef, 0x6]}}, {{0x1c, 0x1, {0x7f, 0x8, 0xa54, 0x80000000, 0x2, 0x7, 0x0, 0x5}}, {0xe, 0x2, [0x7, 0x5, 0xba7, 0x93, 0x8000]}}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x800}, 0x40)

23:07:29 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xfffff000}, 0x0)

[ 1443.740191][T24441] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1443.761932][T24441] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1444.018923][T13788] usb 1-1: new high-speed USB device number 85 using dummy_hcd
23:07:29 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000580)=@conn_svc_rsp={0x0, 0x0, 0xa, "9a050bb8", {0x3, 0x1, 0x0, 0x4, 0xc4c, 0x7, 0x3f}})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000000000000900010073797a30000000005c000000090a010400010000000000000000000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002200011800d00010073796e70726f7879000000000c0002800600014000000000140000001000010000000000000000000000000a"], 0xa4}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000480)=""/112, 0x70}], 0x2, &(0x7f0000000500)=""/63, 0x3f}, 0x10022)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:29 executing program 1:
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000001c0)={0x1, 0x6, 0x6})
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
read$eventfd(r1, &(0x7f0000000140), 0x8)
ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000180)=0xfffffffc)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x41c981)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000080)={0x7, 0x0, 0x1002, 0xfffffffc, 0x1, 0x1, 0xa0, 0x1})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0xc040564a, &(0x7f0000000100)={0x9, 0x1, 0xfffffffd, 0x0, 0xfffffffd, 0xfffffffa, 0x4})

[ 1444.100346][T24262] usb 5-1: USB disconnect, device number 58
[ 1444.119138][ T1224] ath9k_htc: Failed to initialize the device
[ 1444.132858][T24262] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1444.320126][T13788] usb 1-1: too many configurations: 186, using maximum allowed: 8
[ 1444.548884][T24262] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1444.829467][T24262] usb 5-1: too many configurations: 186, using maximum allowed: 8
[ 1445.189189][T13788] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1445.198243][T13788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1445.207337][T13788] usb 1-1: Product: syz
[ 1445.212373][T13788] usb 1-1: Manufacturer: syz
[ 1445.216957][T13788] usb 1-1: SerialNumber: syz
[ 1445.259547][T13788] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1445.689144][T24262] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1445.698205][T24262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1445.707100][T24262] usb 5-1: Product: syz
[ 1445.712035][T24262] usb 5-1: Manufacturer: syz
[ 1445.716625][T24262] usb 5-1: SerialNumber: syz
[ 1445.759507][T24262] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1445.888881][T13788] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1446.101966][T13788] usb 1-1: ath9k_htc: Invalid TX pipe: 0
[ 1446.107628][T13788] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1446.358959][ T1224] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
23:07:32 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x119000, 0x0)
setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000180), 0x4)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r5, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:32 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x300}, 0x0)

23:07:32 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0d05605, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:32 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xffffff7f}, 0x0)

23:07:32 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x9, 0x400200)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0xdef, 0x0, 0x300f, 0x0, 0x4, 0x8, 0x1, 0x5}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x2})
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000140)=0xb76)
ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000180)=0x3)

[ 1447.022114][T24483] udc-core: couldn't find an available UDC or it's busy
[ 1447.030175][T24483] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1447.044492][T23494] usb 1-1: USB disconnect, device number 85
[ 1447.052112][T13788] ath9k_htc: Failed to initialize the device
[ 1447.063233][T23494] usb 1-1: ath9k_htc: USB layer deinitialized
23:07:32 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0d05640, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:32 executing program 1:
fallocate(0xffffffffffffffff, 0x2d4d24fa62745d42, 0x400, 0x7fff)
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x82, 0x0, 0xfffffffd})

[ 1447.136625][T24498] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1447.166066][T24498] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:32 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xffffff9e}, 0x0)

23:07:32 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x324}, 0x0)

23:07:32 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0e85667, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1447.292667][T24516] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1447.329684][T24516] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1447.438957][ T1224] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 1447.446069][ T1224] ath9k_htc: Failed to initialize the device
23:07:32 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x4f, 0xffff])
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:32 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xfffffff0}, 0x0)

[ 1447.527434][   T20] usb 5-1: USB disconnect, device number 59
[ 1447.538463][   T20] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1447.548790][T23494] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 1448.069237][T23494] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1448.078273][T23494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1448.087338][T23494] usb 1-1: Product: syz
[ 1448.092075][T23494] usb 1-1: Manufacturer: syz
[ 1448.096658][T23494] usb 1-1: SerialNumber: syz
[ 1448.140085][T23494] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1448.738930][T23494] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1448.961474][T23494] usb 1-1: ath9k_htc: Invalid TX pipe: 0
[ 1448.967203][T23494] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1449.882733][T24501] udc-core: couldn't find an available UDC or it's busy
[ 1449.889823][T24501] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1449.911871][    T7] usb 1-1: USB disconnect, device number 86
23:07:35 executing program 1:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002240)={0x0, <r1=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
r3 = getgid()
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000300)="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", 0x2000, &(0x7f0000002f40)={&(0x7f0000002300)={0x50, 0x0, 0x6, {0x7, 0x21, 0x1, 0x80010, 0xfff9, 0x2, 0xfffffff9, 0xc90}}, 0x0, &(0x7f00000023c0)={0x18, 0x0, 0x9, {0x3}}, &(0x7f0000002400)={0x18, 0x0, 0x3}, &(0x7f0000002440)={0x18, 0x0, 0x0, {0x3f}}, &(0x7f0000002480)={0x28, 0x0, 0x8, {{0x0, 0x7, 0x1}}}, &(0x7f00000024c0)={0x60, 0x0, 0x1f, {{0x0, 0xfffffffffffffffb, 0x8, 0x7, 0x472, 0x8, 0x6, 0x2}}}, &(0x7f0000002540)={0x18, 0x0, 0x8, {0x3}}, &(0x7f0000002580)={0x11, 0x0, 0x5, {'\x00'}}, &(0x7f00000025c0)={0x20, 0x0, 0x6, {0x0, 0x2}}, &(0x7f0000002600)={0x78, 0x0, 0x9, {0xfffffffffffffffd, 0x8, 0x0, {0x4, 0x5, 0x5, 0x7, 0x7, 0x9b, 0x4, 0x0, 0x800, 0xa000, 0xffffffb7, 0x0, 0xffffffffffffffff, 0x8, 0x101}}}, &(0x7f0000002680)={0x90, 0xffffffffffffffda, 0x1, {0x0, 0x1, 0xfff, 0x5, 0x40, 0x3, {0x4, 0x3, 0x4, 0x1, 0x4, 0x8, 0x1ff, 0x8, 0x7, 0x6000, 0x9, 0xee01, 0x0, 0x3f, 0x5}}}, &(0x7f0000002740)={0x78, 0x0, 0x7, [{0x2, 0x3, 0x0, 0x8}, {0x2, 0x5, 0x3, 0x1d1, ')/]'}, {0x5, 0x3, 0x0, 0xc95b}, {0x1, 0x5, 0x0, 0x80000000}]}, &(0x7f0000002ac0)={0x360, 0x0, 0x6, [{{0x6, 0x2, 0x6, 0x20, 0x7, 0x0, {0x3, 0x8, 0x8, 0x9, 0x5, 0xff, 0x0, 0xa3a0, 0x10000, 0x8000, 0x7, 0x0, 0x0, 0x8000, 0xfffffff7}}, {0x1, 0x80000001, 0x12, 0x3f, './cgroup.net/syz0\x00'}}, {{0x4, 0x0, 0x874, 0x1f, 0x200, 0x8, {0x3, 0x3f, 0x4, 0x3, 0x80000001, 0x2, 0x80000001, 0x1000, 0x4, 0x2000, 0x2, 0x0, 0xee00, 0x9, 0x6}}, {0x3, 0x200, 0x3, 0x7, '&\\\\'}}, {{0x1, 0x1, 0xffffffffffff1c87, 0x6, 0x7c, 0xfffffff7, {0x1, 0x5, 0x0, 0x2, 0x3, 0x1, 0x249f, 0x7, 0x8, 0x1000, 0x8234, 0x0, 0x0, 0x5, 0x3f}}, {0x3, 0x5, 0x12, 0x7e, './cgroup.net/syz0\x00'}}, {{0x0, 0x5, 0x7, 0x8, 0x6, 0x6, {0x0, 0x7fffffff, 0x79, 0x77a, 0x8, 0x1, 0x9, 0x6, 0x7, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x3, 0x8cc, 0x12, 0x3, './cgroup.net/syz0\x00'}}, {{0x4, 0x1, 0x5, 0xbd, 0x8, 0x80000001, {0x5, 0x7fff, 0x200, 0x9, 0x7, 0xfffffffffffffffa, 0x5, 0x10001, 0x400, 0x4000, 0x27a8, 0xffffffffffffffff, r3, 0x0, 0xb8c}}, {0x5, 0x8, 0x3, 0x37, '\xeb\\['}}]}, &(0x7f0000002e40)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0xe7, 0x1, 0x7, 0x1fc00000, {0x4, 0x8000, 0xe5, 0x0, 0x9f6, 0x3, 0x401, 0x7, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xee01, 0x8fed, 0xffff}}, {0x0, 0x1}}}, &(0x7f0000002f00)={0x20, 0x0, 0x80000001, {0x10001, 0x0, 0x9}}})
fstat(r0, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r6, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000000140)="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", 0x2000, &(0x7f0000002940)={&(0x7f0000000080)={0x50, 0x0, 0x3, {0x7, 0x21, 0x200040, 0x100100, 0x2, 0x5, 0x2}}, &(0x7f0000002140)={0x18, 0xfffffffffffffff5, 0x1, {0x8f27}}, &(0x7f0000002180)={0x18, 0x0, 0xff, {0x10001}}, &(0x7f00000021c0)={0x18, 0xfffffffffffffffe, 0x5e, {0x800}}, &(0x7f0000002200)={0x18, 0x0, 0x3, {0x4}}, &(0x7f00000022c0)={0x28, 0x0, 0x0, {{0xc, 0x2, 0x2, r1}}}, &(0x7f0000002300)={0x60, 0x0, 0x4, {{0x2, 0x80, 0x100000001, 0xfff, 0x6, 0x2, 0xfffffe0a, 0x6e55}}}, &(0x7f0000002380)={0x18, 0xfffffffffffffff5, 0x81}, &(0x7f00000029c0)={0x11, 0xffffffffffffffda, 0x3, {'\x00'}}, &(0x7f0000002400)={0x20, 0x0, 0xffffffffffffce59, {0x0, 0x3}}, &(0x7f0000002440)={0x78, 0xfffffffffffffffe, 0x6, {0x9, 0x7ff, 0x0, {0x2, 0x81, 0x4, 0xea2, 0xfff, 0x100000001, 0x0, 0x8, 0x1, 0x4000, 0x9, 0x0, 0x0, 0xfffffff7, 0x7fff}}}, &(0x7f0000002580)={0x90, 0x0, 0x7fffffff, {0x2, 0x2, 0xbe, 0x1cba, 0x5, 0x5a, {0x2, 0x0, 0x73, 0x5, 0x20, 0x1, 0xfffffff7, 0x6, 0x1, 0x6000, 0x10000, r2, r3, 0x1f, 0x400}}}, &(0x7f0000002640)={0x98, 0x0, 0x6, [{0x6, 0x100000000, 0x11, 0x1, '/dev/v4l-subdev#\x00'}, {0x5, 0x6, 0xa, 0x80000001, '/dev/fuse\x00'}, {0x0, 0x8, 0x11, 0xd5, '/dev/v4l-subdev#\x00'}]}, &(0x7f0000002780)={0xc0, 0x0, 0x5, [{{0x3, 0x2, 0x8, 0x8, 0x5, 0x657, {0x3, 0x200, 0x4, 0x8, 0x3, 0x9, 0xfa5, 0x0, 0x7, 0x8000, 0x4, 0xee00, r4, 0x0, 0x3f}}, {0x0, 0x0, 0x11, 0x80000001, '/dev/v4l-subdev#\x00'}}]}, &(0x7f0000002840)={0xa0, 0xffffffffffffffda, 0x9, {{0x1, 0x0, 0x2, 0x6, 0x0, 0x200, {0x6, 0xf9d, 0xfffffffffffffbff, 0xfb1, 0x100000001, 0x7, 0xffff, 0x80000000, 0x0, 0x6000, 0x8, r6, 0xee01, 0xe0c7, 0x80000000}}, {0x0, 0x2}}}, &(0x7f0000002900)={0x20, 0x0, 0x0, {0x7, 0x0, 0x80, 0x1}}})
r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0xc040564a, &(0x7f0000000100)={0x0, 0x1})

23:07:35 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc4009420, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:35 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x336}, 0x0)

23:07:35 executing program 4:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x4f, 0xffff])
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xfffffffc}, 0x0)

[ 1449.932136][T23494] ath9k_htc: Failed to initialize the device
[ 1449.964890][T24552] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1449.973338][    T7] usb 1-1: ath9k_htc: USB layer deinitialized
23:07:35 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x5, 0x2f2da3)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/41, 0x29)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x80005577, &(0x7f0000000280)={0x0, 0x2bd, 0x2, 0x2, 0x223}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300), 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(r0, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, {0x8000}, 0x1, {0x0, r3}}, 0x5)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r5, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1449.994582][T24552] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:35 executing program 1 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:07:35 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xd000943d, &(0x7f0000000100)={0x0, 0x1, 0x100a})

23:07:35 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x339}, 0x0)

23:07:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x3000000000000}, 0x0)

23:07:35 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_enter(r2, 0x45bd, 0x1c6b, 0x3, &(0x7f0000000100)={[0xab89]}, 0x8)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10000000010200090502"], 0x0)
syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x56, &(0x7f0000000400)=@generic={0x0, 0x2, 0x4e, "89f976fc", "cc45fa2aeee954951e1a4ffc1bef2fbe402f545506c8b2fef16887725ad4c7f7fc4564751a653ad9fff95960c4950ae5a89fea50cbabdb0ef72b7c7d4f54bc189e1301bcd40ee80385b43c92be94"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1450.135578][T24572] FAULT_INJECTION: forcing a failure.
[ 1450.135578][T24572] name failslab, interval 1, probability 0, space 0, times 0
[ 1450.177157][T24572] CPU: 1 PID: 24572 Comm: syz-executor.1 Tainted: G        W         5.13.0-syzkaller #0
[ 1450.187002][T24572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1450.197077][T24572] Call Trace:
[ 1450.200368][T24572]  dump_stack_lvl+0xcd/0x134
[ 1450.204986][T24572]  should_fail.cold+0x5/0xa
[ 1450.209514][T24572]  ? tomoyo_realpath_from_path+0xc3/0x620
[ 1450.215344][T24572]  should_failslab+0x5/0x10
[ 1450.219902][T24572]  __kmalloc+0x72/0x330
[ 1450.224098][T24572]  tomoyo_realpath_from_path+0xc3/0x620
[ 1450.229655][T24572]  ? tomoyo_profile+0x42/0x50
[ 1450.234438][T24572]  tomoyo_path_number_perm+0x1d5/0x590
[ 1450.239914][T24572]  ? tomoyo_path_number_perm+0x18d/0x590
[ 1450.245578][T24572]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1450.251421][T24572]  ? lock_downgrade+0x6e0/0x6e0
[ 1450.256457][T24572]  ? lock_acquire+0x442/0x510
[ 1450.261143][T24572]  ? lock_release+0x522/0x720
[ 1450.265815][T24572]  ? __context_tracking_exit+0xb8/0xe0
[ 1450.271272][T24572]  ? __fget_files+0x288/0x3d0
[ 1450.275948][T24572]  security_file_ioctl+0x50/0xb0
[ 1450.280885][T24572]  __x64_sys_ioctl+0xb3/0x200
[ 1450.285563][T24572]  do_syscall_64+0x35/0xb0
[ 1450.289982][T24572]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1450.295874][T24572] RIP: 0033:0x4665d9
[ 1450.299780][T24572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1450.321116][T24572] RSP: 002b:00007fd5671cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1450.329522][T24572] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1450.337572][T24572] RDX: 0000000020000100 RSI: 00000000c0585604 RDI: 0000000000000003
[ 1450.345557][T24572] RBP: 00007fd5671cc1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1450.353524][T24572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1450.361585][T24572] R13: 0000000000a9fb1f R14: 00007fd5671cc300 R15: 0000000000022000
23:07:35 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x100a})

[ 1450.378832][T13788] usb 5-1: new high-speed USB device number 60 using dummy_hcd
23:07:35 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x2, 0x1, 0x100a})

23:07:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x40030000000000}, 0x0)

23:07:35 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x5100}, 0x0)

[ 1450.442713][T24572] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1450.516639][T24592] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1450.544741][T24592] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1450.671314][    T7] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1450.710635][T13788] usb 5-1: too many configurations: 186, using maximum allowed: 8
[ 1450.959669][    T7] usb 1-1: too many configurations: 186, using maximum allowed: 8
[ 1451.619094][T13788] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1451.628302][T13788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1451.636517][T13788] usb 5-1: Product: syz
[ 1451.640870][T13788] usb 5-1: Manufacturer: syz
[ 1451.645554][T13788] usb 5-1: SerialNumber: syz
[ 1451.692963][T13788] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1451.759074][    T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1451.768198][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1451.777183][    T7] usb 1-1: Product: syz
[ 1451.781719][    T7] usb 1-1: Manufacturer: syz
[ 1451.786321][    T7] usb 1-1: SerialNumber: syz
[ 1451.829526][    T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1452.338846][T13788] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1452.408899][    T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1452.571727][T13788] usb 5-1: ath9k_htc: Invalid TX pipe: 0
[ 1452.577571][T13788] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1452.615386][T24578] udc-core: couldn't find an available UDC or it's busy
[ 1452.622477][T24578] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1453.352879][T24613] udc-core: couldn't find an available UDC or it's busy
[ 1453.362171][T24613] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1453.375933][T24613] udc-core: couldn't find an available UDC or it's busy
[ 1453.383020][T24613] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1453.404083][ T3600] usb 1-1: USB disconnect, device number 87
[ 1453.449070][    T7] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 1453.456060][    T7] ath9k_htc: Failed to initialize the device
[ 1453.462958][ T3600] usb 1-1: ath9k_htc: USB layer deinitialized
23:07:38 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x3, 0x1, 0x100a})

23:07:38 executing program 1 (fault-call:1 fault-nth:1):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:07:38 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0)

23:07:38 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x5200}, 0x0)

23:07:38 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r3}}, 0x401)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r5, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1453.498795][ T8828] usb 5-1: USB disconnect, device number 60
[ 1453.510287][T13788] ath9k_htc: Failed to initialize the device
23:07:38 executing program 4:
mknod(0x0, 0x0, 0x7)
open(0x0, 0x0, 0x0)
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x32fe41, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400101)
getsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3200c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
connect$inet(0xffffffffffffffff, 0x0, 0x5b)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @broadcast}, {0x2, 0xffff, @local}, {0x2, 0x0, @local}, 0x4a, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0xfffe})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40c0854)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000300)="0fedf4674b9b530327bedb9d879ebbcacba9626eb5ae5a6ba33479cc490b0d55996b6b4cf7b446bf06e5208dfc8a96c96b2364aff866ffa8", 0x38}], 0x1)
r1 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$set_timeout(0xf, r1, 0xfffffffffff)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{0x2, 0x4e22, @multicast2}, {0x6, @dev}, 0x8, {0x2, 0x4e23, @loopback}, 'ipvlan0\x00'})
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0xbf)
unshare(0x60000000)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x88, @empty, 0x4e20, 0x4, 'sed\x00', 0x11, 0xd5bb, 0x6b}, 0x2c)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

[ 1453.544730][ T8828] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1453.576587][T24630] FAULT_INJECTION: forcing a failure.
[ 1453.576587][T24630] name failslab, interval 1, probability 0, space 0, times 0
[ 1453.584412][T24632] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:39 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
write$hidraw(r0, &(0x7f0000000400)="3a29caac16d2a93c67b37c30ad74af38bc70b42b3641a970e45ec94e868d27d09faaaa2c7f6affe1c3b3acc26a96be120f2c86b3af5d612061813c5b0bd0683538", 0x41)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
read$hidraw(r0, &(0x7f0000000480)=""/158, 0x9e)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x5}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1453.616147][T24630] CPU: 0 PID: 24630 Comm: syz-executor.1 Tainted: G        W         5.13.0-syzkaller #0
[ 1453.626206][T24630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1453.636277][T24630] Call Trace:
[ 1453.639570][T24630]  dump_stack_lvl+0xcd/0x134
[ 1453.645063][T24630]  should_fail.cold+0x5/0xa
[ 1453.649587][T24630]  ? tomoyo_encode2.part.0+0xe9/0x3a0
[ 1453.654975][T24630]  should_failslab+0x5/0x10
[ 1453.659587][T24630]  __kmalloc+0x72/0x330
23:07:39 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x100000000000000}, 0x0)

[ 1453.663777][T24630]  tomoyo_encode2.part.0+0xe9/0x3a0
[ 1453.668991][T24630]  tomoyo_encode+0x28/0x50
[ 1453.673422][T24630]  tomoyo_realpath_from_path+0x186/0x620
[ 1453.679074][T24630]  tomoyo_path_number_perm+0x1d5/0x590
[ 1453.684554][T24630]  ? tomoyo_path_number_perm+0x18d/0x590
[ 1453.690207][T24630]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1453.696055][T24630]  ? lock_downgrade+0x6e0/0x6e0
[ 1453.700921][T24630]  ? lock_acquire+0x442/0x510
[ 1453.705618][T24630]  ? lock_release+0x522/0x720
[ 1453.710431][T24630]  ? __context_tracking_exit+0xb8/0xe0
[ 1453.715919][T24630]  ? __fget_files+0x288/0x3d0
[ 1453.720634][T24630]  security_file_ioctl+0x50/0xb0
[ 1453.725597][T24630]  __x64_sys_ioctl+0xb3/0x200
[ 1453.730468][T24630]  do_syscall_64+0x35/0xb0
[ 1453.734904][T24630]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1453.740833][T24630] RIP: 0033:0x4665d9
[ 1453.744744][T24630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
23:07:39 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x4, 0x1, 0x100a})

[ 1453.764535][T24630] RSP: 002b:00007fd5671cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1453.772970][T24630] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1453.780954][T24630] RDX: 0000000020000100 RSI: 00000000c0585604 RDI: 0000000000000003
[ 1453.788949][T24630] RBP: 00007fd5671cc1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1453.796922][T24630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1453.804901][T24630] R13: 0000000000a9fb1f R14: 00007fd5671cc300 R15: 0000000000022000
23:07:39 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x5300}, 0x0)

[ 1453.843911][T24632] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:39 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x200000000000000}, 0x0)

23:07:39 executing program 4:
ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x200000, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r1, 0x1)
lseek(r1, 0x1200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$SNDCTL_TMR_STOP(r1, 0x5403)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000000440)=""/246, 0xf6}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f00000005c0)=""/66, 0x42}, {&(0x7f0000000780)=""/134, 0xffffffffffffff90}], 0x5, 0xca36, 0x92)
sendfile(r1, r2, 0x0, 0x8400fffffffa)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000240), 0x0, 0x0, 0x0)
sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x14000040)

[ 1453.912875][T24630] ERROR: Out of memory at tomoyo_realpath_from_path.
23:07:39 executing program 1 (fault-call:1 fault-nth:2):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:07:39 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x5, 0x1, 0x100a})

[ 1453.977837][   T37] audit: type=1804 audit(1625526459.347:155): pid=24676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/1440/file0/bus" dev="ramfs" ino=186494 res=1 errno=0
[ 1454.023093][T24681] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1454.073744][T24681] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
23:07:39 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x6, 0x1, 0x100a})

23:07:39 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x300000000000000}, 0x0)

23:07:39 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x5400}, 0x0)

[ 1454.126878][T24688] FAULT_INJECTION: forcing a failure.
[ 1454.126878][T24688] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1454.187370][T24688] CPU: 0 PID: 24688 Comm: syz-executor.1 Tainted: G        W         5.13.0-syzkaller #0
[ 1454.197306][T24688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1454.207459][T24688] Call Trace:
[ 1454.210746][T24688]  dump_stack_lvl+0xcd/0x134
[ 1454.215450][T24688]  should_fail.cold+0x5/0xa
[ 1454.219985][T24688]  _copy_from_user+0x2c/0x180
[ 1454.224689][T24688]  video_usercopy+0xbad/0x16b0
[ 1454.229630][T24688]  ? subdev_do_ioctl+0x2c30/0x2c30
[ 1454.234853][T24688]  ? v4l_enumstd+0x60/0x60
[ 1454.239560][T24688]  ? lock_downgrade+0x6e0/0x6e0
[ 1454.244529][T24688]  ? lock_acquire+0x442/0x510
[ 1454.249227][T24688]  ? lock_release+0x522/0x720
[ 1454.255215][T24688]  ? u132_hcd_reset.cold+0x42/0x95
[ 1454.260430][T24688]  ? __fget_files+0x288/0x3d0
[ 1454.265295][T24688]  v4l2_ioctl+0x1b3/0x250
[ 1454.269643][T24688]  ? v4l2_prio_init+0x20/0x20
[ 1454.274346][T24688]  __x64_sys_ioctl+0x193/0x200
[ 1454.279124][T24688]  do_syscall_64+0x35/0xb0
[ 1454.283556][T24688]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1454.289466][T24688] RIP: 0033:0x4665d9
[ 1454.293366][T24688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1454.313084][T24688] RSP: 002b:00007fd5671cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1454.322036][T24688] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[ 1454.330197][T24688] RDX: 0000000020000100 RSI: 00000000c0585604 RDI: 0000000000000003
23:07:39 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
signalfd4(r0, &(0x7f0000000040)={[0x1f]}, 0x8, 0x0)
connect$inet6(r1, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000000)=0x7, 0x4)
openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[ 1454.338268][T24688] RBP: 00007fd5671cc1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1454.346259][T24688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1454.354435][T24688] R13: 0000000000a9fb1f R14: 00007fd5671cc300 R15: 0000000000022000
[ 1454.369028][ T3600] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1454.679207][ T3600] usb 1-1: no configurations
[ 1454.683978][ T3600] usb 1-1: can't read configurations, error -22
[ 1454.861184][ T3600] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 1455.169075][ T3600] usb 1-1: no configurations
[ 1455.173770][ T3600] usb 1-1: can't read configurations, error -22
[ 1455.193523][ T3600] usb usb1-port1: attempt power cycle
[ 1455.638811][ T3600] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 1455.769083][ T3600] usb 1-1: no configurations
[ 1455.773829][ T3600] usb 1-1: can't read configurations, error -22
[ 1455.928790][ T3600] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 1456.059113][ T3600] usb 1-1: no configurations
[ 1456.063733][ T3600] usb 1-1: can't read configurations, error -22
[ 1456.070241][ T3600] usb usb1-port1: unable to enumerate USB device
23:07:42 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffc0, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x200040, 0x0)
syz_io_uring_setup(0x2a73, &(0x7f0000000400)={0x0, 0x6285, 0x8, 0x3, 0x1b9, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000480))
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

23:07:42 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x5500}, 0x0)

23:07:42 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x400000000000000}, 0x0)

23:07:42 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x7, 0x1, 0x100a})

23:07:42 executing program 1 (fault-call:1 fault-nth:3):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:07:42 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000000))
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x20601, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000012c0)={0x0, @l2tp={0x2, 0x0, @empty, 0xfffffffc}, @l2={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6, 0x1}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000300)='veth0_macvtap\x00', 0x1, 0x10000000000000, 0x1})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r4=>0x0})
fork()
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000018c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001ac0)={"6cc3e040ce2f7ef8cb505ce038b3ebf1", r4, r5, {0x1, 0x7}, {0x5, 0x2}, 0x83, [0xf43, 0xd0, 0x9, 0x8, 0x8, 0x6f, 0x2, 0x7, 0x1, 0x6, 0x2da, 0x57, 0x4, 0x10001, 0x7, 0xe830]})
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040)=r5)
writev(r2, &(0x7f0000000f40)=[{&(0x7f00000000c0)="456464bc165200eb5368522c57eed9ffcef14680a062cf453b45c91b275ca0653bbacbd11181", 0x26}, {0x0}], 0x2)

[ 1456.743776][T24715] FAULT_INJECTION: forcing a failure.
[ 1456.743776][T24715] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1456.757368][T24717] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1456.790199][T24717] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1456.807976][T24715] CPU: 1 PID: 24715 Comm: syz-executor.1 Tainted: G        W         5.13.0-syzkaller #0
[ 1456.818374][T24715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1456.828437][T24715] Call Trace:
[ 1456.831721][T24715]  dump_stack_lvl+0xcd/0x134
[ 1456.836506][T24715]  should_fail.cold+0x5/0xa
[ 1456.841028][T24715]  _copy_to_user+0x2c/0x150
[ 1456.845546][T24715]  video_usercopy+0xd82/0x16b0
[ 1456.850332][T24715]  ? subdev_do_ioctl+0x2c30/0x2c30
[ 1456.855455][T24715]  ? v4l_enumstd+0x60/0x60
[ 1456.860006][T24715]  ? __fget_files+0x288/0x3d0
[ 1456.864701][T24715]  v4l2_ioctl+0x1b3/0x250
[ 1456.869050][T24715]  ? v4l2_prio_init+0x20/0x20
[ 1456.873833][T24715]  __x64_sys_ioctl+0x193/0x200
[ 1456.878619][T24715]  do_syscall_64+0x35/0xb0
[ 1456.883057][T24715]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1456.888972][T24715] RIP: 0033:0x4665d9
[ 1456.892874][T24715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1456.906526][T24728] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1456.912865][T24715] RSP: 002b:00007fd5671cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1456.912896][T24715] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
23:07:42 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x8, 0x1, 0x100a})

23:07:42 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x5600}, 0x0)

23:07:42 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0xe7, 0x1, 0x100a})

23:07:42 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x500000000000000}, 0x0)

[ 1456.912912][T24715] RDX: 0000000020000100 RSI: 00000000c0585604 RDI: 0000000000000003
[ 1456.945742][T24715] RBP: 00007fd5671cc1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1456.953813][T24715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1456.956377][T24728] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1456.961878][T24715] R13: 0000000000a9fb1f R14: 00007fd5671cc300 R15: 0000000000022000
23:07:42 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x300, 0x1, 0x100a})

23:07:42 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x5700}, 0x0)

[ 1457.140717][T24741] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1457.159826][T24741] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1457.308811][    T7] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 1457.599266][    T7] usb 1-1: too many configurations: 186, using maximum allowed: 8
[ 1458.418883][    T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1458.427948][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1458.436591][    T7] usb 1-1: Product: syz
[ 1458.440903][    T7] usb 1-1: Manufacturer: syz
[ 1458.445495][    T7] usb 1-1: SerialNumber: syz
[ 1458.489342][    T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1459.058924][    T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1459.282123][    T7] usb 1-1: ath9k_htc: Invalid TX pipe: 0
[ 1459.288049][    T7] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
23:07:45 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x74, r0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x600000000000000}, 0x0)

23:07:45 executing program 1 (fault-call:1 fault-nth:4):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1})

23:07:45 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x500, 0x1, 0x100a})

23:07:45 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb446809000e000a000d000000ba8000001201", 0x2e}], 0x5800}, 0x0)

[ 1460.202353][T24759] udc-core: couldn't find an available UDC or it's busy
[ 1460.212311][T24759] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1460.216198][ T3600] usb 1-1: USB disconnect, device number 92
[ 1460.227202][    T7] ath9k_htc: Failed to initialize the device
[ 1460.235515][ T3600] usb 1-1: ath9k_htc: USB layer deinitialized
23:07:45 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x0, &(0x7f0000000380))
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
syz_open_dev$vcsu(&(0x7f0000000040), 0x8, 0xb2703)
syz_open_procfs(r1, &(0x7f0000000200)='net/wireless\x00')
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="acde2a5aa273d44b3cde902d0a19f9af514f4fee393a7b", 0x17, 0x8840, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7}, 0x1c)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000))
listen(0xffffffffffffffff, 0x3)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050300000000000000000b000000"], 0x14}}, 0x0)

23:07:45 executing program 0:
r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2)
read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x202fb4, &(0x7f0000000280)={0x0, 0x2bd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
read$hidraw(r0, &(0x7f00000003c0)=""/17, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffcf, 0x3, 0x1}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7e6262bd"})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
signalfd(r4, &(0x7f0000000340)={[0x401]}, 0x8)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"})
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x85, &(0x7f0000000300)=ANY=[])

[ 1460.312555][T24776] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 1460.323616][T24775] FAULT_INJECTION: forcing a failure.
[ 1460.323616][T24775] name fail_usercopy, interval 1, probability 0, space 0, times 0
23:07:45 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0xc040564a, &(0x7f0000000100)={0x600, 0x1, 0x100a})

[ 1460.356522][T24775] CPU: 0 PID: 24775 Comm: syz-executor.1 Tainted: G        W         5.13.0-syzkaller #0
[ 1460.366361][T24775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1460.376513][T24775] Call Trace:
[ 1460.379799][T24775]  dump_stack_lvl+0xcd/0x134
[ 1460.384412][T24775]  should_fail.cold+0x5/0xa
[ 1460.388944][T24775]  _copy_to_user+0x2c/0x150
[ 1460.393460][T24775]  simple_read_from_buffer+0xcc/0x160
[ 1460.398854][T24775]  proc_fail_nth_read+0x187/0x220
[ 1460.404067][T24775]  ? proc_fault_inject_read+0x220/0x220
[ 1460.409722][T24775]  ? security_file_permission+0x248/0x560
[ 1460.415459][T24775]  ? proc_fault_inject_read+0x220/0x220
[ 1460.421027][T24775]  vfs_read+0x1b5/0x570
[ 1460.425205][T24775]  ksys_read+0x12d/0x250
[ 1460.429466][T24775]  ? vfs_write+0xa30/0xa30
[ 1460.433902][T24775]  ? syscall_enter_from_user_mode+0x21/0x70
[ 1460.439821][T24775]  do_syscall_64+0x35/0xb0
[ 1460.444252][T24775]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1460.450167][T24775] RIP: 0033:0x41935c
[ 1460.454087][T24775] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1460.473710][T24775] RSP: 002b:00007fd5671cc170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1460.482169][T24775] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c
[ 1460.490152][T24775] RDX: 000000000000000f RSI: 00007fd5671cc1e0 RDI: 0000000000000004
[ 1460.497196][    C1] ------------[ cut here ]------------
[ 1460.498127][T24775] RBP: 00007fd5671cc1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1460.503608][    C1] WARNING: CPU: 1 PID: 24772 at net/ipv4/tcp_input.c:2573 tcp_cwnd_reduction+0x321/0x380
[ 1460.511538][T24775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1460.511556][T24775] R13: 0000000000a9fb1f R14: 00007fd5671cc300 R15: 0000000000022000
[ 1460.537513][    C1] Modules linked in:
[ 1460.541594][    C1] CPU: 1 PID: 24772 Comm: syz-executor.4 Tainted: G        W         5.13.0-syzkaller #0
[ 1460.551393][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1460.561440][    C1] RIP: 0010:tcp_cwnd_reduction+0x321/0x380
[ 1460.567251][    C1] Code: 38 09 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 b2 52 de f9 e8 ad 52 de f9 41 39 ec 41 0f 4e ec eb 89 e8 9f 52 de f9 <0f> 0b eb d6 e8 36 10 24 fa e9 38 fd ff ff e8 2c 10 24 fa e9 20 fe
[ 1460.586859][    C1] RSP: 0018:ffffc90000dc0680 EFLAGS: 00010246
[ 1460.593035][    C1] RAX: 0000000000000000 RBX: ffff88802e383d40 RCX: 0000000000000100
[ 1460.601473][    C1] RDX: ffff88801ceb0000 RSI: ffffffff87973791 RDI: 0000000000000003
[ 1460.609443][    C1] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000
[ 1460.617528][    C1] R10: ffffffff879734e8 R11: 0000000000000000 R12: 000000000000000a
[ 1460.625558][    C1] R13: 0000000000000000 R14: 0000000000000008 R15: ffff88802e383d40
[ 1460.633658][    C1] FS:  0000000002c44400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
[ 1460.643039][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1460.649714][    C1] CR2: 0000000021000000 CR3: 000000009f354000 CR4: 00000000001526e0
[ 1460.658496][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1460.666485][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1460.674907][    C1] Call Trace:
[ 1460.678195][    C1]  <IRQ>
[ 1460.681035][    C1]  ? tcp_rate_gen+0x44e/0x810
[ 1460.685997][    C1]  tcp_ack+0x4117/0x59a0
[ 1460.690337][    C1]  ? tcp_fastretrans_alert+0x2f40/0x2f40
[ 1460.695991][    C1]  ? add_lock_to_list.constprop.0+0x2a0/0x370
[ 1460.702346][    C1]  ? tcp_reset+0x4a0/0x4a0
[ 1460.706834][    C1]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 1460.712574][    C1]  ? ktime_get+0x30b/0x470
[ 1460.716982][    C1]  tcp_rcv_established+0x5d7/0x2130
[ 1460.722289][    C1]  ? tcp_data_queue+0x4af0/0x4af0
[ 1460.727603][    C1]  tcp_v6_do_rcv+0x41d/0x12b0
[ 1460.732371][    C1]  tcp_v6_rcv+0x31db/0x36d0
[ 1460.736864][    C1]  ? tcp_v6_err+0x17a0/0x17a0
[ 1460.741535][    C1]  ip6_protocol_deliver_rcu+0x2e9/0x17f0
[ 1460.747461][    C1]  ? ip6_finish_output+0x19c/0x200
[ 1460.752577][    C1]  ip6_input_finish+0x7f/0x160
[ 1460.757430][    C1]  ip6_input+0x9c/0xd0
[ 1460.761613][    C1]  ipv6_rcv+0x28c/0x3c0
[ 1460.765837][    C1]  ? ip6_rcv_core+0x1c50/0x1c50
[ 1460.770694][    C1]  __netif_receive_skb_one_core+0x114/0x180
[ 1460.776572][    C1]  ? __netif_receive_skb_core+0x37b0/0x37b0
[ 1460.782487][    C1]  ? do_raw_spin_lock+0x120/0x2b0
[ 1460.787495][    C1]  ? rwlock_bug.part.0+0x90/0x90
[ 1460.792427][    C1]  ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 1460.798485][    C1]  __netif_receive_skb+0x24/0x1b0
[ 1460.803679][    C1]  process_backlog+0x232/0x6c0
[ 1460.808601][    C1]  __napi_poll+0xaf/0x440
[ 1460.812928][    C1]  net_rx_action+0x801/0xb40
[ 1460.817500][    C1]  ? napi_threaded_poll+0x520/0x520
[ 1460.822693][    C1]  ? net_tx_action+0x5f9/0xdc0
[ 1460.827445][    C1]  __do_softirq+0x29b/0x9bd
[ 1460.831956][    C1]  __irq_exit_rcu+0x16e/0x1c0
[ 1460.836648][    C1]  irq_exit_rcu+0x5/0x20
[ 1460.840890][    C1]  sysvec_apic_timer_interrupt+0x93/0xc0
[ 1460.846770][    C1]  </IRQ>
[ 1460.849698][    C1]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1460.855674][    C1] RIP: 0010:finish_task_switch.isra.0+0x23c/0xa50
[ 1460.862109][    C1] Code: 8b 3a 4c 89 e7 48 c7 02 00 00 00 00 ff d1 4d 85 ff 75 bf 4c 89 e7 e8 13 49 d4 07 e8 4e cc 2b 00 fb 65 48 8b 1c 25 00 f0 01 00 <48> 8d bb 10 15 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1
[ 1460.881728][    C1] RSP: 0018:ffffc900177278b0 EFLAGS: 00000246
[ 1460.887777][    C1] RAX: 0000000000000007 RBX: ffff88801ceb0000 RCX: 1ffffffff1bd70a9
[ 1460.895752][    C1] RDX: 0000000000000000 RSI: ffffffff817b9fd1 RDI: ffffffff814fd332
[ 1460.903720][    C1] RBP: ffffc900177278f0 R08: 0000000000000000 R09: 0000000000000000
[ 1460.911865][    C1] R10: ffffffff817b9fb8 R11: 0000000000000001 R12: ffff8880b9d35a40
[ 1460.920796][    C1] R13: ffff88801bed3880 R14: 0000000000000000 R15: ffff8880b9d35a58
[ 1460.928775][    C1]  ? trace_hardirqs_on+0x38/0x1c0
[ 1460.933795][    C1]  ? trace_hardirqs_on+0x51/0x1c0
[ 1460.939117][    C1]  ? finish_task_switch.isra.0+0x232/0xa50
[ 1460.945019][    C1]  ? __switch_to+0x57c/0x1100
[ 1460.950067][    C1]  __schedule+0x93c/0x2710
[ 1460.954487][    C1]  ? io_schedule_timeout+0x140/0x140
[ 1460.959767][    C1]  ? lock_release+0x522/0x720
[ 1460.964428][    C1]  ? lock_release+0x522/0x720
[ 1460.969629][    C1]  ? try_to_wake_up+0x643/0x1540
[ 1460.974604][    C1]  ? preempt_schedule_thunk+0x16/0x18
[ 1460.979996][    C1]  preempt_schedule_common+0x45/0xc0
[ 1460.985276][    C1]  preempt_schedule_thunk+0x16/0x18
[ 1460.990515][    C1]  ? trace_hardirqs_on+0x38/0x1c0
[ 1460.995982][    C1]  ? trace_hardirqs_on+0x51/0x1c0
[ 1461.001012][    C1]  try_to_wake_up+0xa50/0x1540
[ 1461.005848][    C1]  ? migrate_swap_stop+0x820/0x820
[ 1461.010953][    C1]  ? lock_downgrade+0x6e0/0x6e0
[ 1461.015793][    C1]  ? do_raw_spin_lock+0x120/0x2b0
[ 1461.020890][    C1]  wake_up_q+0x7e/0xf0
[ 1461.024939][    C1]  ? do_raw_spin_unlock+0x171/0x230
[ 1461.030130][    C1]  futex_wake+0x3e9/0x490
[ 1461.034471][    C1]  ? futex_wait_restart+0x200/0x200
[ 1461.039753][    C1]  ? perf_trace_lock_acquire+0xf8/0x550
[ 1461.045316][    C1]  do_futex+0x2a0/0x1770
[ 1461.049558][    C1]  ? lock_acquire+0x442/0x510
[ 1461.054220][    C1]  ? lock_release+0x522/0x720
[ 1461.058888][    C1]  ? futex_exit_release+0x220/0x220
[ 1461.064077][    C1]  ? perf_trace_lock_acquire+0xf8/0x550
[ 1461.069620][    C1]  ? add_lock_to_list.constprop.0+0x370/0x370
[ 1461.075675][    C1]  ? add_lock_to_list.constprop.0+0x370/0x370
[ 1461.081733][    C1]  ? lock_downgrade+0x6e0/0x6e0
[ 1461.086563][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 1461.092793][    C1]  ? _copy_from_user+0x5d/0x180
[ 1461.097624][    C1]  ? lock_acquire+0x442/0x510
[ 1461.102364][    C1]  ? lock_release+0x522/0x720
[ 1461.107035][    C1]  __do_sys_futex+0xdc/0x3b0
[ 1461.111643][    C1]  ? do_futex+0x1770/0x1770
[ 1461.116138][    C1]  ? syscall_enter_from_user_mode+0x21/0x70
[ 1461.122055][    C1]  do_syscall_64+0x35/0xb0
[ 1461.126468][    C1]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1461.132359][    C1] RIP: 0033:0x4665d9
[ 1461.136240][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1461.155933][    C1] RSP: 002b:0000000000a9fb98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1461.164357][    C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004665d9
[ 1461.172365][    C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000056c040
[ 1461.180453][    C1] RBP: 000000000056c038 R08: 0000000000000000 R09: 0000000000000000
[ 1461.188547][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000005713e0
[ 1461.196612][    C1] R13: 0000000000a9fca0 R14: 000000000056bf80 R15: 000000000016483a
[ 1461.204597][    C1] Kernel panic - not syncing: panic_on_warn set ...
[ 1461.211167][    C1] CPU: 1 PID: 24772 Comm: syz-executor.4 Tainted: G        W         5.13.0-syzkaller #0
[ 1461.220954][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1461.230990][    C1] Call Trace:
[ 1461.234251][    C1]  <IRQ>
[ 1461.237075][    C1]  dump_stack_lvl+0xcd/0x134
[ 1461.241654][    C1]  panic+0x306/0x73d
[ 1461.245577][    C1]  ? __warn_printk+0xf3/0xf3
[ 1461.250256][    C1]  ? __warn.cold+0x1a/0x44
[ 1461.254679][    C1]  ? tcp_cwnd_reduction+0x321/0x380
[ 1461.259864][    C1]  __warn.cold+0x35/0x44
[ 1461.264098][    C1]  ? tcp_cwnd_reduction+0x321/0x380
[ 1461.269288][    C1]  report_bug+0x1bd/0x210
[ 1461.273673][    C1]  handle_bug+0x3c/0x60
[ 1461.277808][    C1]  exc_invalid_op+0x14/0x40
[ 1461.282291][    C1]  asm_exc_invalid_op+0x12/0x20
[ 1461.287123][    C1] RIP: 0010:tcp_cwnd_reduction+0x321/0x380
[ 1461.292927][    C1] Code: 38 09 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 b2 52 de f9 e8 ad 52 de f9 41 39 ec 41 0f 4e ec eb 89 e8 9f 52 de f9 <0f> 0b eb d6 e8 36 10 24 fa e9 38 fd ff ff e8 2c 10 24 fa e9 20 fe
[ 1461.312515][    C1] RSP: 0018:ffffc90000dc0680 EFLAGS: 00010246
[ 1461.318563][    C1] RAX: 0000000000000000 RBX: ffff88802e383d40 RCX: 0000000000000100
[ 1461.326522][    C1] RDX: ffff88801ceb0000 RSI: ffffffff87973791 RDI: 0000000000000003
[ 1461.334475][    C1] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000
[ 1461.342473][    C1] R10: ffffffff879734e8 R11: 0000000000000000 R12: 000000000000000a
[ 1461.350432][    C1] R13: 0000000000000000 R14: 0000000000000008 R15: ffff88802e383d40
[ 1461.358485][    C1]  ? tcp_cwnd_reduction+0x78/0x380
[ 1461.363684][    C1]  ? tcp_cwnd_reduction+0x321/0x380
[ 1461.368979][    C1]  ? tcp_rate_gen+0x44e/0x810
[ 1461.373646][    C1]  tcp_ack+0x4117/0x59a0
[ 1461.377877][    C1]  ? tcp_fastretrans_alert+0x2f40/0x2f40
[ 1461.383495][    C1]  ? add_lock_to_list.constprop.0+0x2a0/0x370
[ 1461.389562][    C1]  ? tcp_reset+0x4a0/0x4a0
[ 1461.393965][    C1]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 1461.399670][    C1]  ? ktime_get+0x30b/0x470
[ 1461.404074][    C1]  tcp_rcv_established+0x5d7/0x2130
[ 1461.409431][    C1]  ? tcp_data_queue+0x4af0/0x4af0
[ 1461.414446][    C1]  tcp_v6_do_rcv+0x41d/0x12b0
[ 1461.419107][    C1]  tcp_v6_rcv+0x31db/0x36d0
[ 1461.423638][    C1]  ? tcp_v6_err+0x17a0/0x17a0
[ 1461.428297][    C1]  ip6_protocol_deliver_rcu+0x2e9/0x17f0
[ 1461.433912][    C1]  ? ip6_finish_output+0x19c/0x200
[ 1461.439012][    C1]  ip6_input_finish+0x7f/0x160
[ 1461.443863][    C1]  ip6_input+0x9c/0xd0
[ 1461.447910][    C1]  ipv6_rcv+0x28c/0x3c0
[ 1461.452044][    C1]  ? ip6_rcv_core+0x1c50/0x1c50
[ 1461.456873][    C1]  __netif_receive_skb_one_core+0x114/0x180
[ 1461.462748][    C1]  ? __netif_receive_skb_core+0x37b0/0x37b0
[ 1461.468630][    C1]  ? do_raw_spin_lock+0x120/0x2b0
[ 1461.473632][    C1]  ? rwlock_bug.part.0+0x90/0x90
[ 1461.478548][    C1]  ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 1461.484350][    C1]  __netif_receive_skb+0x24/0x1b0
[ 1461.489447][    C1]  process_backlog+0x232/0x6c0
[ 1461.494209][    C1]  __napi_poll+0xaf/0x440
[ 1461.498542][    C1]  net_rx_action+0x801/0xb40
[ 1461.503188][    C1]  ? napi_threaded_poll+0x520/0x520
[ 1461.508383][    C1]  ? net_tx_action+0x5f9/0xdc0
[ 1461.513148][    C1]  __do_softirq+0x29b/0x9bd
[ 1461.517675][    C1]  __irq_exit_rcu+0x16e/0x1c0
[ 1461.522338][    C1]  irq_exit_rcu+0x5/0x20
[ 1461.526570][    C1]  sysvec_apic_timer_interrupt+0x93/0xc0
[ 1461.532207][    C1]  </IRQ>
[ 1461.535122][    C1]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1461.541097][    C1] RIP: 0010:finish_task_switch.isra.0+0x23c/0xa50
[ 1461.547643][    C1] Code: 8b 3a 4c 89 e7 48 c7 02 00 00 00 00 ff d1 4d 85 ff 75 bf 4c 89 e7 e8 13 49 d4 07 e8 4e cc 2b 00 fb 65 48 8b 1c 25 00 f0 01 00 <48> 8d bb 10 15 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1
[ 1461.567355][    C1] RSP: 0018:ffffc900177278b0 EFLAGS: 00000246
[ 1461.573411][    C1] RAX: 0000000000000007 RBX: ffff88801ceb0000 RCX: 1ffffffff1bd70a9
[ 1461.581450][    C1] RDX: 0000000000000000 RSI: ffffffff817b9fd1 RDI: ffffffff814fd332
[ 1461.589401][    C1] RBP: ffffc900177278f0 R08: 0000000000000000 R09: 0000000000000000
[ 1461.597370][    C1] R10: ffffffff817b9fb8 R11: 0000000000000001 R12: ffff8880b9d35a40
[ 1461.605614][    C1] R13: ffff88801bed3880 R14: 0000000000000000 R15: ffff8880b9d35a58
[ 1461.613670][    C1]  ? trace_hardirqs_on+0x38/0x1c0
[ 1461.618692][    C1]  ? trace_hardirqs_on+0x51/0x1c0
[ 1461.623725][    C1]  ? finish_task_switch.isra.0+0x232/0xa50
[ 1461.629523][    C1]  ? __switch_to+0x57c/0x1100
[ 1461.634197][    C1]  __schedule+0x93c/0x2710
[ 1461.638594][    C1]  ? io_schedule_timeout+0x140/0x140
[ 1461.643867][    C1]  ? lock_release+0x522/0x720
[ 1461.648786][    C1]  ? lock_release+0x522/0x720
[ 1461.653459][    C1]  ? try_to_wake_up+0x643/0x1540
[ 1461.658385][    C1]  ? preempt_schedule_thunk+0x16/0x18
[ 1461.663745][    C1]  preempt_schedule_common+0x45/0xc0
[ 1461.669025][    C1]  preempt_schedule_thunk+0x16/0x18
[ 1461.674226][    C1]  ? trace_hardirqs_on+0x38/0x1c0
[ 1461.679367][    C1]  ? trace_hardirqs_on+0x51/0x1c0
[ 1461.684399][    C1]  try_to_wake_up+0xa50/0x1540
[ 1461.689155][    C1]  ? migrate_swap_stop+0x820/0x820
[ 1461.694257][    C1]  ? lock_downgrade+0x6e0/0x6e0
[ 1461.699094][    C1]  ? do_raw_spin_lock+0x120/0x2b0
[ 1461.704108][    C1]  wake_up_q+0x7e/0xf0
[ 1461.708159][    C1]  ? do_raw_spin_unlock+0x171/0x230
[ 1461.713344][    C1]  futex_wake+0x3e9/0x490
[ 1461.717749][    C1]  ? futex_wait_restart+0x200/0x200
[ 1461.722945][    C1]  ? perf_trace_lock_acquire+0xf8/0x550
[ 1461.728493][    C1]  do_futex+0x2a0/0x1770
[ 1461.732732][    C1]  ? lock_acquire+0x442/0x510
[ 1461.737561][    C1]  ? lock_release+0x522/0x720
[ 1461.742223][    C1]  ? futex_exit_release+0x220/0x220
[ 1461.747417][    C1]  ? perf_trace_lock_acquire+0xf8/0x550
[ 1461.752959][    C1]  ? add_lock_to_list.constprop.0+0x370/0x370
[ 1461.759013][    C1]  ? add_lock_to_list.constprop.0+0x370/0x370
[ 1461.765072][    C1]  ? lock_downgrade+0x6e0/0x6e0
[ 1461.769903][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 1461.776265][    C1]  ? _copy_from_user+0x5d/0x180
[ 1461.781118][    C1]  ? lock_acquire+0x442/0x510
[ 1461.785779][    C1]  ? lock_release+0x522/0x720
[ 1461.790464][    C1]  __do_sys_futex+0xdc/0x3b0
[ 1461.795052][    C1]  ? do_futex+0x1770/0x1770
[ 1461.799548][    C1]  ? syscall_enter_from_user_mode+0x21/0x70
[ 1461.805443][    C1]  do_syscall_64+0x35/0xb0
[ 1461.809848][    C1]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1461.815739][    C1] RIP: 0033:0x4665d9
[ 1461.819615][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1461.839207][    C1] RSP: 002b:0000000000a9fb98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1461.847611][    C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004665d9
[ 1461.855576][    C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000056c040
[ 1461.863542][    C1] RBP: 000000000056c038 R08: 0000000000000000 R09: 0000000000000000
[ 1461.871596][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000005713e0
[ 1461.879662][    C1] R13: 0000000000a9fca0 R14: 000000000056bf80 R15: 000000000016483a
[ 1461.889256][    C1] Kernel Offset: disabled
[ 1461.893567][    C1] Rebooting in 86400 seconds..