2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:37 executing program 1: clock_gettime(0x1, &(0x7f00000003c0)) 08:34:37 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:34:37 executing program 3: socketpair(0x10, 0x80000, 0xfffffffa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x71, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0x9) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r2 = accept4(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x80, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f00000001c0)=0xa22) recvfrom$rose(0xffffffffffffffff, &(0x7f00000084c0)=""/243, 0xf3, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:37 executing program 1: clock_gettime(0x0, &(0x7f00000003c0)) 08:34:37 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3342.686135][ T9588] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3342.699806][ T9588] ath9k_htc: Failed to initialize the device [ 3342.717436][T21800] usb 6-1: ath9k_htc: USB layer deinitialized [ 3342.915099][ T9680] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 3343.086165][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3343.093753][ T9757] ath9k_htc: Failed to initialize the device [ 3343.101611][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3343.165128][ T9613] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3343.172157][ T9613] ath9k_htc: Failed to initialize the device [ 3343.181317][ T9672] usb 3-1: ath9k_htc: USB layer deinitialized [ 3343.435309][ T9680] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3343.444596][ T9680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3343.458862][ T9680] usb 1-1: Product: syz [ 3343.463119][ T9680] usb 1-1: Manufacturer: syz [ 3343.469129][ T9680] usb 1-1: SerialNumber: syz [ 3343.495336][T11861] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 3343.515989][ T9680] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3343.545256][ T9672] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 3344.075343][ T9672] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3344.085322][ T9672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3344.093938][ T9672] usb 3-1: Product: syz [ 3344.098938][ T9672] usb 3-1: Manufacturer: syz [ 3344.104077][ T9672] usb 3-1: SerialNumber: syz [ 3344.115298][ T9680] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3344.115588][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3344.152192][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3344.162928][T11861] usb 5-1: Product: syz [ 3344.166143][ T9672] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3344.178055][T11861] usb 5-1: Manufacturer: syz [ 3344.182766][T11861] usb 5-1: SerialNumber: syz [ 3344.266270][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3344.345937][ T9588] usb 1-1: USB disconnect, device number 74 [ 3344.755251][ T9672] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3344.935396][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:34:39 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:39 executing program 3: socketpair(0x10, 0x80000, 0xfffffffa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x71, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0x9) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) accept4(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x80, 0x0) recvfrom$rose(0xffffffffffffffff, &(0x7f00000084c0)=""/243, 0xf3, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:39 executing program 1: clock_gettime(0x0, &(0x7f00000003c0)) 08:34:39 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:34:39 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3344.983502][ T9757] usb 3-1: USB disconnect, device number 113 08:34:39 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:39 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:34:39 executing program 3: socketpair(0x10, 0x80000, 0xfffffffa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x71, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0x9) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) recvfrom$rose(0xffffffffffffffff, &(0x7f00000084c0)=""/243, 0xf3, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:39 executing program 1: clock_gettime(0x0, &(0x7f00000003c0)) 08:34:39 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3345.171230][ T9680] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3345.187526][ T9680] ath9k_htc: Failed to initialize the device [ 3345.233633][ T9588] usb 1-1: ath9k_htc: USB layer deinitialized [ 3345.272345][T21800] usb 5-1: USB disconnect, device number 15 08:34:39 executing program 3: socketpair(0x10, 0x80000, 0xfffffffa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x71, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0x9) recvfrom$rose(0xffffffffffffffff, &(0x7f00000084c0)=""/243, 0xf3, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:39 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3345.805106][ T9672] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3345.812822][ T9672] ath9k_htc: Failed to initialize the device [ 3345.821628][ T9757] usb 3-1: ath9k_htc: USB layer deinitialized [ 3345.965276][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3345.972351][T11861] ath9k_htc: Failed to initialize the device [ 3345.980101][T21800] usb 5-1: ath9k_htc: USB layer deinitialized [ 3346.195251][ T9757] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 3346.345123][T21800] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 3346.775263][ T9757] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3346.784600][ T9757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3346.794144][ T9757] usb 3-1: Product: syz [ 3346.799177][ T9757] usb 3-1: Manufacturer: syz [ 3346.804925][ T9757] usb 3-1: SerialNumber: syz [ 3346.856064][ T9757] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3346.865626][T21800] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3346.874698][T21800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3346.893312][T21800] usb 5-1: Product: syz [ 3346.899734][T21800] usb 5-1: Manufacturer: syz [ 3346.906434][T21800] usb 5-1: SerialNumber: syz [ 3346.946016][T21800] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3347.505300][ T9757] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3347.525296][T21800] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:34:42 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:42 executing program 1: clock_gettime(0x1, 0x0) 08:34:42 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) 08:34:42 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) 08:34:42 executing program 3: socketpair(0x10, 0x80000, 0xfffffffa, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x71, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) recvfrom$rose(0xffffffffffffffff, &(0x7f00000084c0)=""/243, 0xf3, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) [ 3347.720458][ T9054] usb 3-1: USB disconnect, device number 114 08:34:42 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 3347.809506][ T9672] usb 5-1: USB disconnect, device number 16 08:34:42 executing program 3: socketpair(0x10, 0x80000, 0xfffffffa, &(0x7f0000000000)) recvfrom$rose(0xffffffffffffffff, &(0x7f00000084c0)=""/243, 0xf3, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:42 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:34:42 executing program 1: clock_gettime(0x1, 0x0) 08:34:42 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:34:42 executing program 3: recvfrom$rose(0xffffffffffffffff, &(0x7f00000084c0)=""/243, 0xf3, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:42 executing program 1: clock_gettime(0x1, 0x0) [ 3348.525252][ T9757] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3348.532864][ T9757] ath9k_htc: Failed to initialize the device [ 3348.542608][ T9054] usb 3-1: ath9k_htc: USB layer deinitialized [ 3348.605806][T21800] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3348.612795][T21800] ath9k_htc: Failed to initialize the device [ 3348.621880][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3348.905089][ T9054] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 3348.995097][ T9672] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 3349.435214][ T9054] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3349.444808][ T9054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3349.454642][ T9054] usb 3-1: Product: syz [ 3349.459801][ T9054] usb 3-1: Manufacturer: syz [ 3349.465787][ T9054] usb 3-1: SerialNumber: syz [ 3349.505954][ T9054] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3349.555247][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3349.565255][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3349.573512][ T9672] usb 5-1: Product: syz [ 3349.578500][ T9672] usb 5-1: Manufacturer: syz [ 3349.583327][ T9672] usb 5-1: SerialNumber: syz [ 3349.636225][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3350.085237][ T9054] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3350.245226][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:34:44 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:44 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) 08:34:44 executing program 3: recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x10000, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:44 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:34:44 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) [ 3350.302981][ T9613] usb 3-1: USB disconnect, device number 115 08:34:45 executing program 3: recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000085c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 08:34:45 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) socket$nl_route(0x10, 0x3, 0x0) 08:34:45 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) 08:34:45 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:45 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) [ 3350.527210][ T9757] usb 5-1: USB disconnect, device number 17 08:34:45 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) 08:34:45 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 3351.165387][ T9054] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3351.172366][ T9054] ath9k_htc: Failed to initialize the device [ 3351.182046][ T9613] usb 3-1: ath9k_htc: USB layer deinitialized [ 3351.325049][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3351.332227][ T9672] ath9k_htc: Failed to initialize the device [ 3351.344767][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3351.555322][ T9613] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 3351.705105][ T9757] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 3352.075380][ T9613] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3352.084598][ T9613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3352.094420][ T9613] usb 3-1: Product: syz [ 3352.099075][ T9613] usb 3-1: Manufacturer: syz [ 3352.103935][ T9613] usb 3-1: SerialNumber: syz [ 3352.156084][ T9613] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3352.225344][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3352.234517][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3352.243332][ T9757] usb 5-1: Product: syz [ 3352.248016][ T9757] usb 5-1: Manufacturer: syz [ 3352.252626][ T9757] usb 5-1: SerialNumber: syz [ 3352.296372][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3352.725358][ T9613] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3352.865217][ T9757] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:34:47 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0), 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:47 executing program 3: recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 08:34:47 executing program 1: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:47 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:34:47 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) [ 3352.946961][ T9054] usb 3-1: USB disconnect, device number 116 08:34:47 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:34:47 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0), 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:47 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:47 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) socket$nl_route(0x10, 0x3, 0x0) [ 3353.136611][ T9672] usb 5-1: USB disconnect, device number 18 08:34:47 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:47 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) [ 3353.335221][T11033] usb 2-1: new high-speed USB device number 3 using dummy_hcd 08:34:48 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) socket$nl_route(0x10, 0x3, 0x0) [ 3353.805126][ T9613] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3353.812843][ T9613] ath9k_htc: Failed to initialize the device [ 3353.822009][ T9054] usb 3-1: ath9k_htc: USB layer deinitialized [ 3353.855345][T11033] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3353.864533][T11033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3353.873680][T11033] usb 2-1: Product: syz [ 3353.878657][T11033] usb 2-1: Manufacturer: syz [ 3353.883255][T11033] usb 2-1: SerialNumber: syz [ 3353.889581][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3353.902321][ T9757] ath9k_htc: Failed to initialize the device [ 3353.911356][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3353.936362][T11033] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3354.195498][ T9054] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 3354.315156][ T9672] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 3354.555549][T11033] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3354.755775][ T9054] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3354.775379][ T9054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3354.783437][ T9054] usb 3-1: Product: syz [ 3354.808901][ T9054] usb 3-1: Manufacturer: syz [ 3354.813551][ T9054] usb 3-1: SerialNumber: syz [ 3354.831423][T11861] usb 2-1: USB disconnect, device number 3 [ 3354.835199][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3354.858329][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3354.867010][ T9672] usb 5-1: Product: syz [ 3354.871379][ T9672] usb 5-1: Manufacturer: syz [ 3354.876828][ T9672] usb 5-1: SerialNumber: syz [ 3354.898362][ T9054] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3354.935936][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3355.505214][ T9054] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3355.505215][T21800] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3355.645435][T11033] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3355.652554][T11033] ath9k_htc: Failed to initialize the device [ 3355.659894][T11861] usb 2-1: ath9k_htc: USB layer deinitialized 08:34:50 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0), 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:50 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:50 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) 08:34:50 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) 08:34:50 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3355.734366][ T9588] usb 3-1: USB disconnect, device number 117 08:34:50 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0), 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 3355.786171][ T9672] usb 5-1: USB disconnect, device number 19 08:34:50 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:34:50 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) 08:34:50 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:50 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) 08:34:50 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 08:34:50 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) [ 3356.525138][ T9054] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3356.534204][ T9054] ath9k_htc: Failed to initialize the device [ 3356.542989][ T9588] usb 3-1: ath9k_htc: USB layer deinitialized [ 3356.615324][T21800] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3356.623040][T21800] ath9k_htc: Failed to initialize the device [ 3356.631294][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3356.938019][ T9588] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 3357.025087][ T9672] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 3357.475621][ T9588] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3357.484798][ T9588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3357.493565][ T9588] usb 3-1: Product: syz [ 3357.498392][ T9588] usb 3-1: Manufacturer: syz [ 3357.503008][ T9588] usb 3-1: SerialNumber: syz [ 3357.576558][ T9588] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3357.603114][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3357.614199][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3357.629016][ T9672] usb 5-1: Product: syz [ 3357.633234][ T9672] usb 5-1: Manufacturer: syz [ 3357.639851][ T9672] usb 5-1: SerialNumber: syz [ 3357.686275][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3358.215206][ T9588] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3358.335345][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:34:53 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:34:53 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:34:53 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0), 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:53 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$nl_route(0x10, 0x3, 0x0) 08:34:53 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) [ 3358.433323][T12681] usb 3-1: USB disconnect, device number 118 08:34:53 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0), 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:53 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:53 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) 08:34:53 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) 08:34:53 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) socket$nl_route(0x10, 0x3, 0x0) [ 3358.614905][ T9680] usb 5-1: USB disconnect, device number 20 08:34:53 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:53 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) socket$nl_route(0x10, 0x3, 0x0) 08:34:53 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:34:53 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) [ 3359.255086][ T9588] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3359.262716][ T9588] ath9k_htc: Failed to initialize the device [ 3359.271521][T12681] usb 3-1: ath9k_htc: USB layer deinitialized [ 3359.412818][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3359.420276][ T9672] ath9k_htc: Failed to initialize the device [ 3359.428754][ T9680] usb 5-1: ath9k_htc: USB layer deinitialized [ 3359.655150][T12681] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 3359.825064][ T9680] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 3360.255619][T12681] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3360.264854][T12681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3360.274240][T12681] usb 3-1: Product: syz [ 3360.279624][T12681] usb 3-1: Manufacturer: syz [ 3360.284234][T12681] usb 3-1: SerialNumber: syz [ 3360.346092][T12681] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3360.405486][ T9680] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3360.414772][ T9680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3360.425700][ T9680] usb 5-1: Product: syz [ 3360.429979][ T9680] usb 5-1: Manufacturer: syz [ 3360.434761][ T9680] usb 5-1: SerialNumber: syz [ 3360.486103][ T9680] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3361.005368][T12681] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3361.115413][ T9680] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:34:55 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:55 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) 08:34:55 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 3361.221966][ T9672] usb 3-1: USB disconnect, device number 119 08:34:55 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:55 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:55 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:34:55 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) 08:34:55 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 3361.351089][ T9588] usb 5-1: USB disconnect, device number 21 08:34:56 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:56 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 08:34:56 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$nl_route(0x10, 0x3, 0x0) 08:34:56 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3362.045122][T12681] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3362.052144][T12681] ath9k_htc: Failed to initialize the device [ 3362.060953][ T9672] usb 3-1: ath9k_htc: USB layer deinitialized [ 3362.205588][ T9680] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3362.212700][ T9680] ath9k_htc: Failed to initialize the device [ 3362.221079][ T9588] usb 5-1: ath9k_htc: USB layer deinitialized [ 3362.435239][ T9672] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 3362.585084][ T9588] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 3362.955426][ T9672] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3362.964729][ T9672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3362.981547][ T9672] usb 3-1: Product: syz [ 3362.986914][ T9672] usb 3-1: Manufacturer: syz [ 3362.991522][ T9672] usb 3-1: SerialNumber: syz [ 3363.046221][ T9672] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3363.105273][ T9588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3363.114626][ T9588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3363.124467][ T9588] usb 5-1: Product: syz [ 3363.129577][ T9588] usb 5-1: Manufacturer: syz [ 3363.134191][ T9588] usb 5-1: SerialNumber: syz [ 3363.176081][ T9588] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3363.615362][ T9675] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3363.745174][ T9588] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:34:58 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:34:58 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) socket$nl_route(0x10, 0x3, 0x0) 08:34:58 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) [ 3363.834301][ T9054] usb 3-1: USB disconnect, device number 120 08:34:58 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:34:58 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) 08:34:58 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:34:58 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) 08:34:58 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) [ 3363.992305][T12681] usb 5-1: USB disconnect, device number 22 08:34:58 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:34:58 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$nl_route(0x10, 0x3, 0x0) 08:34:58 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)={0x20000000}) 08:34:58 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) [ 3364.685725][ T9675] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3364.692867][ T9675] ath9k_htc: Failed to initialize the device [ 3364.700970][ T9054] usb 3-1: ath9k_htc: USB layer deinitialized [ 3364.765117][ T9588] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3364.772848][ T9588] ath9k_htc: Failed to initialize the device [ 3364.781731][T12681] usb 5-1: ath9k_htc: USB layer deinitialized [ 3365.075260][ T9054] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 3365.145075][T12681] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 3365.615545][ T9054] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3365.624849][ T9054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3365.635826][ T9054] usb 3-1: Product: syz [ 3365.640211][ T9054] usb 3-1: Manufacturer: syz [ 3365.645957][ T9054] usb 3-1: SerialNumber: syz [ 3365.695983][ T9054] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3365.709833][T12681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3365.720457][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3365.732501][T12681] usb 5-1: Product: syz [ 3365.739366][T12681] usb 5-1: Manufacturer: syz [ 3365.746752][T12681] usb 5-1: SerialNumber: syz [ 3365.796097][T12681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3366.275293][ T9054] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3366.445284][T12681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:01 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:01 executing program 5: socket$nl_route(0x10, 0x3, 0x0) 08:35:01 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 3366.489919][ T9613] usb 3-1: USB disconnect, device number 121 08:35:01 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:01 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 08:35:01 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:01 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 08:35:01 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 3366.663437][T11861] usb 5-1: USB disconnect, device number 23 08:35:01 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:01 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 08:35:01 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 08:35:01 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$nl_route(0x10, 0x3, 0x0) [ 3367.325166][ T9054] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3367.332632][ T9054] ath9k_htc: Failed to initialize the device [ 3367.341965][ T9613] usb 3-1: ath9k_htc: USB layer deinitialized [ 3367.485686][T12681] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3367.492835][T12681] ath9k_htc: Failed to initialize the device [ 3367.500879][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3367.715097][ T9613] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 3367.905258][T11861] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 3368.315453][ T9613] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3368.324707][ T9613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3368.333774][ T9613] usb 3-1: Product: syz [ 3368.338875][ T9613] usb 3-1: Manufacturer: syz [ 3368.343520][ T9613] usb 3-1: SerialNumber: syz [ 3368.386008][ T9613] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3368.465416][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3368.474615][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3368.483153][T11861] usb 5-1: Product: syz [ 3368.488692][T11861] usb 5-1: Manufacturer: syz [ 3368.493310][T11861] usb 5-1: SerialNumber: syz [ 3368.546128][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3369.045512][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3369.205286][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:03 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:03 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 08:35:03 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3369.263588][ T9054] usb 3-1: USB disconnect, device number 122 08:35:04 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:04 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000045c0)) 08:35:04 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) socket$nl_route(0x10, 0x3, 0x0) 08:35:04 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$nl_route(0x10, 0x3, 0x0) 08:35:04 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3369.424469][ T9757] usb 5-1: USB disconnect, device number 24 08:35:04 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:04 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:04 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 08:35:04 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3370.125068][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3370.132238][T11033] ath9k_htc: Failed to initialize the device [ 3370.141194][ T9054] usb 3-1: ath9k_htc: USB layer deinitialized [ 3370.285151][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3370.292310][T11861] ath9k_htc: Failed to initialize the device [ 3370.301218][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3370.505213][ T9054] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 3370.665265][ T9757] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 3371.025240][ T9054] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3371.035246][ T9054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3371.043904][ T9054] usb 3-1: Product: syz [ 3371.049225][ T9054] usb 3-1: Manufacturer: syz [ 3371.054339][ T9054] usb 3-1: SerialNumber: syz [ 3371.095985][ T9054] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3371.185277][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3371.194763][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3371.204255][ T9757] usb 5-1: Product: syz [ 3371.209431][ T9757] usb 5-1: Manufacturer: syz [ 3371.214462][ T9757] usb 5-1: SerialNumber: syz [ 3371.256101][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3371.675264][ T9054] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3371.845273][ T9757] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:06 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:06 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) socket$nl_route(0x10, 0x3, 0x0) 08:35:06 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3371.901821][ T9588] usb 3-1: USB disconnect, device number 123 08:35:06 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:06 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$nl_route(0x10, 0x3, 0x0) 08:35:06 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:35:06 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:06 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) socket$nl_route(0x10, 0x3, 0x0) [ 3372.065632][ T9675] usb 5-1: USB disconnect, device number 25 08:35:06 executing program 5: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0), 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:06 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) socket$nl_route(0x10, 0x3, 0x0) 08:35:06 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:06 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$nl_route(0x10, 0x3, 0x0) [ 3372.585180][T11861] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 3372.765495][ T9054] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3372.772626][ T9054] ath9k_htc: Failed to initialize the device [ 3372.782318][ T9588] usb 3-1: ath9k_htc: USB layer deinitialized [ 3372.925475][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3372.932584][ T9757] ath9k_htc: Failed to initialize the device [ 3372.942017][ T9675] usb 5-1: ath9k_htc: USB layer deinitialized [ 3373.105220][T11861] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3373.114382][T11861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3373.131194][T11861] usb 6-1: Product: syz [ 3373.135873][T11861] usb 6-1: Manufacturer: syz [ 3373.140493][T11861] usb 6-1: SerialNumber: syz [ 3373.175170][ T9588] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 3373.196829][T11861] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3373.355095][ T9675] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 3373.735288][ T9588] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3373.744460][ T9588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3373.755350][ T9588] usb 3-1: Product: syz [ 3373.759585][ T9588] usb 3-1: Manufacturer: syz [ 3373.764191][ T9588] usb 3-1: SerialNumber: syz [ 3373.765176][T11861] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3373.836727][ T9588] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3373.925505][ T9675] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3373.934874][ T9675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3373.945218][ T9675] usb 5-1: Product: syz [ 3373.949416][ T9675] usb 5-1: Manufacturer: syz [ 3373.954017][ T9675] usb 5-1: SerialNumber: syz [ 3374.017041][ T9054] usb 6-1: USB disconnect, device number 98 [ 3374.019732][ T9675] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3374.475346][ T9588] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:09 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:09 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:09 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3374.665366][T12681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3374.699789][ T9672] usb 3-1: USB disconnect, device number 124 [ 3374.845298][T11861] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3374.852520][T11861] ath9k_htc: Failed to initialize the device [ 3374.861131][ T9054] usb 6-1: ath9k_htc: USB layer deinitialized 08:35:09 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:09 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) 08:35:09 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:09 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:09 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3374.891934][ T9675] usb 5-1: USB disconnect, device number 26 08:35:09 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:09 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:35:09 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$nl_route(0x10, 0x3, 0x0) 08:35:09 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:09 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3375.575289][ T9588] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3375.582337][ T9588] ath9k_htc: Failed to initialize the device [ 3375.590054][ T9672] usb 3-1: ath9k_htc: USB layer deinitialized [ 3375.725069][T12681] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3375.732124][T12681] ath9k_htc: Failed to initialize the device [ 3375.740870][ T9675] usb 5-1: ath9k_htc: USB layer deinitialized [ 3375.975259][ T9672] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 3376.135109][ T9675] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 3376.505355][ T9672] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3376.514911][ T9672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3376.524682][ T9672] usb 3-1: Product: syz [ 3376.529908][ T9672] usb 3-1: Manufacturer: syz [ 3376.534917][ T9672] usb 3-1: SerialNumber: syz [ 3376.586470][ T9672] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3376.685508][ T9675] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3376.694634][ T9675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3376.703526][ T9675] usb 5-1: Product: syz [ 3376.708147][ T9675] usb 5-1: Manufacturer: syz [ 3376.712762][ T9675] usb 5-1: SerialNumber: syz [ 3376.756132][ T9675] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3377.215280][ T9672] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3377.355415][ T9675] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:12 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:12 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3377.436634][T11861] usb 3-1: USB disconnect, device number 125 08:35:12 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x0, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:12 executing program 3: socket$nl_route(0x10, 0x3, 0x0) 08:35:12 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:12 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:35:12 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) [ 3377.571442][ T9054] usb 5-1: USB disconnect, device number 27 08:35:12 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:35:12 executing program 3: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:12 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:12 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) 08:35:12 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) [ 3378.145121][T12681] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 3378.285335][ T9672] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3378.292732][ T9672] ath9k_htc: Failed to initialize the device [ 3378.301053][T11861] usb 3-1: ath9k_htc: USB layer deinitialized [ 3378.445315][ T9675] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3378.452430][ T9675] ath9k_htc: Failed to initialize the device [ 3378.461522][ T9054] usb 5-1: ath9k_htc: USB layer deinitialized [ 3378.665532][T12681] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3378.674648][T12681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3378.685332][T11861] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 3378.693024][T12681] usb 4-1: Product: syz [ 3378.693048][T12681] usb 4-1: Manufacturer: syz [ 3378.704285][T12681] usb 4-1: SerialNumber: syz [ 3378.755925][T12681] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3378.855118][ T9054] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 3379.296048][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3379.305321][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3379.313320][T11861] usb 3-1: Product: syz [ 3379.320372][T11861] usb 3-1: Manufacturer: syz [ 3379.326224][T11861] usb 3-1: SerialNumber: syz [ 3379.335192][T12681] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3379.376808][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3379.495361][ T9054] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3379.504448][ T9054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3379.515420][ T9054] usb 5-1: Product: syz [ 3379.519613][ T9054] usb 5-1: Manufacturer: syz [ 3379.524209][ T9054] usb 5-1: SerialNumber: syz [ 3379.572505][ T9672] usb 4-1: USB disconnect, device number 47 [ 3379.600870][ T9054] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3380.055325][T11861] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:14 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:14 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3380.272408][T21800] usb 3-1: USB disconnect, device number 126 [ 3380.305353][ T9054] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3380.365097][T12681] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3380.375506][T12681] ath9k_htc: Failed to initialize the device [ 3380.382392][ T9672] usb 4-1: ath9k_htc: USB layer deinitialized 08:35:15 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x0, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:15 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:35:15 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:35:15 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:15 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3380.523698][ T9757] usb 5-1: USB disconnect, device number 28 08:35:15 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) 08:35:15 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) 08:35:15 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:15 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:35:15 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) [ 3381.085323][T11861] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3381.093157][T11861] ath9k_htc: Failed to initialize the device [ 3381.100872][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3381.405151][ T9054] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3381.412559][ T9054] ath9k_htc: Failed to initialize the device [ 3381.426560][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3381.475316][T21800] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 3381.785241][ T9757] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 3382.055228][T21800] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3382.064297][T21800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3382.072773][T21800] usb 3-1: Product: syz [ 3382.077439][T21800] usb 3-1: Manufacturer: syz [ 3382.082048][T21800] usb 3-1: SerialNumber: syz [ 3382.126468][T21800] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3382.305243][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3382.314318][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3382.322592][ T9757] usb 5-1: Product: syz [ 3382.326888][ T9757] usb 5-1: Manufacturer: syz [ 3382.331498][ T9757] usb 5-1: SerialNumber: syz [ 3382.376039][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3382.785226][T21800] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3382.955124][ T9054] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:17 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x0, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:17 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) [ 3383.003825][T11861] usb 3-1: USB disconnect, device number 127 08:35:17 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x0, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:17 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) 08:35:17 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) 08:35:17 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:17 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000004580)) [ 3383.172981][ T9757] usb 5-1: USB disconnect, device number 29 08:35:17 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000004580)) 08:35:17 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000004580)) 08:35:17 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) 08:35:17 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:18 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) [ 3383.815515][T21800] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3383.822550][T21800] ath9k_htc: Failed to initialize the device [ 3383.830516][T11861] usb 3-1: ath9k_htc: USB layer deinitialized [ 3384.045054][ T9054] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3384.052470][ T9054] ath9k_htc: Failed to initialize the device [ 3384.060023][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3384.185139][T11861] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 3384.415164][ T9757] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 3384.705511][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3384.716228][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3384.724453][T11861] usb 3-1: Product: syz [ 3384.728907][T11861] usb 3-1: Manufacturer: syz [ 3384.733518][T11861] usb 3-1: SerialNumber: syz [ 3384.776139][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3384.955606][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3384.966447][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3384.974458][ T9757] usb 5-1: Product: syz [ 3384.978969][ T9757] usb 5-1: Manufacturer: syz [ 3384.983583][ T9757] usb 5-1: SerialNumber: syz [ 3385.036205][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3385.355377][T11861] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:20 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x0, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:20 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000004580)) [ 3385.573007][ T9054] usb 3-1: USB disconnect, device number 2 [ 3385.615439][ T9757] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:20 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x0, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:20 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000004580)) 08:35:20 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) 08:35:20 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) 08:35:20 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000004580)) [ 3385.835865][ T9672] usb 5-1: USB disconnect, device number 30 08:35:20 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:20 executing program 3: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000004580)) 08:35:20 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:20 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 08:35:20 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), 0x0) [ 3386.445248][T11861] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3386.452280][T11861] ath9k_htc: Failed to initialize the device [ 3386.458832][ T9054] usb 3-1: ath9k_htc: USB layer deinitialized [ 3386.685248][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3386.692278][ T9757] ath9k_htc: Failed to initialize the device [ 3386.701162][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3386.825061][ T9054] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 3387.066136][ T9672] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 3387.415721][ T9054] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3387.426118][ T9054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3387.434357][ T9054] usb 3-1: Product: syz [ 3387.438982][ T9054] usb 3-1: Manufacturer: syz [ 3387.443818][ T9054] usb 3-1: SerialNumber: syz [ 3387.496206][ T9054] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3387.585183][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3387.594736][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3387.604172][ T9672] usb 5-1: Product: syz [ 3387.609324][ T9672] usb 5-1: Manufacturer: syz [ 3387.613956][ T9672] usb 5-1: SerialNumber: syz [ 3387.666287][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3388.125432][ T9054] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3388.245114][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:22 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x0, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:22 executing program 3: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000004580)) [ 3388.339236][T21800] usb 3-1: USB disconnect, device number 3 08:35:23 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x0, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:23 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:23 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) 08:35:23 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:23 executing program 3: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000004580)) [ 3388.466477][T12681] usb 5-1: USB disconnect, device number 31 08:35:23 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:23 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000004580)) 08:35:23 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:23 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:23 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), 0x0) [ 3388.926308][ T3252] ieee802154 phy0 wpan0: encryption failed: -22 [ 3388.932654][ T3252] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.175207][ T9054] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3389.182469][ T9054] ath9k_htc: Failed to initialize the device [ 3389.191302][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3389.325158][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3389.332203][ T9672] ath9k_htc: Failed to initialize the device [ 3389.340511][T12681] usb 5-1: ath9k_htc: USB layer deinitialized [ 3389.555263][T21800] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 3389.705221][T12681] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 3390.075321][T21800] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3390.085835][T21800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3390.094552][T21800] usb 3-1: Product: syz [ 3390.099653][T21800] usb 3-1: Manufacturer: syz [ 3390.104894][T21800] usb 3-1: SerialNumber: syz [ 3390.156415][T21800] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3390.225168][T12681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3390.234376][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3390.243615][T12681] usb 5-1: Product: syz [ 3390.251141][T12681] usb 5-1: Manufacturer: syz [ 3390.257102][T12681] usb 5-1: SerialNumber: syz [ 3390.306030][T12681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3390.735163][T21800] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3390.905422][T12681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:25 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:25 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000004580)) [ 3390.951210][T11861] usb 3-1: USB disconnect, device number 4 08:35:25 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x0, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:25 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:25 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) 08:35:25 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:25 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000004580)) [ 3391.121643][ T9054] usb 5-1: USB disconnect, device number 32 08:35:25 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) 08:35:25 executing program 1: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:25 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 08:35:25 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:25 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) [ 3391.805065][T21800] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3391.812842][T21800] ath9k_htc: Failed to initialize the device [ 3391.821404][T11861] usb 3-1: ath9k_htc: USB layer deinitialized [ 3391.965096][T12681] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3391.972384][T12681] ath9k_htc: Failed to initialize the device [ 3391.980157][ T9054] usb 5-1: ath9k_htc: USB layer deinitialized [ 3392.235134][T11861] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 3392.365421][ T9054] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 3392.775352][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3392.784787][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3392.795660][T11861] usb 3-1: Product: syz [ 3392.799847][T11861] usb 3-1: Manufacturer: syz [ 3392.804462][T11861] usb 3-1: SerialNumber: syz [ 3392.856373][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3392.885340][ T9054] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3392.902039][ T9054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3392.912355][ T9054] usb 5-1: Product: syz [ 3392.918242][ T9054] usb 5-1: Manufacturer: syz [ 3392.922945][ T9054] usb 5-1: SerialNumber: syz [ 3392.966613][ T9054] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3393.435281][T11861] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3393.545311][ T9054] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:28 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:28 executing program 1: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), 0x0) [ 3393.656977][ T9613] usb 3-1: USB disconnect, device number 5 08:35:28 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:28 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:28 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:35:28 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 08:35:28 executing program 1: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:28 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) [ 3393.772534][ T9757] usb 5-1: USB disconnect, device number 33 08:35:28 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:28 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:28 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:28 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 08:35:28 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:28 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) socket$kcm(0x29, 0x7, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 3394.525136][T11861] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3394.532118][T11861] ath9k_htc: Failed to initialize the device [ 3394.541584][ T9613] usb 3-1: ath9k_htc: USB layer deinitialized [ 3394.605271][ T9054] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3394.612864][ T9054] ath9k_htc: Failed to initialize the device [ 3394.623078][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3394.915160][ T9613] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 3395.005297][ T9757] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 3395.485991][ T9613] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3395.495172][ T9613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3395.503176][ T9613] usb 3-1: Product: syz [ 3395.510032][ T9613] usb 3-1: Manufacturer: syz [ 3395.514647][ T9613] usb 3-1: SerialNumber: syz [ 3395.575300][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3395.584396][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3395.595283][ T9613] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3395.618527][ T9757] usb 5-1: Product: syz [ 3395.622734][ T9757] usb 5-1: Manufacturer: syz [ 3395.633481][ T9757] usb 5-1: SerialNumber: syz [ 3395.685881][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3396.345375][ T9613] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3396.405220][ T9757] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3396.566344][T12681] usb 3-1: USB disconnect, device number 6 08:35:31 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:31 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000004540), 0x0) 08:35:31 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) 08:35:31 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:31 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:31 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3396.626093][T11861] usb 5-1: USB disconnect, device number 34 08:35:31 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:31 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:31 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) 08:35:31 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 08:35:31 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) 08:35:31 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:31 executing program 3: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x0, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:31 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 08:35:31 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 3397.345509][T11033] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3397.405325][ T9613] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3397.412430][ T9613] ath9k_htc: Failed to initialize the device [ 3397.425499][T12681] usb 3-1: ath9k_htc: USB layer deinitialized [ 3397.495524][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3397.502627][ T9757] ath9k_htc: Failed to initialize the device [ 3397.511734][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3397.785140][T12681] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 3397.895408][T11861] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 3397.945841][T11033] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3397.956965][T11033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3397.965959][T11033] usb 4-1: Product: syz [ 3397.970409][T11033] usb 4-1: Manufacturer: syz [ 3397.978151][T11033] usb 4-1: SerialNumber: syz [ 3398.036277][T11033] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3398.305159][T12681] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3398.315047][T12681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3398.323209][T12681] usb 3-1: Product: syz [ 3398.329570][T12681] usb 3-1: Manufacturer: syz [ 3398.334282][T12681] usb 3-1: SerialNumber: syz [ 3398.386680][T12681] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3398.495515][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3398.504754][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3398.516108][T11861] usb 5-1: Product: syz [ 3398.520301][T11861] usb 5-1: Manufacturer: syz [ 3398.524897][T11861] usb 5-1: SerialNumber: syz [ 3398.586255][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3398.645296][T11033] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3398.874133][ T9588] usb 4-1: USB disconnect, device number 48 [ 3398.965134][T12681] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3399.181673][T21800] usb 3-1: USB disconnect, device number 7 [ 3399.315189][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:34 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:34 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000044c0)) 08:35:34 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) 08:35:34 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:34 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) 08:35:34 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x10, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3399.533676][T12454] usb 5-1: USB disconnect, device number 35 08:35:34 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 08:35:34 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:34 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xffff, &(0x7f00000001c0)={[0x7f5]}, 0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000043c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000044c0)=0xe8) connect$can_j1939(r3, &(0x7f0000004500)={0x1d, r4, 0x1, {0x2, 0xf0}, 0xfe}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000004540), &(0x7f0000004580)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f00000045c0)={0x20000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000006200)={r6}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x8000, 0x0) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f0000006280)=""/246) 08:35:34 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) [ 3399.725079][T11033] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3399.738694][T11033] ath9k_htc: Failed to initialize the device [ 3399.769577][ T9588] usb 4-1: ath9k_htc: USB layer deinitialized 08:35:34 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:35:34 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) [ 3400.047127][T12681] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3400.054345][T12681] ath9k_htc: Failed to initialize the device [ 3400.063900][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3400.365090][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3400.372124][T11861] ath9k_htc: Failed to initialize the device [ 3400.380255][T12454] usb 5-1: ath9k_htc: USB layer deinitialized [ 3400.445151][T21800] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 3400.745099][T12454] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 3401.015459][T21800] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3401.024660][T21800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3401.039403][T21800] usb 3-1: Product: syz [ 3401.043601][T21800] usb 3-1: Manufacturer: syz [ 3401.049464][T21800] usb 3-1: SerialNumber: syz [ 3401.116190][T21800] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3401.275411][T12454] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3401.285282][T12454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3401.294152][T12454] usb 5-1: Product: syz [ 3401.299303][T12454] usb 5-1: Manufacturer: syz [ 3401.304087][T12454] usb 5-1: SerialNumber: syz [ 3401.355931][T12454] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3401.785189][T21800] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3401.935197][T12454] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3402.005340][T11033] usb 3-1: USB disconnect, device number 8 08:35:36 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x10, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:36 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:36 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:35:36 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:35:36 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:35:36 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x10, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3402.152635][ T9588] usb 5-1: USB disconnect, device number 36 08:35:36 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:35:36 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:36 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:35:36 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:35:36 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) 08:35:37 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) [ 3402.845109][T21800] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3402.852674][T21800] ath9k_htc: Failed to initialize the device [ 3402.862316][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3403.005188][T12454] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3403.012193][T12454] ath9k_htc: Failed to initialize the device [ 3403.020849][ T9588] usb 5-1: ath9k_htc: USB layer deinitialized [ 3403.215085][T11033] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 3403.395091][ T9588] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 3403.735732][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3403.745152][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3403.753340][T11033] usb 3-1: Product: syz [ 3403.759945][T11033] usb 3-1: Manufacturer: syz [ 3403.764754][T11033] usb 3-1: SerialNumber: syz [ 3403.806365][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3404.025432][ T9588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3404.035384][ T9588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3404.044371][ T9588] usb 5-1: Product: syz [ 3404.049364][ T9588] usb 5-1: Manufacturer: syz [ 3404.054701][ T9588] usb 5-1: SerialNumber: syz [ 3404.106543][ T9588] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3404.395178][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3404.615221][T21800] usb 3-1: USB disconnect, device number 9 [ 3404.765908][ T9588] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:39 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x10, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:39 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:35:39 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) 08:35:39 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:35:39 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) 08:35:39 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x10, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3404.983575][ T9675] usb 5-1: USB disconnect, device number 37 08:35:39 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:39 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) 08:35:39 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:39 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:35:39 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) 08:35:39 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) [ 3405.485255][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3405.492401][T11033] ath9k_htc: Failed to initialize the device [ 3405.500248][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3405.805250][ T9588] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3405.812239][ T9588] ath9k_htc: Failed to initialize the device [ 3405.819497][ T9675] usb 5-1: ath9k_htc: USB layer deinitialized [ 3405.885695][T21800] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 3406.175109][ T9675] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 3406.405351][T21800] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3406.414722][T21800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3406.430273][T21800] usb 3-1: Product: syz [ 3406.434617][T21800] usb 3-1: Manufacturer: syz [ 3406.440553][T21800] usb 3-1: SerialNumber: syz [ 3406.495869][T21800] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3406.705171][ T9675] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3406.715388][ T9675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3406.723394][ T9675] usb 5-1: Product: syz [ 3406.729547][ T9675] usb 5-1: Manufacturer: syz [ 3406.734251][ T9675] usb 5-1: SerialNumber: syz [ 3406.776344][ T9675] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3407.075280][T21800] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3407.292362][T12454] usb 3-1: USB disconnect, device number 10 [ 3407.355295][ T9675] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:42 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x10, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:42 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) 08:35:42 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:35:42 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) 08:35:42 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) 08:35:42 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3407.573458][ T9757] usb 5-1: USB disconnect, device number 38 08:35:42 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) 08:35:42 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:35:42 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:42 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) 08:35:42 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:42 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) [ 3408.125093][T21800] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3408.132782][T21800] ath9k_htc: Failed to initialize the device [ 3408.143639][T12454] usb 3-1: ath9k_htc: USB layer deinitialized [ 3408.455171][ T9675] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3408.462282][ T9675] ath9k_htc: Failed to initialize the device [ 3408.471293][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3408.495052][T12454] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 3408.845124][ T9757] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 3409.015337][T12454] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3409.024667][T12454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3409.034286][T12454] usb 3-1: Product: syz [ 3409.039407][T12454] usb 3-1: Manufacturer: syz [ 3409.044132][T12454] usb 3-1: SerialNumber: syz [ 3409.096143][T12454] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3409.365370][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3409.375284][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3409.383315][ T9757] usb 5-1: Product: syz [ 3409.389419][ T9757] usb 5-1: Manufacturer: syz [ 3409.394896][ T9757] usb 5-1: SerialNumber: syz [ 3409.445865][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3409.675212][T12454] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3409.892329][ T9675] usb 3-1: USB disconnect, device number 11 [ 3410.025180][ T9757] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:44 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), 0x0) 08:35:44 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:44 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) 08:35:44 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:44 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) 08:35:44 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3410.242356][T11033] usb 5-1: USB disconnect, device number 39 08:35:45 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), 0x0) 08:35:45 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:45 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:45 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:45 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:45 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) [ 3410.765211][T12454] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3410.772216][T12454] ath9k_htc: Failed to initialize the device [ 3410.781183][ T9675] usb 3-1: ath9k_htc: USB layer deinitialized [ 3411.085067][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3411.092217][ T9757] ath9k_htc: Failed to initialize the device [ 3411.104683][T11033] usb 5-1: ath9k_htc: USB layer deinitialized [ 3411.155165][ T9675] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 3411.465075][T11033] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 3411.705365][ T9675] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3411.714525][ T9675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3411.724635][ T9675] usb 3-1: Product: syz [ 3411.729892][ T9675] usb 3-1: Manufacturer: syz [ 3411.735380][ T9675] usb 3-1: SerialNumber: syz [ 3411.786172][ T9675] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3412.045459][T11033] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3412.054724][T11033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3412.064699][T11033] usb 5-1: Product: syz [ 3412.069798][T11033] usb 5-1: Manufacturer: syz [ 3412.074398][T11033] usb 5-1: SerialNumber: syz [ 3412.136139][T11033] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3412.355164][ T9675] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3412.569449][T11861] usb 3-1: USB disconnect, device number 12 [ 3412.785132][T11033] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:47 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:47 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:47 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), 0x0) 08:35:47 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 08:35:47 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:35:47 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3413.005691][T12681] usb 5-1: USB disconnect, device number 40 08:35:47 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:47 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:47 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:47 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:35:47 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:47 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:47 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) [ 3413.415816][ T9675] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3413.423993][ T9675] ath9k_htc: Failed to initialize the device [ 3413.454542][T11861] usb 3-1: ath9k_htc: USB layer deinitialized [ 3413.805181][T11033] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3413.812482][T11033] ath9k_htc: Failed to initialize the device [ 3413.821301][T12681] usb 5-1: ath9k_htc: USB layer deinitialized [ 3413.845196][T11861] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 3414.216161][T12681] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 3414.365491][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3414.374996][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3414.383382][T11861] usb 3-1: Product: syz [ 3414.389122][T11861] usb 3-1: Manufacturer: syz [ 3414.394079][T11861] usb 3-1: SerialNumber: syz [ 3414.436155][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3414.785506][T12681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3414.796534][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3414.804670][T12681] usb 5-1: Product: syz [ 3414.811693][T12681] usb 5-1: Manufacturer: syz [ 3414.817727][T12681] usb 5-1: SerialNumber: syz [ 3414.876136][T12681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3415.005389][T11861] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3415.221090][T11033] usb 3-1: USB disconnect, device number 13 [ 3415.519866][T12681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:50 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:50 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:50 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:50 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) socket$inet_udp(0x2, 0x2, 0x0) 08:35:50 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) 08:35:50 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3415.732106][ T9757] usb 5-1: USB disconnect, device number 41 08:35:50 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) 08:35:50 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:50 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) socket$inet_udp(0x2, 0x2, 0x0) 08:35:50 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) [ 3416.045177][T11861] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3416.055574][T11861] ath9k_htc: Failed to initialize the device 08:35:50 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) 08:35:50 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) [ 3416.086704][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3416.485228][T11033] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 3416.605325][T12681] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3416.612353][T12681] ath9k_htc: Failed to initialize the device [ 3416.620675][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3417.016007][ T9757] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 3417.035546][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3417.044625][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3417.054877][T11033] usb 3-1: Product: syz [ 3417.060539][T11033] usb 3-1: Manufacturer: syz [ 3417.066302][T11033] usb 3-1: SerialNumber: syz [ 3417.106123][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3417.535358][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3417.544417][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3417.554654][ T9757] usb 5-1: Product: syz [ 3417.560668][ T9757] usb 5-1: Manufacturer: syz [ 3417.566890][ T9757] usb 5-1: SerialNumber: syz [ 3417.616199][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3417.685462][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3417.904861][T21800] usb 3-1: USB disconnect, device number 14 [ 3418.185165][ T9757] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:53 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:53 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:53 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:53 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:53 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) 08:35:53 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3418.401850][T11861] usb 5-1: USB disconnect, device number 42 08:35:53 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) socket$inet_udp(0x2, 0x2, 0x0) 08:35:53 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:53 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) 08:35:53 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) socket$inet_udp(0x2, 0x2, 0x0) 08:35:53 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:53 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) [ 3418.765038][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3418.778054][T11033] ath9k_htc: Failed to initialize the device [ 3418.803829][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3419.205033][T21800] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 3419.245533][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3419.252668][ T9757] ath9k_htc: Failed to initialize the device [ 3419.259540][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3419.655485][T11861] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 3419.725244][T21800] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3419.734328][T21800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3419.745163][T21800] usb 3-1: Product: syz [ 3419.749366][T21800] usb 3-1: Manufacturer: syz [ 3419.754158][T21800] usb 3-1: SerialNumber: syz [ 3419.806060][T21800] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3420.205558][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3420.215069][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3420.223540][T11861] usb 5-1: Product: syz [ 3420.230483][T11861] usb 5-1: Manufacturer: syz [ 3420.236477][T11861] usb 5-1: SerialNumber: syz [ 3420.276188][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3420.375178][T21800] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3420.593169][T12681] usb 3-1: USB disconnect, device number 15 [ 3420.945149][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:55 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:55 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) socket$inet_udp(0x2, 0x2, 0x0) 08:35:55 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:55 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) 08:35:55 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 08:35:55 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3421.158795][ T9588] usb 5-1: USB disconnect, device number 43 08:35:55 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:55 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) socket$inet_udp(0x2, 0x2, 0x0) 08:35:55 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) 08:35:55 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) socket$inet_udp(0x2, 0x2, 0x0) [ 3421.405184][T21800] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3421.413273][T21800] ath9k_htc: Failed to initialize the device [ 3421.453036][T12681] usb 3-1: ath9k_htc: USB layer deinitialized 08:35:56 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) socket$inet_udp(0x2, 0x2, 0x0) 08:35:56 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) socket$inet_udp(0x2, 0x2, 0x0) [ 3421.855049][T12681] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 3421.965143][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3421.972267][T11861] ath9k_htc: Failed to initialize the device [ 3421.981325][ T9588] usb 5-1: ath9k_htc: USB layer deinitialized [ 3422.355161][ T9588] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 3422.415174][T12681] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3422.424760][T12681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3422.434114][T12681] usb 3-1: Product: syz [ 3422.439413][T12681] usb 3-1: Manufacturer: syz [ 3422.444470][T12681] usb 3-1: SerialNumber: syz [ 3422.485963][T12681] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3422.875280][ T9588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3422.885462][ T9588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3422.893467][ T9588] usb 5-1: Product: syz [ 3422.898090][ T9588] usb 5-1: Manufacturer: syz [ 3422.902707][ T9588] usb 5-1: SerialNumber: syz [ 3422.946137][ T9588] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3423.065256][T12681] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3423.283177][T11033] usb 3-1: USB disconnect, device number 16 [ 3423.535116][ T9588] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:35:58 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:35:58 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:35:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) 08:35:58 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) 08:35:58 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) 08:35:58 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3423.747034][T11861] usb 5-1: USB disconnect, device number 44 08:35:58 executing program 1: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:35:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) 08:35:58 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 08:35:58 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) 08:35:58 executing program 1: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:35:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) [ 3424.126108][T12681] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3424.133212][T12681] ath9k_htc: Failed to initialize the device [ 3424.153490][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3424.545080][T11033] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 3424.606054][ T9588] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3424.613183][ T9588] ath9k_htc: Failed to initialize the device [ 3424.622403][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3424.995406][T11861] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 3425.095345][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3425.105061][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3425.113631][T11033] usb 3-1: Product: syz [ 3425.119071][T11033] usb 3-1: Manufacturer: syz [ 3425.124418][T11033] usb 3-1: SerialNumber: syz [ 3425.182644][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3425.565620][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3425.575092][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3425.583249][T11861] usb 5-1: Product: syz [ 3425.588617][T11861] usb 5-1: Manufacturer: syz [ 3425.593474][T11861] usb 5-1: SerialNumber: syz [ 3425.656548][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3425.805379][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3426.032548][ T9588] usb 3-1: USB disconnect, device number 17 [ 3426.315396][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:01 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:01 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) socket$inet_udp(0x2, 0x2, 0x0) 08:36:01 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) socket$inet_udp(0x2, 0x2, 0x0) 08:36:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000480)) 08:36:01 executing program 1: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:36:01 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3426.532954][T12681] usb 5-1: USB disconnect, device number 45 08:36:01 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:01 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:36:01 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) socket$inet_udp(0x2, 0x2, 0x0) 08:36:01 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:01 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:36:01 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) [ 3426.845752][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3426.852851][T11033] ath9k_htc: Failed to initialize the device [ 3426.884247][ T9588] usb 3-1: ath9k_htc: USB layer deinitialized [ 3427.285130][ T9588] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 3427.405996][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3427.413099][T11861] ath9k_htc: Failed to initialize the device [ 3427.421209][T12681] usb 5-1: ath9k_htc: USB layer deinitialized [ 3427.785236][T12681] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 3427.805501][ T9588] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3427.814760][ T9588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3427.825416][ T9588] usb 3-1: Product: syz [ 3427.829615][ T9588] usb 3-1: Manufacturer: syz [ 3427.834226][ T9588] usb 3-1: SerialNumber: syz [ 3427.886182][ T9588] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3428.305463][T12681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3428.315347][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3428.323380][T12681] usb 5-1: Product: syz [ 3428.331347][T12681] usb 5-1: Manufacturer: syz [ 3428.337109][T12681] usb 5-1: SerialNumber: syz [ 3428.406665][T12681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3428.495236][ T9588] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3428.715421][T10730] usb 3-1: USB disconnect, device number 18 [ 3429.005986][T12681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:03 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) 08:36:03 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:03 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:03 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:03 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:36:03 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3429.221276][T11861] usb 5-1: USB disconnect, device number 46 08:36:03 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:36:03 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:03 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, 0x0) 08:36:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, 0x0) 08:36:04 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:04 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:04 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) [ 3429.565061][ T9588] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3429.579156][ T9588] ath9k_htc: Failed to initialize the device [ 3429.624215][T10730] usb 3-1: ath9k_htc: USB layer deinitialized 08:36:04 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) [ 3429.995139][T10730] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 3430.045047][T12681] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3430.053358][T12681] ath9k_htc: Failed to initialize the device [ 3430.061386][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3430.435146][T11861] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3430.515650][T10730] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3430.525302][T10730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3430.533665][T10730] usb 3-1: Product: syz [ 3430.538761][T10730] usb 3-1: Manufacturer: syz [ 3430.543828][T10730] usb 3-1: SerialNumber: syz [ 3430.596234][T10730] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3430.955150][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3430.964477][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3430.974868][T11861] usb 5-1: Product: syz [ 3430.979667][T11861] usb 5-1: Manufacturer: syz [ 3430.984651][T11861] usb 5-1: SerialNumber: syz [ 3431.036037][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3431.245264][T10730] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3431.465999][T12681] usb 3-1: USB disconnect, device number 19 [ 3431.605222][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:06 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, 0x0) 08:36:06 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:06 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) 08:36:06 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:06 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3431.821845][ T9054] usb 5-1: USB disconnect, device number 47 08:36:06 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:06 executing program 0: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:06 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) 08:36:06 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:06 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:06 executing program 0: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) [ 3432.285209][T10730] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3432.292327][T10730] ath9k_htc: Failed to initialize the device [ 3432.301565][T12681] usb 3-1: ath9k_htc: USB layer deinitialized [ 3432.655077][T12681] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 3432.685427][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3432.692678][T11861] ath9k_htc: Failed to initialize the device [ 3432.700627][ T9054] usb 5-1: ath9k_htc: USB layer deinitialized [ 3433.085249][ T9054] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 3433.175476][T12681] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3433.184706][T12681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3433.193334][T12681] usb 3-1: Product: syz [ 3433.198050][T12681] usb 3-1: Manufacturer: syz [ 3433.202660][T12681] usb 3-1: SerialNumber: syz [ 3433.246197][T12681] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3433.705425][ T9054] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3433.714708][ T9054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3433.724653][ T9054] usb 5-1: Product: syz [ 3433.730015][ T9054] usb 5-1: Manufacturer: syz [ 3433.734637][ T9054] usb 5-1: SerialNumber: syz [ 3433.786237][ T9054] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3433.825384][T12681] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3434.045291][T11861] usb 3-1: USB disconnect, device number 20 [ 3434.475260][ T9054] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:09 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0), 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:09 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) socket$inet_udp(0x2, 0x2, 0x0) 08:36:09 executing program 3: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:09 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:09 executing program 0: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:09 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3434.692893][T11033] usb 5-1: USB disconnect, device number 48 08:36:09 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x200201) [ 3434.845044][T12681] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3434.866264][T12681] ath9k_htc: Failed to initialize the device 08:36:09 executing program 1: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:09 executing program 3: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:36:09 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) [ 3434.894011][T11861] usb 3-1: ath9k_htc: USB layer deinitialized 08:36:09 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x200201) 08:36:09 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) [ 3435.285046][T10730] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 3435.305877][T11861] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 3435.565145][ T9054] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3435.572170][ T9054] ath9k_htc: Failed to initialize the device [ 3435.583623][T11033] usb 5-1: ath9k_htc: USB layer deinitialized [ 3435.825367][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3435.834849][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3435.845396][T11861] usb 3-1: Product: syz [ 3435.849763][T11861] usb 3-1: Manufacturer: syz [ 3435.854505][T11861] usb 3-1: SerialNumber: syz [ 3435.865297][T10730] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3435.882909][T10730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3435.893819][T10730] usb 2-1: Product: syz [ 3435.899337][T10730] usb 2-1: Manufacturer: syz [ 3435.904486][T10730] usb 2-1: SerialNumber: syz [ 3435.906143][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3435.945100][T11033] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 3435.946625][T10730] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3436.465232][T11033] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3436.475834][T11033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3436.484533][T11033] usb 5-1: Product: syz [ 3436.490798][T11033] usb 5-1: Manufacturer: syz [ 3436.496345][T11861] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3436.505981][T11033] usb 5-1: SerialNumber: syz [ 3436.555864][T11033] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3436.635170][T10730] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3436.714117][ T9588] usb 3-1: USB disconnect, device number 21 [ 3436.858022][T12681] usb 2-1: USB disconnect, device number 4 [ 3437.125286][T11033] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:11 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0), 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:11 executing program 3: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:36:11 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x200201) 08:36:11 executing program 5: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:11 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:11 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x200201) [ 3437.338546][ T9675] usb 5-1: USB disconnect, device number 49 08:36:12 executing program 3: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:36:12 executing program 5: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:36:12 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:12 executing program 0: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) [ 3437.567181][T11861] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3437.574291][T11861] ath9k_htc: Failed to initialize the device [ 3437.597452][ T9588] usb 3-1: ath9k_htc: USB layer deinitialized 08:36:12 executing program 3: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:12 executing program 0: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) [ 3437.725489][T10730] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3437.734176][T10730] ath9k_htc: Failed to initialize the device [ 3437.772526][T12681] usb 2-1: ath9k_htc: USB layer deinitialized [ 3437.985234][ T9588] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 3438.205087][T11033] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3438.212204][T11033] ath9k_htc: Failed to initialize the device [ 3438.220000][ T9675] usb 5-1: ath9k_htc: USB layer deinitialized [ 3438.555450][ T9588] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3438.564842][ T9588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3438.574443][ T9588] usb 3-1: Product: syz [ 3438.580126][ T9588] usb 3-1: Manufacturer: syz [ 3438.584845][ T9588] usb 3-1: SerialNumber: syz [ 3438.614976][ T9675] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 3438.635907][ T9588] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3439.166334][ T9675] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3439.176087][ T9675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3439.184380][ T9675] usb 5-1: Product: syz [ 3439.190934][ T9675] usb 5-1: Manufacturer: syz [ 3439.196549][ T9675] usb 5-1: SerialNumber: syz [ 3439.246253][ T9675] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3439.265189][ T9588] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3439.484276][T10730] usb 3-1: USB disconnect, device number 22 [ 3439.835218][ T9675] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:14 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0), 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:14 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) 08:36:14 executing program 5: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:36:14 executing program 3: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:14 executing program 0: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) 08:36:14 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3440.052316][T12681] usb 5-1: USB disconnect, device number 50 08:36:14 executing program 5: syz_open_dev$dri(0x0, 0x3c84, 0x200201) 08:36:14 executing program 3: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:14 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) 08:36:14 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0), 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:14 executing program 5: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) [ 3440.285064][ T9588] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3440.306549][ T9588] ath9k_htc: Failed to initialize the device [ 3440.350987][T10730] usb 3-1: ath9k_htc: USB layer deinitialized 08:36:15 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) [ 3440.605213][ T9757] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 3440.745184][T10730] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 3440.925271][ T9675] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3440.932351][ T9675] ath9k_htc: Failed to initialize the device [ 3440.941195][T12681] usb 5-1: ath9k_htc: USB layer deinitialized [ 3441.225276][ T9757] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3441.235035][ T9757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3441.243028][ T9757] usb 1-1: Product: syz [ 3441.247875][ T9757] usb 1-1: Manufacturer: syz [ 3441.252584][ T9757] usb 1-1: SerialNumber: syz [ 3441.266686][T10730] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3441.281562][T10730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3441.294350][T10730] usb 3-1: Product: syz [ 3441.302818][T12681] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 3441.305954][ T9757] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3441.320393][T10730] usb 3-1: Manufacturer: syz [ 3441.332635][T10730] usb 3-1: SerialNumber: syz [ 3441.386987][T10730] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3441.855238][T12681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3441.864593][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3441.875228][T12681] usb 5-1: Product: syz [ 3441.879776][T12681] usb 5-1: Manufacturer: syz [ 3441.884559][T12681] usb 5-1: SerialNumber: syz [ 3441.936230][T12681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3441.958764][ T9672] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3442.025183][ T9757] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3442.177311][ T9675] usb 3-1: USB disconnect, device number 23 [ 3442.245246][T10730] usb 1-1: USB disconnect, device number 75 [ 3442.505149][T12681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:17 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x0, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:17 executing program 3: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) 08:36:17 executing program 5: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:17 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:36:17 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:17 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) [ 3442.719420][T21800] usb 5-1: USB disconnect, device number 51 08:36:17 executing program 3: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) 08:36:17 executing program 5: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x200201) 08:36:17 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:17 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000480)) 08:36:17 executing program 3: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) [ 3443.005111][ T9672] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3443.023825][ T9672] ath9k_htc: Failed to initialize the device [ 3443.060357][ T9675] usb 3-1: ath9k_htc: USB layer deinitialized [ 3443.085205][ T9757] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3443.108698][ T9757] ath9k_htc: Failed to initialize the device 08:36:17 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) [ 3443.145276][T10730] usb 1-1: ath9k_htc: USB layer deinitialized [ 3443.435098][ T9675] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 3443.525041][T10730] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 3443.565166][T12681] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3443.565305][T12681] ath9k_htc: Failed to initialize the device [ 3443.566110][T21800] usb 5-1: ath9k_htc: USB layer deinitialized [ 3443.945311][T21800] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 3443.956447][ T9675] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3443.966105][ T9675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3443.974177][ T9675] usb 3-1: Product: syz [ 3443.981921][ T9675] usb 3-1: Manufacturer: syz [ 3443.988614][ T9675] usb 3-1: SerialNumber: syz [ 3444.035989][ T9675] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3444.065335][T10730] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3444.074498][T10730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3444.091915][T10730] usb 1-1: Product: syz [ 3444.097115][T10730] usb 1-1: Manufacturer: syz [ 3444.101737][T10730] usb 1-1: SerialNumber: syz [ 3444.156284][T10730] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3444.475346][T21800] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3444.484517][T21800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3444.501329][T21800] usb 5-1: Product: syz [ 3444.506847][T21800] usb 5-1: Manufacturer: syz [ 3444.511456][T21800] usb 5-1: SerialNumber: syz [ 3444.555956][T21800] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3444.686780][ T9675] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3444.735318][T10730] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3444.905776][ T9757] usb 3-1: USB disconnect, device number 24 [ 3444.960175][T11033] usb 1-1: USB disconnect, device number 76 [ 3445.135143][T21800] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:19 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x0, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:19 executing program 5: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) 08:36:19 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) 08:36:19 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) clock_gettime(0x2, &(0x7f0000000400)) 08:36:19 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:19 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3445.362500][ T9588] usb 5-1: USB disconnect, device number 52 08:36:20 executing program 5: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) 08:36:20 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x2, &(0x7f0000000400)) 08:36:20 executing program 5: syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x0) 08:36:20 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) 08:36:20 executing program 5: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x10, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:20 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) clock_gettime(0x2, &(0x7f0000000400)) [ 3445.725144][ T9675] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3445.735692][ T9675] ath9k_htc: Failed to initialize the device [ 3445.762467][ T9757] usb 3-1: ath9k_htc: USB layer deinitialized [ 3445.805366][T10730] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3445.812465][T10730] ath9k_htc: Failed to initialize the device [ 3445.847561][T11033] usb 1-1: ath9k_htc: USB layer deinitialized [ 3446.045095][ T9672] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 3446.165094][ T9757] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 3446.205025][T21800] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3446.212235][T21800] ath9k_htc: Failed to initialize the device [ 3446.224855][ T9588] usb 5-1: ath9k_htc: USB layer deinitialized [ 3446.235143][T11033] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 3446.565224][ T9672] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3446.574345][ T9672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3446.584612][ T9672] usb 6-1: Product: syz [ 3446.591037][ T9672] usb 6-1: Manufacturer: syz [ 3446.596919][ T9672] usb 6-1: SerialNumber: syz [ 3446.608129][ T9588] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 3446.656284][ T9672] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3446.715780][ T9757] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3446.724859][ T9757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3446.733572][ T9757] usb 3-1: Product: syz [ 3446.738412][ T9757] usb 3-1: Manufacturer: syz [ 3446.749535][ T9757] usb 3-1: SerialNumber: syz [ 3446.805939][T11033] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3446.816698][ T9757] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3446.835362][T11033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3446.843399][T11033] usb 1-1: Product: syz [ 3446.857014][T11033] usb 1-1: Manufacturer: syz [ 3446.861661][T11033] usb 1-1: SerialNumber: syz [ 3446.906328][T11033] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3447.135525][ T9588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3447.145436][ T9588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3447.154392][ T9588] usb 5-1: Product: syz [ 3447.159856][ T9588] usb 5-1: Manufacturer: syz [ 3447.165827][ T9588] usb 5-1: SerialNumber: syz [ 3447.216232][ T9588] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3447.235192][ T9672] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3447.462821][ T9054] usb 6-1: USB disconnect, device number 99 [ 3447.525266][ T9613] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3447.575663][T11033] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3447.743973][T10730] usb 3-1: USB disconnect, device number 25 [ 3447.799666][T11861] usb 1-1: USB disconnect, device number 77 [ 3447.815135][ T9588] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:22 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x0, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:22 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) 08:36:22 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) clock_gettime(0x2, &(0x7f0000000400)) 08:36:22 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:22 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:22 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3448.032712][T12681] usb 5-1: USB disconnect, device number 53 08:36:22 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) clock_gettime(0x2, &(0x7f0000000400)) 08:36:22 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) 08:36:22 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:22 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) clock_gettime(0x2, &(0x7f0000000400)) [ 3448.295377][ T9672] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3448.308765][ T9672] ath9k_htc: Failed to initialize the device [ 3448.331666][ T9054] usb 6-1: ath9k_htc: USB layer deinitialized 08:36:23 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:23 executing program 1: clock_gettime(0x2, &(0x7f0000000400)) [ 3448.605106][T11033] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3448.612668][T11033] ath9k_htc: Failed to initialize the device [ 3448.619105][ T9613] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3448.626579][ T9613] ath9k_htc: Failed to initialize the device [ 3448.633017][T10730] usb 3-1: ath9k_htc: USB layer deinitialized [ 3448.633343][T11861] usb 1-1: ath9k_htc: USB layer deinitialized [ 3448.855201][ T9588] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3448.862832][ T9588] ath9k_htc: Failed to initialize the device [ 3448.870927][T12681] usb 5-1: ath9k_htc: USB layer deinitialized [ 3448.995695][T11861] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 3449.045159][T10730] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3449.245186][T12681] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 3449.555318][T11861] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3449.564699][T11861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3449.575414][T11861] usb 1-1: Product: syz [ 3449.575418][T10730] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3449.575443][T10730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3449.579820][T11861] usb 1-1: Manufacturer: syz [ 3449.598382][T10730] usb 3-1: Product: syz [ 3449.605396][T11861] usb 1-1: SerialNumber: syz [ 3449.612612][T10730] usb 3-1: Manufacturer: syz [ 3449.622784][T10730] usb 3-1: SerialNumber: syz [ 3449.656331][T11861] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3449.686493][T10730] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3449.766341][T12681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3449.775836][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3449.783977][T12681] usb 5-1: Product: syz [ 3449.789001][T12681] usb 5-1: Manufacturer: syz [ 3449.793617][T12681] usb 5-1: SerialNumber: syz [ 3449.846067][T12681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3450.255169][T10730] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3450.345180][T11861] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3450.365896][ T3252] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.372226][ T3252] ieee802154 phy1 wpan1: encryption failed: -22 [ 3450.425423][T12681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3450.474578][T11033] usb 3-1: USB disconnect, device number 26 [ 3450.566523][ T9613] usb 1-1: USB disconnect, device number 78 08:36:25 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x0, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:25 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) 08:36:25 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:25 executing program 1: clock_gettime(0x0, &(0x7f0000000400)) 08:36:25 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:25 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x0, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 3450.643372][ T9757] usb 5-1: USB disconnect, device number 54 08:36:25 executing program 1: clock_gettime(0x0, &(0x7f0000000400)) 08:36:25 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:25 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) 08:36:25 executing program 1: clock_gettime(0x0, &(0x7f0000000400)) 08:36:25 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) 08:36:25 executing program 1: clock_gettime(0x2, 0x0) [ 3451.325131][T10730] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3451.332194][T10730] ath9k_htc: Failed to initialize the device [ 3451.340610][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3451.405320][T11861] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3451.412378][T11861] ath9k_htc: Failed to initialize the device [ 3451.420344][ T9613] usb 1-1: ath9k_htc: USB layer deinitialized [ 3451.485145][T12681] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3451.492235][T12681] ath9k_htc: Failed to initialize the device [ 3451.505963][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3451.735957][T11033] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3451.785350][ T9613] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 3451.895013][ T9757] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 3452.285736][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3452.295707][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3452.304154][T11033] usb 3-1: Product: syz [ 3452.310431][T11033] usb 3-1: Manufacturer: syz [ 3452.315931][T11033] usb 3-1: SerialNumber: syz [ 3452.335310][ T9613] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3452.344383][ T9613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3452.355896][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3452.380960][ T9613] usb 1-1: Product: syz [ 3452.393416][ T9613] usb 1-1: Manufacturer: syz [ 3452.398258][ T9613] usb 1-1: SerialNumber: syz [ 3452.445515][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3452.455855][ T9613] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3452.468180][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3452.492753][ T9757] usb 5-1: Product: syz [ 3452.498079][ T9757] usb 5-1: Manufacturer: syz [ 3452.502705][ T9757] usb 5-1: SerialNumber: syz [ 3452.546475][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3452.985129][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3453.075237][ T9613] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3453.135241][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3453.215992][ T9757] usb 3-1: USB disconnect, device number 27 [ 3453.311042][ T9054] usb 1-1: USB disconnect, device number 79 08:36:27 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x0, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:27 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:27 executing program 3: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x10, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:27 executing program 1: clock_gettime(0x2, 0x0) 08:36:27 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:27 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3453.362447][T12681] usb 5-1: USB disconnect, device number 55 08:36:28 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:28 executing program 1: clock_gettime(0x2, 0x0) 08:36:28 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:28 executing program 1: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:28 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3453.735399][ T3626] usb 4-1: new high-speed USB device number 49 using dummy_hcd 08:36:28 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) [ 3453.995094][T27697] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 3454.045382][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3454.053404][T11033] ath9k_htc: Failed to initialize the device [ 3454.062521][ T9757] usb 3-1: ath9k_htc: USB layer deinitialized [ 3454.125181][ T9613] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3454.133140][ T9613] ath9k_htc: Failed to initialize the device [ 3454.142317][ T9054] usb 1-1: ath9k_htc: USB layer deinitialized [ 3454.205368][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3454.212394][T11861] ath9k_htc: Failed to initialize the device [ 3454.223002][T12681] usb 5-1: ath9k_htc: USB layer deinitialized [ 3454.265431][ T3626] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3454.276142][ T3626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3454.284843][ T3626] usb 4-1: Product: syz [ 3454.291958][ T3626] usb 4-1: Manufacturer: syz [ 3454.298494][ T3626] usb 4-1: SerialNumber: syz [ 3454.346966][ T3626] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3454.425432][ T9757] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3454.525360][T27697] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3454.535050][ T9054] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 3454.542855][T27697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3454.554207][T27697] usb 2-1: Product: syz [ 3454.560192][T27697] usb 2-1: Manufacturer: syz [ 3454.566717][T27697] usb 2-1: SerialNumber: syz [ 3454.606379][T27697] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3454.645093][T12681] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 3454.942014][ T3626] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3454.951724][ T9757] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3454.964520][ T9757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3454.978721][ T9757] usb 3-1: Product: syz [ 3454.982959][ T9757] usb 3-1: Manufacturer: syz [ 3454.991394][ T9757] usb 3-1: SerialNumber: syz [ 3455.036783][ T9757] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3455.075714][ T9054] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3455.086440][ T9054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3455.097733][ T9054] usb 1-1: Product: syz [ 3455.102394][ T9054] usb 1-1: Manufacturer: syz [ 3455.110525][ T9054] usb 1-1: SerialNumber: syz [ 3455.156030][ T9054] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3455.203375][ T9613] usb 4-1: USB disconnect, device number 49 [ 3455.209663][T12454] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3455.225578][T12681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3455.257535][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3455.274685][T12681] usb 5-1: Product: syz [ 3455.280438][T12681] usb 5-1: Manufacturer: syz [ 3455.286836][T12681] usb 5-1: SerialNumber: syz [ 3455.366142][T12681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3455.436834][T11861] usb 2-1: USB disconnect, device number 5 [ 3455.615485][ T9757] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3455.755141][T11033] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3455.830184][T12681] usb 3-1: USB disconnect, device number 28 [ 3455.965101][ T3626] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3455.972667][ T3626] ath9k_htc: Failed to initialize the device [ 3455.982337][ T9613] usb 4-1: ath9k_htc: USB layer deinitialized [ 3455.985449][T10730] usb 1-1: USB disconnect, device number 80 [ 3455.996791][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:30 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x0, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:30 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) 08:36:30 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:30 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:30 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:30 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) [ 3456.224388][ T9613] usb 5-1: USB disconnect, device number 56 [ 3456.295084][T12454] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3456.302485][T12454] ath9k_htc: Failed to initialize the device [ 3456.354008][T11861] usb 2-1: ath9k_htc: USB layer deinitialized 08:36:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) 08:36:31 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:31 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:31 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:31 executing program 5 (fault-call:1 fault-nth:0): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:31 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) [ 3456.695173][ T9757] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3456.704123][ T9757] ath9k_htc: Failed to initialize the device [ 3456.720418][T19535] FAULT_INJECTION: forcing a failure. [ 3456.720418][T19535] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 3456.741002][T12681] usb 3-1: ath9k_htc: USB layer deinitialized [ 3456.765001][T19535] CPU: 0 PID: 19535 Comm: syz-executor.5 Not tainted 5.13.0-syzkaller #0 [ 3456.773751][T19535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3456.783912][T19535] Call Trace: [ 3456.787207][T19535] dump_stack_lvl+0x1d3/0x29f [ 3456.792027][T19535] ? show_regs_print_info+0x12/0x12 [ 3456.797324][T19535] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3456.803139][T19535] ? __might_fault+0xb8/0x110 [ 3456.807944][T19535] ? snprintf+0xc0/0x110 [ 3456.812217][T19535] should_fail+0x384/0x4b0 [ 3456.816721][T19535] _copy_to_user+0x2d/0x130 [ 3456.821576][T19535] simple_read_from_buffer+0xd9/0x160 [ 3456.827423][T19535] proc_fail_nth_read+0x195/0x210 [ 3456.832584][T19535] ? proc_fault_inject_write+0x370/0x370 [ 3456.838248][T19535] ? __mutex_lock_common+0x570/0x3770 [ 3456.843819][T19535] ? rw_verify_area+0x1b8/0x370 [ 3456.848742][T19535] ? fsnotify_perm+0x2fd/0x4d0 [ 3456.853588][T19535] ? proc_fault_inject_write+0x370/0x370 [ 3456.859249][T19535] vfs_read+0x294/0xc20 [ 3456.863424][T19535] ? rcu_lock_release+0x9/0x20 [ 3456.868444][T19535] ? __lock_acquire+0x6100/0x6100 [ 3456.873550][T19535] ? kernel_read+0x70/0x70 [ 3456.878079][T19535] ? __fget_files+0x34f/0x380 [ 3456.882818][T19535] ? mutex_lock_nested+0x1a/0x20 [ 3456.887785][T19535] ? __fdget_pos+0x24e/0x2f0 [ 3456.892384][T19535] ? ksys_read+0x72/0x2a0 [ 3456.896716][T19535] ksys_read+0x171/0x2a0 [ 3456.901068][T19535] ? vfs_write+0xc90/0xc90 [ 3456.905572][T19535] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3456.911585][T19535] ? lockdep_hardirqs_on+0x8d/0x130 [ 3456.916834][T19535] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3456.922832][T19535] do_syscall_64+0x3d/0xb0 [ 3456.927273][T19535] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3456.933261][T19535] RIP: 0033:0x41935c [ 3456.937152][T19535] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3456.956956][T19535] RSP: 002b:00007f8181b47170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3456.966789][T19535] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 3456.975343][T19535] RDX: 000000000000000f RSI: 00007f8181b471e0 RDI: 0000000000000004 [ 3456.983574][T19535] RBP: 00007f8181b471d0 R08: 0000000000000000 R09: 0000000000000000 [ 3456.991988][T19535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3456.999968][T19535] R13: 00007ffe32233dbf R14: 00007f8181b47300 R15: 0000000000022000 [ 3457.013085][T11033] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3457.022158][T11033] ath9k_htc: Failed to initialize the device [ 3457.029735][T10730] usb 1-1: ath9k_htc: USB layer deinitialized [ 3457.085697][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3457.093535][ T9672] ath9k_htc: Failed to initialize the device [ 3457.102398][ T9613] usb 5-1: ath9k_htc: USB layer deinitialized [ 3457.165415][T12681] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3457.465046][ T9613] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 3457.725394][T12681] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3457.734474][T12681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3457.744332][T12681] usb 3-1: Product: syz [ 3457.749482][T12681] usb 3-1: Manufacturer: syz [ 3457.754103][T12681] usb 3-1: SerialNumber: syz [ 3457.805985][T12681] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3457.985383][ T9613] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3457.994466][ T9613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3458.010138][ T9613] usb 5-1: Product: syz [ 3458.014420][ T9613] usb 5-1: Manufacturer: syz [ 3458.020626][ T9613] usb 5-1: SerialNumber: syz [ 3458.075986][ T9613] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3458.475144][ T9588] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3458.645162][ T9613] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3458.695305][T10730] usb 3-1: USB disconnect, device number 29 08:36:33 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:33 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:33 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:33 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:33 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:33 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3458.860575][ T9672] usb 5-1: USB disconnect, device number 57 08:36:33 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x3, 0x0, &(0x7f0000000140)) 08:36:33 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:33 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:36:33 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000007c0)={0x33, 0x8, 0x200, 0x9d, 0x143}) 08:36:33 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x4, 0x0, &(0x7f0000000140)) 08:36:33 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) [ 3459.575232][ T9588] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3459.582352][ T9588] ath9k_htc: Failed to initialize the device [ 3459.590642][T10730] usb 3-1: ath9k_htc: USB layer deinitialized [ 3459.725111][ T9613] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3459.732587][ T9613] ath9k_htc: Failed to initialize the device [ 3459.740392][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3459.975286][T10730] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3460.125342][ T9672] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 3460.515249][T10730] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3460.524665][T10730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3460.533674][T10730] usb 3-1: Product: syz [ 3460.538778][T10730] usb 3-1: Manufacturer: syz [ 3460.543642][T10730] usb 3-1: SerialNumber: syz [ 3460.596192][T10730] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3460.715554][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3460.724667][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3460.734160][ T9672] usb 5-1: Product: syz [ 3460.739936][ T9672] usb 5-1: Manufacturer: syz [ 3460.744749][ T9672] usb 5-1: SerialNumber: syz [ 3460.786303][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3461.266838][T10730] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3461.445322][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3461.483221][ T9613] usb 3-1: USB disconnect, device number 30 08:36:36 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:36 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000780)) 08:36:36 executing program 3 (fault-call:0 fault-nth:0): clock_gettime(0x2, &(0x7f0000000400)) 08:36:36 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) 08:36:36 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:36 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3461.663808][T11033] usb 5-1: USB disconnect, device number 58 [ 3461.740179][T19663] FAULT_INJECTION: forcing a failure. [ 3461.740179][T19663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3461.804488][T19663] CPU: 0 PID: 19663 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3461.813127][T19663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3461.823202][T19663] Call Trace: [ 3461.826589][T19663] dump_stack_lvl+0x1d3/0x29f [ 3461.831302][T19663] ? show_regs_print_info+0x12/0x12 [ 3461.836679][T19663] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3461.842422][T19663] ? __might_fault+0xb8/0x110 [ 3461.847136][T19663] ? rcu_lock_release+0x5/0x20 [ 3461.852035][T19663] should_fail+0x384/0x4b0 [ 3461.856487][T19663] _copy_to_user+0x2d/0x130 [ 3461.861018][T19663] put_timespec64+0xf6/0x150 [ 3461.865776][T19663] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3461.871372][T19663] ? get_timespec64+0x250/0x250 [ 3461.876250][T19663] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 3461.882375][T19663] __x64_sys_clock_gettime+0x1b8/0x220 [ 3461.887869][T19663] ? __ia32_sys_clock_settime+0x240/0x240 [ 3461.893717][T19663] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3461.899970][T19663] ? lockdep_hardirqs_on+0x8d/0x130 [ 3461.905214][T19663] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3461.911307][T19663] do_syscall_64+0x3d/0xb0 [ 3461.915752][T19663] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3461.921673][T19663] RIP: 0033:0x4665d9 [ 3461.926028][T19663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3461.946026][T19663] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 08:36:36 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:36 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$evdev(&(0x7f0000000740), 0x7, 0x40000) 08:36:36 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0x4) [ 3461.954472][T19663] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3461.962558][T19663] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 [ 3461.970550][T19663] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3461.978899][T19663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3461.987272][T19663] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 08:36:36 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000700)={0x7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]}) 08:36:36 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) 08:36:36 executing program 3 (fault-call:0 fault-nth:1): clock_gettime(0x2, &(0x7f0000000400)) [ 3462.205746][T19687] FAULT_INJECTION: forcing a failure. [ 3462.205746][T19687] name failslab, interval 1, probability 0, space 0, times 1 [ 3462.233399][T19687] CPU: 0 PID: 19687 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3462.242221][T19687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3462.252884][T19687] Call Trace: [ 3462.256315][T19687] dump_stack_lvl+0x1d3/0x29f [ 3462.261325][T19687] ? show_regs_print_info+0x12/0x12 [ 3462.267706][T19687] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3462.273663][T19687] ? __fs_reclaim_acquire+0x30/0x30 [ 3462.279322][T19687] ? __might_sleep+0x100/0x100 [ 3462.284445][T19687] should_fail+0x384/0x4b0 [ 3462.289054][T19687] ? __anon_vma_prepare+0x66/0x480 [ 3462.294334][T19687] should_failslab+0x5/0x20 [ 3462.299090][T19687] kmem_cache_alloc+0x6b/0x340 [ 3462.303980][T19687] ? rcu_lock_release+0x5/0x20 [ 3462.308868][T19687] __anon_vma_prepare+0x66/0x480 [ 3462.313840][T19687] do_huge_pmd_anonymous_page+0xbf1/0xce0 [ 3462.320106][T19687] ? count_memcg_event_mm+0x2e4/0x330 [ 3462.325513][T19687] ? do_swap_page+0x2120/0x2120 [ 3462.330392][T19687] ? vma_thp_gfp_mask+0x170/0x170 [ 3462.335584][T19687] handle_mm_fault+0x207e/0x2640 [ 3462.340744][T19687] ? finish_fault+0x670/0x670 [ 3462.345448][T19687] ? __init_rwsem+0x160/0x160 [ 3462.350449][T19687] ? vmacache_find+0x4ef/0x5d0 [ 3462.355521][T19687] do_user_addr_fault+0x8ce/0x1120 [ 3462.361218][T19687] exc_page_fault+0xa1/0x1e0 [ 3462.366093][T19687] asm_exc_page_fault+0x1e/0x30 [ 3462.371004][T19687] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3462.377491][T19687] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3462.397988][T19687] RSP: 0018:ffffc90009fe7d88 EFLAGS: 00010202 [ 3462.404273][T19687] RAX: ffffffff84015d01 RBX: 0000000020000410 RCX: 0000000000000002 [ 3462.412381][T19687] RDX: 0000000000000000 RSI: ffffc90009fe7e00 RDI: 0000000020000400 [ 3462.420703][T19687] RBP: ffffc90009fe7e70 R08: 0000000000000000 R09: fffff520013fcfc2 [ 3462.429014][T19687] R10: fffff520013fcfc2 R11: 0000000000000000 R12: 0000000000000010 [ 3462.437354][T19687] R13: 00007ffffffff000 R14: ffffc90009fe7e00 R15: 0000000020000400 [ 3462.445482][T19687] ? _copy_to_user+0xb1/0x130 [ 3462.450367][T19687] _copy_to_user+0xef/0x130 [ 3462.454952][T19687] put_timespec64+0xf6/0x150 [ 3462.459655][T19687] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3462.465040][T19687] ? get_timespec64+0x250/0x250 [ 3462.470026][T19687] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 3462.476112][T19687] __x64_sys_clock_gettime+0x1b8/0x220 [ 3462.481787][T19687] ? __ia32_sys_clock_settime+0x240/0x240 [ 3462.487768][T19687] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3462.494284][T19687] ? lockdep_hardirqs_on+0x8d/0x130 [ 3462.499509][T19687] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3462.505678][T19687] do_syscall_64+0x3d/0xb0 [ 3462.510134][T19687] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3462.516029][T19687] RIP: 0033:0x4665d9 [ 3462.519932][T19687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3462.539816][T19687] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 3462.548437][T19687] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3462.556765][T19687] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 [ 3462.564740][T19687] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3462.573063][T19687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3462.581151][T19687] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 [ 3462.601123][T10730] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3462.608474][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3462.616137][T10730] ath9k_htc: Failed to initialize the device [ 3462.622482][ T9613] usb 3-1: ath9k_htc: USB layer deinitialized [ 3462.622576][ T9672] ath9k_htc: Failed to initialize the device [ 3462.644421][T11033] usb 5-1: ath9k_htc: USB layer deinitialized [ 3463.025218][T11033] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 3463.575791][T11033] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3463.585216][T11033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3463.593452][T11033] usb 5-1: Product: syz [ 3463.597831][T11033] usb 5-1: Manufacturer: syz [ 3463.602632][T11033] usb 5-1: SerialNumber: syz [ 3463.646537][T11033] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3464.255109][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:39 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:39 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0x7) 08:36:39 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) 08:36:39 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) syz_open_dev$dri(&(0x7f0000000680), 0x3c84, 0x200201) 08:36:39 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:39 executing program 3 (fault-call:0 fault-nth:2): clock_gettime(0x2, &(0x7f0000000400)) [ 3464.472499][T10730] usb 5-1: USB disconnect, device number 59 08:36:39 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0x700) [ 3464.552318][T19724] FAULT_INJECTION: forcing a failure. [ 3464.552318][T19724] name failslab, interval 1, probability 0, space 0, times 0 [ 3464.587505][T19724] CPU: 1 PID: 19724 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3464.596406][T19724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3464.606742][T19724] Call Trace: [ 3464.610043][T19724] dump_stack_lvl+0x1d3/0x29f [ 3464.614799][T19724] ? show_regs_print_info+0x12/0x12 [ 3464.620120][T19724] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3464.625879][T19724] ? __fs_reclaim_acquire+0x30/0x30 [ 3464.631131][T19724] ? __might_sleep+0x100/0x100 [ 3464.635921][T19724] ? rcu_read_lock_sched_held+0x87/0x110 [ 3464.641657][T19724] should_fail+0x384/0x4b0 [ 3464.646094][T19724] ? __anon_vma_prepare+0xaf/0x480 [ 3464.651218][T19724] should_failslab+0x5/0x20 [ 3464.655720][T19724] kmem_cache_alloc+0x6b/0x340 [ 3464.660590][T19724] ? __anon_vma_prepare+0x66/0x480 [ 3464.665995][T19724] ? rcu_lock_release+0x5/0x20 [ 3464.670777][T19724] __anon_vma_prepare+0xaf/0x480 [ 3464.675716][T19724] do_huge_pmd_anonymous_page+0xbf1/0xce0 [ 3464.681430][T19724] ? count_memcg_event_mm+0x2e4/0x330 [ 3464.686966][T19724] ? do_swap_page+0x2120/0x2120 [ 3464.691811][T19724] ? vma_thp_gfp_mask+0x170/0x170 [ 3464.696834][T19724] handle_mm_fault+0x207e/0x2640 [ 3464.701818][T19724] ? finish_fault+0x670/0x670 [ 3464.706491][T19724] ? __init_rwsem+0x160/0x160 [ 3464.711158][T19724] ? vmacache_find+0x4ef/0x5d0 [ 3464.715921][T19724] do_user_addr_fault+0x8ce/0x1120 [ 3464.721123][T19724] exc_page_fault+0xa1/0x1e0 [ 3464.725709][T19724] asm_exc_page_fault+0x1e/0x30 [ 3464.730633][T19724] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3464.737047][T19724] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3464.757018][T19724] RSP: 0018:ffffc9000a0efd88 EFLAGS: 00010202 [ 3464.763089][T19724] RAX: ffffffff84015d01 RBX: 0000000020000410 RCX: 0000000000000002 [ 3464.771254][T19724] RDX: 0000000000000000 RSI: ffffc9000a0efe00 RDI: 0000000020000400 [ 3464.779402][T19724] RBP: ffffc9000a0efe70 R08: 0000000000000000 R09: fffff5200141dfc2 [ 3464.787381][T19724] R10: fffff5200141dfc2 R11: 0000000000000000 R12: 0000000000000010 [ 3464.795362][T19724] R13: 00007ffffffff000 R14: ffffc9000a0efe00 R15: 0000000020000400 [ 3464.803448][T19724] ? _copy_to_user+0xb1/0x130 [ 3464.808212][T19724] _copy_to_user+0xef/0x130 [ 3464.812719][T19724] put_timespec64+0xf6/0x150 [ 3464.817398][T19724] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3464.822672][T19724] ? get_timespec64+0x250/0x250 [ 3464.827603][T19724] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 3464.833768][T19724] __x64_sys_clock_gettime+0x1b8/0x220 [ 3464.839219][T19724] ? __ia32_sys_clock_settime+0x240/0x240 [ 3464.844930][T19724] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3464.850898][T19724] ? lockdep_hardirqs_on+0x8d/0x130 [ 3464.856353][T19724] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3464.862320][T19724] do_syscall_64+0x3d/0xb0 [ 3464.867004][T19724] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3464.873167][T19724] RIP: 0033:0x4665d9 [ 3464.877052][T19724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3464.896998][T19724] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 08:36:39 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x9a30, 0x2, 0x1000}) [ 3464.905417][T19724] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3464.913376][T19724] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 [ 3464.921534][T19724] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3464.929619][T19724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3464.937602][T19724] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 08:36:39 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) 08:36:39 executing program 3 (fault-call:0 fault-nth:3): clock_gettime(0x2, &(0x7f0000000400)) 08:36:39 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/95) 08:36:39 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0x4000000) [ 3465.146424][T19742] FAULT_INJECTION: forcing a failure. [ 3465.146424][T19742] name failslab, interval 1, probability 0, space 0, times 0 [ 3465.201481][T19742] CPU: 1 PID: 19742 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3465.209960][T19742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3465.220235][T19742] Call Trace: [ 3465.223536][T19742] dump_stack_lvl+0x1d3/0x29f [ 3465.228683][T19742] ? show_regs_print_info+0x12/0x12 [ 3465.234000][T19742] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3465.239833][T19742] ? __fs_reclaim_acquire+0x30/0x30 [ 3465.245059][T19742] ? __might_sleep+0x100/0x100 [ 3465.249964][T19742] ? up_write+0x12c/0x4d0 [ 3465.254332][T19742] should_fail+0x384/0x4b0 [ 3465.258775][T19742] ? __khugepaged_enter+0x2c/0x330 [ 3465.264179][T19742] should_failslab+0x5/0x20 [ 3465.268775][T19742] kmem_cache_alloc+0x6b/0x340 [ 3465.273542][T19742] __khugepaged_enter+0x2c/0x330 [ 3465.278588][T19742] do_huge_pmd_anonymous_page+0x4f1/0xce0 [ 3465.284359][T19742] ? count_memcg_event_mm+0x2e4/0x330 [ 3465.289758][T19742] ? vma_thp_gfp_mask+0x170/0x170 [ 3465.294911][T19742] handle_mm_fault+0x207e/0x2640 [ 3465.299867][T19742] ? finish_fault+0x670/0x670 [ 3465.304667][T19742] ? __init_rwsem+0x160/0x160 [ 3465.309437][T19742] ? vmacache_find+0x4ef/0x5d0 [ 3465.314305][T19742] do_user_addr_fault+0x8ce/0x1120 [ 3465.319419][T19742] exc_page_fault+0xa1/0x1e0 [ 3465.324026][T19742] asm_exc_page_fault+0x1e/0x30 [ 3465.328940][T19742] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3465.335390][T19742] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3465.355549][T19742] RSP: 0018:ffffc9000a14fd88 EFLAGS: 00010202 [ 3465.361634][T19742] RAX: ffffffff84015d01 RBX: 0000000020000410 RCX: 0000000000000002 [ 3465.370015][T19742] RDX: 0000000000000000 RSI: ffffc9000a14fe00 RDI: 0000000020000400 [ 3465.378355][T19742] RBP: ffffc9000a14fe70 R08: 0000000000000000 R09: fffff52001429fc2 [ 3465.386334][T19742] R10: fffff52001429fc2 R11: 0000000000000000 R12: 0000000000000010 [ 3465.394393][T19742] R13: 00007ffffffff000 R14: ffffc9000a14fe00 R15: 0000000020000400 [ 3465.402464][T19742] ? _copy_to_user+0xb1/0x130 [ 3465.407248][T19742] _copy_to_user+0xef/0x130 [ 3465.411770][T19742] put_timespec64+0xf6/0x150 [ 3465.416656][T19742] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3465.421935][T19742] ? get_timespec64+0x250/0x250 [ 3465.426780][T19742] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 3465.432758][T19742] __x64_sys_clock_gettime+0x1b8/0x220 [ 3465.438303][T19742] ? __ia32_sys_clock_settime+0x240/0x240 [ 3465.444271][T19742] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3465.450413][T19742] ? lockdep_hardirqs_on+0x8d/0x130 [ 3465.455777][T19742] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3465.462061][T19742] do_syscall_64+0x3d/0xb0 [ 3465.466665][T19742] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3465.472550][T19742] RIP: 0033:0x4665d9 [ 3465.476438][T19742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3465.496141][T19742] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 3465.504555][T19742] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3465.512983][T19742] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 [ 3465.521066][T19742] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3465.529558][T19742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3465.537872][T19742] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 [ 3465.545943][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3465.553895][T11861] ath9k_htc: Failed to initialize the device [ 3465.584098][T10730] usb 5-1: ath9k_htc: USB layer deinitialized [ 3465.976467][T10730] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 3466.575248][T10730] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3466.584449][T10730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3466.594549][T10730] usb 5-1: Product: syz [ 3466.600390][T10730] usb 5-1: Manufacturer: syz [ 3466.605695][T10730] usb 5-1: SerialNumber: syz [ 3466.665987][T10730] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3467.305040][T10730] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:42 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0x0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:42 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) 08:36:42 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000500)=""/176) 08:36:42 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0x7000000) 08:36:42 executing program 3 (fault-call:0 fault-nth:4): clock_gettime(0x2, &(0x7f0000000400)) 08:36:42 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3467.533778][ T9672] usb 5-1: USB disconnect, device number 60 08:36:42 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000180), 0x4) accept4(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000280)=0x80, 0x80000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f00000001c0), 0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x1412, 0x10, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x8010) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3467.623738][T19770] FAULT_INJECTION: forcing a failure. [ 3467.623738][T19770] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 3467.723963][T19770] CPU: 0 PID: 19770 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3467.732643][T19770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3467.742800][T19770] Call Trace: [ 3467.746107][T19770] dump_stack_lvl+0x1d3/0x29f [ 3467.750924][T19770] ? show_regs_print_info+0x12/0x12 [ 3467.756230][T19770] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3467.761994][T19770] should_fail+0x384/0x4b0 [ 3467.766444][T19770] prepare_alloc_pages+0x1d1/0x5a0 [ 3467.771593][T19770] __alloc_pages+0x14d/0x5f0 [ 3467.776307][T19770] ? __rmqueue_pcplist+0x2030/0x2030 [ 3467.781890][T19770] ? __lock_acquire+0x6100/0x6100 [ 3467.787130][T19770] ? do_raw_spin_unlock+0x134/0x8a0 [ 3467.792360][T19770] alloc_pages_vma+0x9c7/0xe70 [ 3467.797164][T19770] do_huge_pmd_anonymous_page+0x5b9/0xce0 [ 3467.803000][T19770] ? count_memcg_event_mm+0x2e4/0x330 [ 3467.808598][T19770] ? vma_thp_gfp_mask+0x170/0x170 [ 3467.813668][T19770] handle_mm_fault+0x207e/0x2640 [ 3467.818660][T19770] ? finish_fault+0x670/0x670 08:36:42 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:42 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, @nl=@kern={0x10, 0x0, 0x0, 0x12500000}, @generic={0x1d, "4378570f33ac39edb395f685175e"}, 0x8001, 0x0, 0x0, 0x0, 0x119, &(0x7f0000000000)='gre0\x00', 0xfffffffffffffffe, 0x0, 0x9}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3467.823376][T19770] ? __init_rwsem+0x160/0x160 [ 3467.828103][T19770] ? vmacache_find+0x4ef/0x5d0 [ 3467.832989][T19770] do_user_addr_fault+0x8ce/0x1120 [ 3467.838140][T19770] exc_page_fault+0xa1/0x1e0 [ 3467.842860][T19770] asm_exc_page_fault+0x1e/0x30 [ 3467.847732][T19770] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3467.854253][T19770] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3467.874052][T19770] RSP: 0018:ffffc9000a2a7d88 EFLAGS: 00010202 [ 3467.880145][T19770] RAX: ffffffff84015d01 RBX: 0000000020000410 RCX: 0000000000000002 [ 3467.888317][T19770] RDX: 0000000000000000 RSI: ffffc9000a2a7e00 RDI: 0000000020000400 [ 3467.896401][T19770] RBP: ffffc9000a2a7e70 R08: 0000000000000000 R09: fffff52001454fc2 [ 3467.904559][T19770] R10: fffff52001454fc2 R11: 0000000000000000 R12: 0000000000000010 [ 3467.912582][T19770] R13: 00007ffffffff000 R14: ffffc9000a2a7e00 R15: 0000000020000400 08:36:42 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x68d6126b704c3b66, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3467.920613][T19770] ? _copy_to_user+0xb1/0x130 [ 3467.925351][T19770] _copy_to_user+0xef/0x130 [ 3467.930059][T19770] put_timespec64+0xf6/0x150 [ 3467.934672][T19770] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3467.940073][T19770] ? get_timespec64+0x250/0x250 [ 3467.945129][T19770] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 3467.951499][T19770] __x64_sys_clock_gettime+0x1b8/0x220 [ 3467.957158][T19770] ? __ia32_sys_clock_settime+0x240/0x240 [ 3467.962922][T19770] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3467.968947][T19770] ? lockdep_hardirqs_on+0x8d/0x130 08:36:42 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) socket$can_j1939(0x1d, 0x2, 0x7) [ 3467.974184][T19770] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3467.980245][T19770] do_syscall_64+0x3d/0xb0 [ 3467.984715][T19770] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3467.990881][T19770] RIP: 0033:0x4665d9 [ 3467.994815][T19770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3468.014943][T19770] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 08:36:42 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) [ 3468.023466][T19770] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3468.031560][T19770] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 [ 3468.039729][T19770] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3468.047974][T19770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3468.056061][T19770] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 [ 3468.365155][T10730] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3468.372386][T10730] ath9k_htc: Failed to initialize the device [ 3468.380500][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3468.775185][ T9672] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 3469.345267][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3469.354361][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3469.364455][ T9672] usb 5-1: Product: syz [ 3469.369849][ T9672] usb 5-1: Manufacturer: syz [ 3469.376502][ T9672] usb 5-1: SerialNumber: syz [ 3469.436008][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3470.045181][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:44 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0x0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:44 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000004c0)=""/37) 08:36:44 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000012cc0)=[{{&(0x7f000000e200)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f000000e740)=[{&(0x7f000000e280)=""/242, 0xf2}, {&(0x7f000000e380)=""/103, 0x67}, {&(0x7f000000e400)=""/196, 0xc4}, {&(0x7f000000e500)=""/13, 0xd}, {&(0x7f000000e540)=""/226, 0xe2}, {&(0x7f000000e640)=""/87, 0x57}, {&(0x7f000000e6c0)=""/84, 0x54}], 0x7, &(0x7f000000e7c0)=""/165, 0xa5}, 0x6}, {{&(0x7f000000e880)=@can, 0x80, &(0x7f00000119c0)=[{&(0x7f000000e900)=""/4096, 0x1000}, {&(0x7f000000f900)=""/71, 0x47}, {&(0x7f000000f980)=""/4096, 0x1000}, {&(0x7f0000010980)=""/4096, 0x1000}, {&(0x7f0000011980)=""/13, 0xd}], 0x5, &(0x7f0000011a40)=""/67, 0x43}, 0xffffffff}, {{&(0x7f0000011ac0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000012b80)=[{&(0x7f0000011b40)=""/4096, 0x1000}, {&(0x7f0000012b40)=""/7, 0x7}], 0x2, &(0x7f0000012bc0)=""/244, 0xf4}}], 0x3, 0x40000003, 0x0) sendmsg$can_j1939(r0, &(0x7f0000012ec0)={&(0x7f0000012d80)={0x1d, r1, 0x10000, {0x0, 0x0, 0x1}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000012dc0)="4151caf615a28f385df4928ffe21a250efe0832b82ac93ad4b230acd0de2c839f669d2240062b66db7c291e42846fdefb0fbdd62dac28c8ff68f457eef62bf36d5cbdbace6be2f38d7c99938ad406f8006884df594a559de1d734dd1ebe6dd2b378719897808152d7e5e6ac7b2eb04ca1d13a4686da77b462e25be2b282a9e9cf2576c35a685310d33b599c91c8655e020a187f0a0ecc35fd1664f949350aea86a24e66a229179a8", 0xa8}}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0xf, 0x6, 0x1f, 0xd0b, 0x4, r0, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000180)=0x5) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) connect$can_j1939(r5, &(0x7f0000000300)={0x1d, r6, 0x0, {0x1, 0x1, 0x4}, 0xff}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040)=0x80000000, 0x1d) 08:36:44 executing program 3 (fault-call:0 fault-nth:5): clock_gettime(0x2, &(0x7f0000000400)) 08:36:44 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:36:44 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) [ 3470.263831][T10730] usb 5-1: USB disconnect, device number 61 [ 3470.352675][T19835] FAULT_INJECTION: forcing a failure. [ 3470.352675][T19835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 08:36:45 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) [ 3470.451178][T19835] CPU: 0 PID: 19835 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3470.459727][T19835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3470.469891][T19835] Call Trace: [ 3470.473366][T19835] dump_stack_lvl+0x1d3/0x29f [ 3470.478259][T19835] ? show_regs_print_info+0x12/0x12 [ 3470.483478][T19835] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3470.489216][T19835] ? __fs_reclaim_acquire+0x30/0x30 [ 3470.494454][T19835] should_fail+0x384/0x4b0 08:36:45 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) socket$inet_udp(0x2, 0x2, 0x0) 08:36:45 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000000)=""/230) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, 0x0, 0x1, {0x1, 0x1, 0x2}, 0x1}, 0x8) [ 3470.498982][T19835] prepare_alloc_pages+0x1d1/0x5a0 [ 3470.504212][T19835] __alloc_pages+0x14d/0x5f0 [ 3470.508838][T19835] ? __rmqueue_pcplist+0x2030/0x2030 [ 3470.514232][T19835] ? rcu_read_lock_sched_held+0x87/0x110 [ 3470.519892][T19835] ? alloc_pages+0x2e5/0x520 [ 3470.524534][T19835] pte_alloc_one+0x7f/0x320 [ 3470.529322][T19835] ? asan.module_ctor+0x10/0x10 [ 3470.534195][T19835] ? __rmqueue_pcplist+0x2030/0x2030 [ 3470.539701][T19835] __pte_alloc+0x75/0x210 [ 3470.544146][T19835] ? free_pgtables+0x2d0/0x2d0 [ 3470.548934][T19835] ? alloc_pages_vma+0x9f6/0xe70 [ 3470.553899][T19835] do_anonymous_page+0xf31/0x14a0 [ 3470.558968][T19835] ? fault_around_bytes_set+0xb0/0xb0 [ 3470.564377][T19835] handle_mm_fault+0x19cd/0x2640 [ 3470.569459][T19835] ? finish_fault+0x670/0x670 [ 3470.574263][T19835] ? __init_rwsem+0x160/0x160 [ 3470.579053][T19835] ? vmacache_find+0x4ef/0x5d0 [ 3470.583934][T19835] do_user_addr_fault+0x8ce/0x1120 [ 3470.589204][T19835] exc_page_fault+0xa1/0x1e0 [ 3470.593908][T19835] asm_exc_page_fault+0x1e/0x30 [ 3470.598795][T19835] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3470.605152][T19835] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3470.625996][T19835] RSP: 0018:ffffc9000a4efd88 EFLAGS: 00010202 [ 3470.632090][T19835] RAX: ffffffff84015d01 RBX: 0000000020000410 RCX: 0000000000000002 [ 3470.640077][T19835] RDX: 0000000000000000 RSI: ffffc9000a4efe00 RDI: 0000000020000400 [ 3470.648066][T19835] RBP: ffffc9000a4efe70 R08: 0000000000000000 R09: fffff5200149dfc2 [ 3470.656053][T19835] R10: fffff5200149dfc2 R11: 0000000000000000 R12: 0000000000000010 [ 3470.664044][T19835] R13: 00007ffffffff000 R14: ffffc9000a4efe00 R15: 0000000020000400 [ 3470.672047][T19835] ? _copy_to_user+0xb1/0x130 [ 3470.676750][T19835] _copy_to_user+0xef/0x130 [ 3470.681276][T19835] put_timespec64+0xf6/0x150 [ 3470.685877][T19835] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3470.691282][T19835] ? get_timespec64+0x250/0x250 [ 3470.696151][T19835] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 08:36:45 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000040)=0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000080)=""/124) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 3470.702165][T19835] __x64_sys_clock_gettime+0x1b8/0x220 [ 3470.707636][T19835] ? __ia32_sys_clock_settime+0x240/0x240 [ 3470.713459][T19835] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3470.719712][T19835] ? lockdep_hardirqs_on+0x8d/0x130 [ 3470.724930][T19835] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3470.730919][T19835] do_syscall_64+0x3d/0xb0 [ 3470.735352][T19835] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3470.741268][T19835] RIP: 0033:0x4665d9 [ 3470.745179][T19835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3470.764894][T19835] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 3470.773415][T19835] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3470.781405][T19835] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 [ 3470.789395][T19835] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3470.797384][T19835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3470.805451][T19835] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 08:36:45 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000003180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f00000000c0)=0x7fffffff, 0x4) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000000)={0x0, 0x3}) recvmsg$can_j1939(r0, &(0x7f0000008f00)={&(0x7f0000008740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000008d40)=[{&(0x7f00000087c0)=""/122, 0x7a}, {&(0x7f0000008840)=""/121, 0x79}, {&(0x7f00000088c0)=""/175, 0xaf}, {&(0x7f0000008980)=""/158, 0x9e}, {&(0x7f0000008a40)=""/242, 0xf2}, {&(0x7f0000008b40)=""/167, 0xa7}, {&(0x7f0000008c00)=""/48, 0x30}, {&(0x7f0000008c40)=""/78, 0x4e}, {&(0x7f0000000040)=""/70, 0x46}], 0x6, &(0x7f0000008e00)=""/194, 0xc2}, 0x20010102) sendmsg$can_j1939(r1, &(0x7f0000009040)={&(0x7f0000008f40)={0x1d, r3, 0x0, {0x1, 0x0, 0x3}, 0xfd}, 0x18, &(0x7f0000009000)={&(0x7f0000008f80)="37570063e4a1d2aa65eca95a0945e43c0e0a543846de48a364d9262078ead01ec88a521b80e5da1370132b2031b5c70c769c4fecfb66d903769ca53586895711c3e3", 0x42}, 0x1, 0x0, 0x0, 0x47d197c848956836}, 0x4004000) 08:36:45 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) [ 3470.975854][T11861] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3471.085030][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3471.092337][ T9672] ath9k_htc: Failed to initialize the device [ 3471.105578][T10730] usb 5-1: ath9k_htc: USB layer deinitialized [ 3471.485157][T10730] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 3471.575374][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3471.584544][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3471.593545][T11861] usb 3-1: Product: syz [ 3471.598316][T11861] usb 3-1: Manufacturer: syz [ 3471.602933][T11861] usb 3-1: SerialNumber: syz [ 3471.646249][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3472.095189][T10730] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3472.104778][T10730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3472.114698][T10730] usb 5-1: Product: syz [ 3472.119448][T10730] usb 5-1: Manufacturer: syz [ 3472.124167][T10730] usb 5-1: SerialNumber: syz [ 3472.175854][T10730] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3472.225474][T11861] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3472.456463][T10730] usb 3-1: USB disconnect, device number 31 [ 3472.815142][ T9675] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:47 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0x0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:47 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000480)) 08:36:47 executing program 3 (fault-call:0 fault-nth:6): clock_gettime(0x2, &(0x7f0000000400)) 08:36:47 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) clock_gettime(0x2, &(0x7f0000000400)) 08:36:47 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x25, 0x6, 0x8, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000040)=0xfffffffffffffcad) 08:36:47 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3473.041539][ T9672] usb 5-1: USB disconnect, device number 62 [ 3473.128248][T19900] FAULT_INJECTION: forcing a failure. [ 3473.128248][T19900] name failslab, interval 1, probability 0, space 0, times 0 08:36:47 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x2, &(0x7f0000000400)) [ 3473.212728][T19900] CPU: 1 PID: 19900 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3473.221293][T19900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3473.231363][T19900] Call Trace: [ 3473.234661][T19900] dump_stack_lvl+0x1d3/0x29f [ 3473.239544][T19900] ? show_regs_print_info+0x12/0x12 [ 3473.244891][T19900] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3473.245175][T11861] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3473.250625][T19900] ? __fs_reclaim_acquire+0x30/0x30 [ 3473.262693][T19900] ? __might_sleep+0x100/0x100 [ 3473.267480][T19900] ? __alloc_pages+0x2fd/0x5f0 [ 3473.272270][T19900] should_fail+0x384/0x4b0 [ 3473.276793][T19900] ? ptlock_alloc+0x1c/0x60 [ 3473.281412][T19900] should_failslab+0x5/0x20 [ 3473.285318][T11861] ath9k_htc: Failed to initialize the device [ 3473.286100][T19900] kmem_cache_alloc+0x6b/0x340 [ 3473.296880][T19900] ptlock_alloc+0x1c/0x60 [ 3473.301233][T19900] pte_alloc_one+0xc3/0x320 [ 3473.305759][T19900] ? asan.module_ctor+0x10/0x10 [ 3473.310627][T19900] ? __rmqueue_pcplist+0x2030/0x2030 [ 3473.315938][T19900] __pte_alloc+0x75/0x210 [ 3473.320281][T19900] ? free_pgtables+0x2d0/0x2d0 [ 3473.325039][T19900] ? alloc_pages_vma+0x9f6/0xe70 [ 3473.329976][T19900] do_anonymous_page+0xf31/0x14a0 [ 3473.334997][T19900] ? fault_around_bytes_set+0xb0/0xb0 [ 3473.340369][T19900] handle_mm_fault+0x19cd/0x2640 [ 3473.345399][T19900] ? finish_fault+0x670/0x670 [ 3473.350071][T19900] ? __init_rwsem+0x160/0x160 [ 3473.354733][T19900] ? vmacache_find+0x4ef/0x5d0 [ 3473.359499][T19900] do_user_addr_fault+0x8ce/0x1120 [ 3473.364625][T19900] exc_page_fault+0xa1/0x1e0 [ 3473.369308][T19900] asm_exc_page_fault+0x1e/0x30 [ 3473.374159][T19900] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3473.380477][T19900] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3473.400090][T19900] RSP: 0018:ffffc9000acffd88 EFLAGS: 00010202 [ 3473.406146][T19900] RAX: ffffffff84015d01 RBX: 0000000020000410 RCX: 0000000000000002 [ 3473.414197][T19900] RDX: 0000000000000000 RSI: ffffc9000acffe00 RDI: 0000000020000400 [ 3473.422244][T19900] RBP: ffffc9000acffe70 R08: 0000000000000000 R09: fffff5200159ffc2 [ 3473.430285][T19900] R10: fffff5200159ffc2 R11: 0000000000000000 R12: 0000000000000010 [ 3473.438248][T19900] R13: 00007ffffffff000 R14: ffffc9000acffe00 R15: 0000000020000400 [ 3473.446316][T19900] ? _copy_to_user+0xb1/0x130 [ 3473.450987][T19900] _copy_to_user+0xef/0x130 [ 3473.455479][T19900] put_timespec64+0xf6/0x150 [ 3473.460081][T19900] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3473.465455][T19900] ? get_timespec64+0x250/0x250 [ 3473.470297][T19900] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 3473.476286][T19900] __x64_sys_clock_gettime+0x1b8/0x220 [ 3473.481729][T19900] ? __ia32_sys_clock_settime+0x240/0x240 [ 3473.487440][T19900] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3473.493405][T19900] ? lockdep_hardirqs_on+0x8d/0x130 [ 3473.498589][T19900] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3473.504726][T19900] do_syscall_64+0x3d/0xb0 [ 3473.509230][T19900] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3473.515106][T19900] RIP: 0033:0x4665d9 [ 3473.518999][T19900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3473.538760][T19900] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 3473.547158][T19900] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3473.555112][T19900] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 08:36:48 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) [ 3473.563084][T19900] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3473.571036][T19900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3473.578998][T19900] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 [ 3473.589366][T10730] usb 3-1: ath9k_htc: USB layer deinitialized 08:36:48 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) clock_gettime(0x2, &(0x7f0000000400)) 08:36:48 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) socket$can_j1939(0x1d, 0x2, 0x7) 08:36:48 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) clock_gettime(0x2, &(0x7f0000000400)) 08:36:48 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1409, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x800) socketpair(0x18, 0x1, 0x2, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_j1939(r1, &(0x7f0000002ec0)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001a40)=""/197, 0xc5}, {&(0x7f0000001b40)=""/240, 0x5b}, {&(0x7f0000001c40)=""/70, 0x46}, {&(0x7f0000001cc0)=""/79, 0x4f}, {&(0x7f0000001d40)=""/132, 0x84}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/13, 0xd}], 0x7}, 0x40010020) sendto$rose(r1, &(0x7f0000000100)="3a0c41317d001d8453eda78f4606ee170dade561b6b8954c6df6b6ffeb725ac2b6cbe2965016861ebc2682c62e11b1fbc949d979b20a58", 0x37, 0x8000, &(0x7f0000000180)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x111180, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x9) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3473.885031][ T9675] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3473.896758][ T9675] ath9k_htc: Failed to initialize the device [ 3473.904495][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3473.995313][T10730] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3474.315197][ T9672] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 3474.615603][T10730] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3474.624838][T10730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3474.633487][T10730] usb 3-1: Product: syz [ 3474.638601][T10730] usb 3-1: Manufacturer: syz [ 3474.643221][T10730] usb 3-1: SerialNumber: syz [ 3474.692329][T10730] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3474.926829][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3474.936111][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3474.944132][ T9672] usb 5-1: Product: syz [ 3474.948986][ T9672] usb 5-1: Manufacturer: syz [ 3474.953607][ T9672] usb 5-1: SerialNumber: syz [ 3475.006846][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3475.305146][T10730] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3475.523494][ T9675] usb 3-1: USB disconnect, device number 32 [ 3475.615240][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:36:50 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:50 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) clock_gettime(0x2, &(0x7f0000000400)) 08:36:50 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) clock_gettime(0x2, &(0x7f0000000400)) 08:36:50 executing program 3 (fault-call:0 fault-nth:7): clock_gettime(0x2, &(0x7f0000000400)) 08:36:50 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/61) 08:36:50 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3475.840428][ T9588] usb 5-1: USB disconnect, device number 63 [ 3475.923147][T19981] FAULT_INJECTION: forcing a failure. [ 3475.923147][T19981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 08:36:50 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000040)=""/192) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) bind$rose(r1, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @bcast}, 0x1c) 08:36:50 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) [ 3476.037150][T19981] CPU: 1 PID: 19981 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3476.046223][T19981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3476.056292][T19981] Call Trace: [ 3476.059588][T19981] dump_stack_lvl+0x1d3/0x29f [ 3476.064292][T19981] ? show_regs_print_info+0x12/0x12 [ 3476.069517][T19981] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3476.075291][T19981] ? __fs_reclaim_acquire+0x30/0x30 [ 3476.080508][T19981] ? rcu_read_lock_sched_held+0x87/0x110 [ 3476.086169][T19981] should_fail+0x384/0x4b0 [ 3476.090617][T19981] prepare_alloc_pages+0x1d1/0x5a0 [ 3476.095878][T19981] __alloc_pages+0x14d/0x5f0 [ 3476.100498][T19981] ? __rmqueue_pcplist+0x2030/0x2030 [ 3476.105995][T19981] ? _raw_spin_unlock+0x24/0x40 [ 3476.110876][T19981] ? __pte_alloc+0x1a4/0x210 [ 3476.115498][T19981] alloc_pages_vma+0x4e8/0xe70 [ 3476.120282][T19981] do_anonymous_page+0x31b/0x14a0 [ 3476.125306][T19981] ? fault_around_bytes_set+0xb0/0xb0 [ 3476.130767][T19981] handle_mm_fault+0x19cd/0x2640 [ 3476.135744][T19981] ? finish_fault+0x670/0x670 [ 3476.140720][T19981] ? __init_rwsem+0x160/0x160 [ 3476.145388][T19981] ? vmacache_find+0x4ef/0x5d0 [ 3476.150144][T19981] do_user_addr_fault+0x8ce/0x1120 [ 3476.155250][T19981] exc_page_fault+0xa1/0x1e0 [ 3476.159867][T19981] asm_exc_page_fault+0x1e/0x30 [ 3476.164733][T19981] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3476.171079][T19981] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3476.190794][T19981] RSP: 0018:ffffc9000af3fd88 EFLAGS: 00010202 [ 3476.196858][T19981] RAX: ffffffff84015d01 RBX: 0000000020000410 RCX: 0000000000000002 [ 3476.204826][T19981] RDX: 0000000000000000 RSI: ffffc9000af3fe00 RDI: 0000000020000400 [ 3476.212806][T19981] RBP: ffffc9000af3fe70 R08: 0000000000000000 R09: fffff520015e7fc2 [ 3476.220858][T19981] R10: fffff520015e7fc2 R11: 0000000000000000 R12: 0000000000000010 [ 3476.228817][T19981] R13: 00007ffffffff000 R14: ffffc9000af3fe00 R15: 0000000020000400 [ 3476.236787][T19981] ? _copy_to_user+0xb1/0x130 [ 3476.241461][T19981] _copy_to_user+0xef/0x130 [ 3476.245951][T19981] put_timespec64+0xf6/0x150 [ 3476.250528][T19981] ? posix_cpu_clock_set+0x2d0/0x2d0 [ 3476.255800][T19981] ? get_timespec64+0x250/0x250 [ 3476.260637][T19981] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 3476.266612][T19981] __x64_sys_clock_gettime+0x1b8/0x220 [ 3476.272058][T19981] ? __ia32_sys_clock_settime+0x240/0x240 [ 3476.277762][T19981] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3476.284162][T19981] ? lockdep_hardirqs_on+0x8d/0x130 [ 3476.289435][T19981] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3476.295566][T19981] do_syscall_64+0x3d/0xb0 [ 3476.299992][T19981] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3476.305965][T19981] RIP: 0033:0x4665d9 [ 3476.309963][T19981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3476.329735][T19981] RSP: 002b:00007f7b60ac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 3476.338576][T19981] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 3476.346550][T19981] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000002 [ 3476.354505][T19981] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3476.362476][T19981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3476.370434][T19981] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 08:36:50 executing program 1: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) clock_gettime(0x2, &(0x7f0000000400)) [ 3476.383658][T10730] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3476.401621][T10730] ath9k_htc: Failed to initialize the device 08:36:51 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) clock_gettime(0x1, &(0x7f00000003c0)) [ 3476.457915][ T9675] usb 3-1: ath9k_htc: USB layer deinitialized 08:36:51 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000640)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/203, 0xcb}, {&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000100)=""/28, 0x1c}, {&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/243, 0xf3}], 0x6, &(0x7f0000000540)=""/221, 0xdd}, 0x2160) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:51 executing program 1: clock_gettime(0x2, &(0x7f0000000400)) [ 3476.695110][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3476.702626][ T9672] ath9k_htc: Failed to initialize the device [ 3476.710224][ T9588] usb 5-1: ath9k_htc: USB layer deinitialized [ 3476.865151][ T9675] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3477.105097][ T9588] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 3477.465642][ T9675] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3477.474729][ T9675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3477.483904][ T9675] usb 3-1: Product: syz [ 3477.488840][ T9675] usb 3-1: Manufacturer: syz [ 3477.493494][ T9675] usb 3-1: SerialNumber: syz [ 3477.536303][ T9675] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3477.675267][ T9588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3477.684520][ T9588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3477.694807][ T9588] usb 5-1: Product: syz [ 3477.699560][ T9588] usb 5-1: Manufacturer: syz [ 3477.704167][ T9588] usb 5-1: SerialNumber: syz [ 3477.756325][ T9588] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3478.165144][ T9675] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3478.375202][ T9588] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3478.392255][T11033] usb 3-1: USB disconnect, device number 33 08:36:53 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:53 executing program 3 (fault-call:0 fault-nth:8): clock_gettime(0x2, &(0x7f0000000400)) 08:36:53 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x1a, 0x1, 0x7, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1d, 0x6, 0x2, &(0x7f0000000200)) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0xfffffe76) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xb0000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8) socket$kcm(0x29, 0x5, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) recvmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/49, 0x31}], 0x1}, 0x100) 08:36:53 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) 08:36:53 executing program 1: clock_gettime(0x0, &(0x7f0000000400)) 08:36:53 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3478.613102][T11861] usb 5-1: USB disconnect, device number 64 [ 3478.702220][T20057] FAULT_INJECTION: forcing a failure. [ 3478.702220][T20057] name fail_usercopy, interval 1, probability 0, space 0, times 0 08:36:53 executing program 1: clock_gettime(0x0, &(0x7f0000000400)) 08:36:53 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4) [ 3478.828030][T20057] CPU: 0 PID: 20057 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3478.836508][T20057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3478.846842][T20057] Call Trace: [ 3478.850129][T20057] dump_stack_lvl+0x1d3/0x29f [ 3478.854833][T20057] ? show_regs_print_info+0x12/0x12 [ 3478.860132][T20057] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3478.865873][T20057] ? __might_fault+0xb8/0x110 [ 3478.870581][T20057] ? snprintf+0xc0/0x110 [ 3478.874847][T20057] should_fail+0x384/0x4b0 [ 3478.879369][T20057] _copy_to_user+0x2d/0x130 [ 3478.883991][T20057] simple_read_from_buffer+0xd9/0x160 [ 3478.889475][T20057] proc_fail_nth_read+0x195/0x210 [ 3478.894612][T20057] ? proc_fault_inject_write+0x370/0x370 [ 3478.900388][T20057] ? __mutex_lock_common+0x570/0x3770 [ 3478.905785][T20057] ? rw_verify_area+0x1b8/0x370 [ 3478.910807][T20057] ? fsnotify_perm+0x2fd/0x4d0 [ 3478.915579][T20057] ? proc_fault_inject_write+0x370/0x370 [ 3478.921238][T20057] vfs_read+0x294/0xc20 [ 3478.925412][T20057] ? rcu_lock_release+0x9/0x20 [ 3478.930186][T20057] ? __lock_acquire+0x6100/0x6100 [ 3478.935269][T20057] ? kernel_read+0x70/0x70 [ 3478.939734][T20057] ? __fget_files+0x34f/0x380 [ 3478.944530][T20057] ? mutex_lock_nested+0x1a/0x20 [ 3478.949577][T20057] ? __fdget_pos+0x24e/0x2f0 [ 3478.954195][T20057] ? ksys_read+0x72/0x2a0 [ 3478.958549][T20057] ksys_read+0x171/0x2a0 [ 3478.962806][T20057] ? vfs_write+0xc90/0xc90 [ 3478.967407][T20057] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3478.973490][T20057] ? lockdep_hardirqs_on+0x8d/0x130 08:36:53 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0xff, 0x5, 0x20, 0x83, 0xff, "4f9bff2252cd6a4989de992c8c14b451a001ed", 0xfffff800, 0xfffffffd}) 08:36:53 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/107) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) [ 3478.978812][T20057] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3478.985870][T20057] do_syscall_64+0x3d/0xb0 [ 3478.990407][T20057] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3478.996401][T20057] RIP: 0033:0x41935c [ 3479.000404][T20057] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3479.020024][T20057] RSP: 002b:00007f7b60ac9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3479.028469][T20057] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c [ 3479.036463][T20057] RDX: 000000000000000f RSI: 00007f7b60ac91e0 RDI: 0000000000000003 [ 3479.044454][T20057] RBP: 00007f7b60ac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3479.052489][T20057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3479.060476][T20057] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 08:36:53 executing program 0: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) 08:36:53 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) [ 3479.245172][ T9675] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3479.253169][ T9675] ath9k_htc: Failed to initialize the device [ 3479.261441][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3479.405147][ T9588] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3479.412703][ T9588] ath9k_htc: Failed to initialize the device [ 3479.420867][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3479.645235][T11033] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3479.795016][T11861] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 3480.165400][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3480.175435][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3480.184103][T11033] usb 3-1: Product: syz [ 3480.190498][T11033] usb 3-1: Manufacturer: syz [ 3480.196082][T11033] usb 3-1: SerialNumber: syz [ 3480.246105][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3480.315452][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3480.324578][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3480.336625][T11861] usb 5-1: Product: syz [ 3480.340812][T11861] usb 5-1: Manufacturer: syz [ 3480.346706][T11861] usb 5-1: SerialNumber: syz [ 3480.386202][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3480.815399][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3480.955157][T11861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3481.031807][T12454] usb 3-1: USB disconnect, device number 34 08:36:55 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:55 executing program 1: clock_gettime(0x0, &(0x7f0000000400)) 08:36:55 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @hci={0x1f, 0x1, 0x3}, @generic={0x5, "29a79dcf05763f403fdddbbc9593"}, @l2tp={0x2, 0x0, @empty, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x5, 0x800}) 08:36:55 executing program 0: accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0) 08:36:55 executing program 3: clock_gettime(0x3, &(0x7f0000000400)) 08:36:55 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3481.170869][ T9613] usb 5-1: USB disconnect, device number 65 08:36:55 executing program 1: clock_gettime(0x2, 0x0) 08:36:55 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 08:36:55 executing program 3: clock_gettime(0x4, &(0x7f0000000400)) 08:36:55 executing program 0: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) 08:36:56 executing program 1: clock_gettime(0x2, 0x0) 08:36:56 executing program 0: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3481.885113][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3481.892204][T11033] ath9k_htc: Failed to initialize the device [ 3481.901015][T12454] usb 3-1: ath9k_htc: USB layer deinitialized [ 3482.045039][T11861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3482.052270][T11861] ath9k_htc: Failed to initialize the device [ 3482.060081][ T9613] usb 5-1: ath9k_htc: USB layer deinitialized [ 3482.255078][T12454] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3482.425051][ T9613] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 3482.775305][T12454] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3482.784804][T12454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3482.795808][T12454] usb 3-1: Product: syz [ 3482.799994][T12454] usb 3-1: Manufacturer: syz [ 3482.804595][T12454] usb 3-1: SerialNumber: syz [ 3482.856092][T12454] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3482.955461][ T9613] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3482.964604][ T9613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3482.974486][ T9613] usb 5-1: Product: syz [ 3482.979239][ T9613] usb 5-1: Manufacturer: syz [ 3482.983878][ T9613] usb 5-1: SerialNumber: syz [ 3483.026227][ T9613] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3483.425128][T12454] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3483.595177][ T9613] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3483.646704][ T9675] usb 3-1: USB disconnect, device number 35 08:36:58 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0x0, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:36:58 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x2001, 0x1}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:36:58 executing program 3: clock_gettime(0xa, &(0x7f0000000400)) 08:36:58 executing program 1: clock_gettime(0x2, 0x0) 08:36:58 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3483.811657][ T9672] usb 5-1: USB disconnect, device number 66 08:36:58 executing program 3: clock_gettime(0xb, &(0x7f0000000400)) 08:36:58 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getnexthop={0x50, 0x6a, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8}, @NHA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4008010) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000180)) 08:36:58 executing program 3: sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000111420002cbd70ebfbdbdf2508004a00000ccf380000000800030004000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) clock_gettime(0x0, &(0x7f0000000000)) 08:36:58 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000000c0)={0x1, [0x0]}) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @rc={0x1f, @any, 0x8}, @hci={0x1f, 0x1, 0x3}, @tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x4}}, 0x1, 0x0, 0x0, 0x0, 0xa00, &(0x7f0000000000)='syzkaller1\x00', 0xffff, 0x1, 0x8}) 08:36:58 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r1, &(0x7f0000002900)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000000080)=""/147, 0x93}, {&(0x7f0000001180)}, {&(0x7f00000011c0)=""/127, 0x7f}], 0x4, &(0x7f0000001280)=""/73, 0x49}, 0x1}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001300)=""/58, 0x3a}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/30, 0x1e}, {&(0x7f0000002380)=""/173, 0xad}, {&(0x7f0000002440)=""/235, 0xeb}, {&(0x7f0000002540)=""/228, 0xe4}, {&(0x7f0000002640)=""/120, 0x78}, {&(0x7f00000026c0)=""/253, 0xfd}, {&(0x7f00000027c0)=""/57, 0x39}], 0x9, &(0x7f00000028c0)=""/36, 0x24}, 0x7}], 0x2, 0x40010002, &(0x7f0000002980)={0x77359400}) 08:36:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x834a, 0x2a8502) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x54, 0x3, 0x8001, {0x9, 0x80}, {0x1, 0x4}, @const={0x0, {0x2750, 0x5, 0x3, 0x5f6}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa52280, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x3, &(0x7f0000000140)={[0x40]}, 0x8) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000000c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x20002, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000280)=""/142) write$smackfs_cipso(r2, &(0x7f0000000200)={'/dev/vsock\x00', 0x20, 0x64, 0x20, 0x1, 0x20, [{0x9e}]}, 0x4c) clock_gettime(0x2, &(0x7f0000000400)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000001c0)={0x2}) 08:36:58 executing program 3: clock_gettime(0x2, &(0x7f00000000c0)) r0 = fork() clock_gettime(0x1, &(0x7f0000000040)) r1 = fork() getpgrp(r1) syz_open_procfs$namespace(r1, &(0x7f00000032c0)='ns/time\x00') r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') r3 = fork() getpgrp(r3) syz_open_procfs$namespace(r3, &(0x7f00000032c0)='ns/time\x00') getpgrp(r1) r4 = syz_open_procfs$namespace(r0, &(0x7f00000032c0)='ns/time\x00') r5 = fork() getpgrp(r5) syz_open_procfs$namespace(r5, &(0x7f00000032c0)='ns/time\x00') ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x429a, 0x0, 0x4a03d42f8031e8ca}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r5, 0x7, r4, &(0x7f0000000000)={0xffffffffffffffff, r6, 0xffffffff}) [ 3484.445185][T12454] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3484.453579][T12454] ath9k_htc: Failed to initialize the device [ 3484.461843][ T9675] usb 3-1: ath9k_htc: USB layer deinitialized [ 3484.685273][ T9613] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3484.692352][ T9613] ath9k_htc: Failed to initialize the device [ 3484.700736][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3484.875371][ T9675] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3485.095479][ T9672] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 3485.425202][ T9675] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3485.434560][ T9675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3485.443407][ T9675] usb 3-1: Product: syz [ 3485.448420][ T9675] usb 3-1: Manufacturer: syz [ 3485.454105][ T9675] usb 3-1: SerialNumber: syz [ 3485.505829][ T9675] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3485.635742][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3485.644822][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3485.656167][ T9672] usb 5-1: Product: syz [ 3485.660354][ T9672] usb 5-1: Manufacturer: syz [ 3485.667378][ T9672] usb 5-1: SerialNumber: syz [ 3485.728009][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3486.155305][ T9675] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3486.375740][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3486.382139][T11033] usb 3-1: USB disconnect, device number 36 08:37:01 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) clock_gettime(0x3, &(0x7f0000000000)) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000040)) 08:37:01 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0x0, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0xffffffffffffff10) 08:37:01 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3486.592780][T10730] usb 5-1: USB disconnect, device number 67 08:37:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) 08:37:01 executing program 3: clock_gettime(0x0, &(0x7f0000000000)) 08:37:01 executing program 3: clock_gettime(0x0, &(0x7f0000000400)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000001840)={0x10000001}) clock_gettime(0x0, &(0x7f0000003b80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/200, 0xc8}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000200)=""/185, 0xb9}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f00000003c0)=""/53, 0x35}], 0x6, &(0x7f00000004c0)=""/8, 0x8}, 0x10001}, {{&(0x7f0000000500)=@phonet, 0x80, &(0x7f0000001880)=[{&(0x7f0000000580)=""/117, 0x75}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/152, 0x98}, {&(0x7f00000016c0)=""/145, 0x91}, {&(0x7f0000001780)=""/192, 0xc0}, {&(0x7f0000001840)}], 0x6, &(0x7f0000001900)=""/151, 0x97}, 0xff}, {{&(0x7f00000019c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/14, 0xe}], 0x2, &(0x7f0000002ac0)=""/4096, 0x1000}, 0x1}], 0x3, 0x40000000, &(0x7f0000003bc0)={r1, r2+60000000}) 08:37:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x1, {0x2, 0xf1, 0x1}, {}, 0xfd, 0xfd}, {0x3, 0x2, {0x0, 0x3, 0x4}, {0x2, 0x0, 0x1}, 0x2, 0xfe}, {0xfffffffffffffffe, 0x3, {0x1, 0xff, 0x3}, {0x2, 0xff, 0x4}, 0x1fe, 0xfd}], 0x60) 08:37:01 executing program 3: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x1, 0x7f, 0x602f0f3d, 0x6000}) clock_gettime(0x2, &(0x7f0000000000)) 08:37:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) recvmsg$can_j1939(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/121, 0x79}, {&(0x7f0000000140)=""/145, 0x91}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000300)=""/190, 0xbe}, {&(0x7f00000003c0)=""/15, 0xf}], 0x5}, 0x40000021) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000000)=0x26) r1 = socket(0x21, 0x5, 0x6) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:37:01 executing program 3: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x30000015}) clock_gettime(0x2, &(0x7f0000000400)) 08:37:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:01 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/126, 0x7e}], 0x1, &(0x7f0000000140)=""/225, 0xe1}, 0x5}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000240)=""/153, 0x99}, {&(0x7f0000000300)=""/176, 0xb0}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/241, 0xf1}, {&(0x7f00000003c0)}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x7, &(0x7f0000001700)=""/106, 0x6a}}], 0x2, 0x1, &(0x7f0000001800)={0x0, 0x989680}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x356732434e80de53, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) recvmmsg(r2, &(0x7f0000001e80)=[{{&(0x7f0000001b40)=@xdp, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001900)=""/13, 0xd}, {&(0x7f0000001bc0)=""/249, 0xf9}, {&(0x7f0000001cc0)=""/219, 0xdb}], 0x3, &(0x7f0000001e00)=""/79, 0x4f}, 0x40}], 0x1, 0x2142, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000001840)=""/136) write$smackfs_cipso(r0, &(0x7f0000001940)=ANY=[@ANYBLOB="5c292f405e7b21232d3a28255e5c203030303030303030303030303030303030313820303030303030303030303030303030303030303820303030303030303030303230263030303030303030303030303031353020303030303030303030303030303030303031363020304ed61f8a2a8b8835e9c03030303030303030303030303030303031340900000000000000303030303038303030303031333020303030303030303030303030303030303030363120305d41b803b2c90e4430303030303030303030382030303030303030303030303030453030303032312000"/236], 0xe2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000001a40)=""/208) [ 3487.255141][ T9675] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3487.262116][ T9675] ath9k_htc: Failed to initialize the device [ 3487.276559][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3487.496553][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3487.504292][ T9672] ath9k_htc: Failed to initialize the device [ 3487.512306][T10730] usb 5-1: ath9k_htc: USB layer deinitialized [ 3487.635170][T11033] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3487.885188][T10730] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 3488.155286][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3488.164489][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3488.179158][T11033] usb 3-1: Product: syz [ 3488.183384][T11033] usb 3-1: Manufacturer: syz [ 3488.189681][T11033] usb 3-1: SerialNumber: syz [ 3488.241305][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3488.455461][T10730] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3488.464600][T10730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3488.474378][T10730] usb 5-1: Product: syz [ 3488.480114][T10730] usb 5-1: Manufacturer: syz [ 3488.486284][T10730] usb 5-1: SerialNumber: syz [ 3488.546151][T10730] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3488.815242][ T9613] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3489.032326][T11033] usb 3-1: USB disconnect, device number 37 [ 3489.195135][T10730] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:04 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0x0, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:04 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000100)={0xfffffffc, 0x2, 0x4, 0x1000, 0x10000, {0x0, 0xea60}, {0x2, 0x2, 0x5, 0x80, 0x47, 0x3, "88e3d160"}, 0x3, 0x3, @planes=&(0x7f00000000c0)={0x100, 0x4, @userptr=0x6, 0x400}, 0x2, 0x0, r3}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000080)={r1, 0x1}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000040)) 08:37:04 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) recvmmsg(0xffffffffffffffff, &(0x7f000000d740)=[{{&(0x7f00000092c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000009340)=""/119, 0x77}], 0x1, &(0x7f0000009400)=""/100, 0x64}, 0x2}, {{&(0x7f0000009480)=@can={0x1d, 0x0}, 0x80, &(0x7f0000009700)=[{&(0x7f0000009500)=""/212, 0xd4}, {&(0x7f0000009600)=""/207, 0xcf}], 0x2, &(0x7f0000009740)=""/49, 0x31}, 0x200}, {{&(0x7f0000009780)=@nfc_llcp, 0x80, &(0x7f000000acc0)=[{&(0x7f0000009800)=""/168, 0xa8}, {&(0x7f00000098c0)=""/162, 0xa2}, {&(0x7f0000009980)=""/137, 0x89}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/193, 0xc1}, {&(0x7f000000ab40)=""/138, 0x8a}, {&(0x7f000000ac00)=""/192, 0xc0}], 0x7}, 0xc63}, {{&(0x7f000000ad40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f000000aec0)=[{&(0x7f000000adc0)=""/200, 0xc8}], 0x1, &(0x7f000000af00)=""/122, 0x7a}, 0xfff}, {{&(0x7f000000af80)=@nfc_llcp, 0x80, &(0x7f000000c000)=[{&(0x7f000000b000)=""/4096, 0x1000}], 0x1, &(0x7f000000c040)=""/139, 0x8b}}, {{&(0x7f000000c100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000000c600)=[{&(0x7f000000c180)=""/60, 0x3c}, {&(0x7f000000c1c0)=""/53, 0x35}, {&(0x7f000000c200)=""/87, 0x57}, {&(0x7f000000c280)=""/151, 0x97}, {&(0x7f000000c340)=""/189, 0xbd}, {&(0x7f000000c400)=""/34, 0x22}, {&(0x7f000000c440)=""/245, 0xf5}, {&(0x7f000000c540)=""/146, 0x92}], 0x8, &(0x7f000000c680)=""/139, 0x8b}, 0x3ff}, {{&(0x7f000000c740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f000000cd00)=[{&(0x7f000000c7c0)=""/159, 0x9f}, {&(0x7f000000c880)=""/82, 0x52}, {&(0x7f000000c900)=""/26, 0x1a}, {&(0x7f000000c940)=""/211, 0xd3}, {&(0x7f000000ca40)=""/213, 0xd5}, {&(0x7f000000cb40)=""/121, 0x79}, {&(0x7f000000cbc0)=""/106, 0x6a}, {&(0x7f000000cc40)=""/11, 0xb}, {&(0x7f000000cc80)=""/104, 0x68}], 0x9, &(0x7f000000cdc0)=""/129, 0x81}, 0x10001}, {{&(0x7f000000ce80)=@ethernet={0x0, @local}, 0x80, &(0x7f000000d240)=[{&(0x7f000000cf00)=""/8, 0x8}, {&(0x7f000000cf40)=""/176, 0xb0}, {&(0x7f000000d000)}, {&(0x7f000000d040)=""/97, 0x61}, {&(0x7f000000d0c0)=""/149, 0x95}, {&(0x7f000000d180)=""/133, 0x85}], 0x6, &(0x7f000000d2c0)}, 0x5}, {{&(0x7f000000d300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f000000d640)=[{&(0x7f000000d380)=""/251, 0xfb}, {&(0x7f000000d480)=""/253, 0xfd}, {&(0x7f000000d580)=""/115, 0x73}, {&(0x7f000000d600)=""/3, 0x3}], 0x4, &(0x7f000000d680)=""/155, 0x9b}, 0x4}], 0x9, 0x20, &(0x7f000000d980)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000440)=""/4096) 08:37:04 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x0, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3489.413360][ T9675] usb 5-1: USB disconnect, device number 68 08:37:04 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r4, 0x4, 0x0, r5}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x56, 0xfffe, 0x5, {0x7, 0x97}, {0x4, 0x7ff}, @cond=[{0x1, 0x4, 0x800, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x0, 0x8001, 0x400, 0x8}]}) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x400, 0x200) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f00000003c0)=""/239) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:04 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x1412, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80e0}, 0x4040) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000000)) r4 = socket(0x9, 0xa, 0x9) ioctl$SIOCRSACCEPT(r4, 0x89e3) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x140041, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000200)={0x7, 0x1f, 0x2, 0x4000, r5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x81, 0x0, 0x10000}) 08:37:04 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r4, 0x4, 0x0, r5}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x56, 0xfffe, 0x5, {0x7, 0x97}, {0x4, 0x7ff}, @cond=[{0x1, 0x4, 0x800, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x0, 0x8001, 0x400, 0x8}]}) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x400, 0x200) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f00000003c0)=""/239) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:04 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) 08:37:04 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f0000003500)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000032c0)=[{{&(0x7f0000000400)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/144, 0x90}, {&(0x7f0000000600)=""/40, 0x28}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f00000006c0)=""/90, 0x5a}], 0x5}}, {{&(0x7f00000007c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/51, 0x33}, {&(0x7f0000000880)=""/21, 0x15}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/85, 0x55}, {&(0x7f0000000a00)=""/10, 0xa}], 0x5, &(0x7f0000000ac0)=""/238, 0xee}, 0xe7a}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000bc0)=""/212, 0xd4}, {&(0x7f0000000cc0)=""/48, 0x30}], 0x2, &(0x7f0000000d40)=""/111, 0x6f}, 0x8}, {{&(0x7f0000000dc0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e40)=""/157, 0x9d}, {&(0x7f0000000f00)=""/50, 0x32}, {&(0x7f0000000f40)=""/169, 0xa9}], 0x3}, 0x8}, {{&(0x7f0000001040)=@sco, 0x80, &(0x7f0000001340)=[{&(0x7f00000010c0)=""/183, 0xb7}, {&(0x7f0000001180)=""/189, 0xbd}, {&(0x7f0000001240)}, {&(0x7f0000001280)=""/186, 0xba}], 0x4, &(0x7f0000001380)=""/45, 0x2d}, 0x7fff}, {{&(0x7f00000013c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001440)=""/213, 0xd5}, {&(0x7f0000001540)=""/174, 0xae}, {&(0x7f0000001600)=""/19, 0x13}, {&(0x7f0000001640)=""/203, 0xcb}], 0x4, &(0x7f0000001780)=""/42, 0x2a}, 0x1}, {{&(0x7f00000017c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001840)=""/250, 0xfa}, {&(0x7f0000001940)=""/55, 0x37}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/234, 0xea}], 0x4}}, {{&(0x7f0000002ac0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002b40)=""/192, 0xc0}, {&(0x7f0000002c00)=""/68, 0x44}, {&(0x7f0000002c80)=""/197, 0xc5}, {&(0x7f0000002d80)=""/176, 0xb0}, {&(0x7f0000002e40)=""/129, 0x81}, {&(0x7f0000002f00)=""/131, 0x83}, {&(0x7f0000002fc0)=""/164, 0xa4}], 0x7}, 0x8}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000003100)=""/190, 0xbe}], 0x1, &(0x7f0000003200)=""/155, 0x9b}, 0x80000000}], 0x9, 0x43, &(0x7f0000003540)={r1, r2+60000000}) recvmmsg(r0, &(0x7f0000007100)=[{{&(0x7f0000000000)=@rc, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/141, 0x8d}], 0x4, &(0x7f0000000240)=""/237, 0xed}, 0xa03e}, {{&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000006900)=[{&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/79, 0x4f}, {&(0x7f0000001240)=""/25, 0x19}, {&(0x7f0000005740)=""/209, 0xd1}, {&(0x7f0000005840)=""/4096, 0x1000}, {&(0x7f0000006840)=""/174, 0xae}], 0x7, &(0x7f0000006980)=""/173, 0xad}, 0xfffffffb}, {{&(0x7f0000006a40)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000006f80)=[{&(0x7f0000006ac0)=""/251, 0xfb}, {&(0x7f0000006bc0)=""/142, 0x8e}, {&(0x7f0000006c80)=""/147, 0x93}, {&(0x7f0000006d40)=""/125, 0x7d}, {&(0x7f0000006dc0)=""/13, 0xd}, {&(0x7f0000006e00)=""/97, 0x61}, {&(0x7f0000006e80)=""/228, 0xe4}], 0x7, &(0x7f0000007000)=""/199, 0xc7}, 0x3}], 0x3, 0x60000140, &(0x7f00000071c0)={0x77359400}) sendmsg$can_j1939(r0, &(0x7f0000003680)={&(0x7f0000003580)={0x1d, r3, 0x0, {0x0, 0xff, 0x1}, 0xfe}, 0x18, &(0x7f0000003640)={&(0x7f00000035c0)="0a8fa4003b67e2500df12dda90f44e01c7e75f4a515594632e5382e4a6a4050106cafff5f8d8b4b553bb48c980999660b2065e8dc226ebadd7aa6114721d861915e355d99005e72689555f9bf53c30fe02", 0x51}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:04 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r4, 0x4, 0x0, r5}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x56, 0xfffe, 0x5, {0x7, 0x97}, {0x4, 0x7ff}, @cond=[{0x1, 0x4, 0x800, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x0, 0x8001, 0x400, 0x8}]}) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x400, 0x200) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f00000003c0)=""/239) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3489.895201][ T9613] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3489.912654][ T9613] ath9k_htc: Failed to initialize the device 08:37:04 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x6, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000040)) [ 3489.950607][T11033] usb 3-1: ath9k_htc: USB layer deinitialized 08:37:04 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r4, 0x4, 0x0, r5}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x56, 0xfffe, 0x5, {0x7, 0x97}, {0x4, 0x7ff}, @cond=[{0x1, 0x4, 0x800, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x0, 0x8001, 0x400, 0x8}]}) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x400, 0x200) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f00000003c0)=""/239) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3490.145516][T12454] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 3490.291296][T10730] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3490.305700][T10730] ath9k_htc: Failed to initialize the device [ 3490.341661][ T9675] usb 5-1: ath9k_htc: USB layer deinitialized [ 3490.357004][T11033] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3490.705154][ T9675] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 3490.755562][T12454] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3490.764723][T12454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3490.775485][T12454] usb 1-1: Product: syz [ 3490.779677][T12454] usb 1-1: Manufacturer: syz [ 3490.784277][T12454] usb 1-1: SerialNumber: syz [ 3490.846464][T12454] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3490.945520][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3490.954593][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3490.964130][T11033] usb 3-1: Product: syz [ 3490.969198][T11033] usb 3-1: Manufacturer: syz [ 3490.973798][T11033] usb 3-1: SerialNumber: syz [ 3491.025941][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3491.235409][ T9675] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3491.244472][ T9675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3491.261453][ T9675] usb 5-1: Product: syz [ 3491.267627][ T9675] usb 5-1: Manufacturer: syz [ 3491.272337][ T9675] usb 5-1: SerialNumber: syz [ 3491.333656][ T9675] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3491.485240][T12454] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3491.655198][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3491.712820][ T9613] usb 1-1: USB disconnect, device number 81 [ 3491.876355][T11861] usb 3-1: USB disconnect, device number 38 [ 3491.955302][ T9675] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:06 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:06 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x2, 0xf0, 0x2}, 0xff}, 0x18) socketpair(0x21, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x1}}, 0x18) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r4 = accept4$rose(r2, 0x0, &(0x7f00000000c0), 0x800) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) 08:37:06 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r4, 0x4, 0x0, r5}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x56, 0xfffe, 0x5, {0x7, 0x97}, {0x4, 0x7ff}, @cond=[{0x1, 0x4, 0x800, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x0, 0x8001, 0x400, 0x8}]}) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x400, 0x200) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f00000003c0)=""/239) 08:37:06 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x37f683, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x2}) 08:37:06 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) recvmmsg(0xffffffffffffffff, &(0x7f000000d740)=[{{&(0x7f00000092c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000009340)=""/119, 0x77}], 0x1, &(0x7f0000009400)=""/100, 0x64}, 0x2}, {{&(0x7f0000009480)=@can={0x1d, 0x0}, 0x80, &(0x7f0000009700)=[{&(0x7f0000009500)=""/212, 0xd4}, {&(0x7f0000009600)=""/207, 0xcf}], 0x2, &(0x7f0000009740)=""/49, 0x31}, 0x200}, {{&(0x7f0000009780)=@nfc_llcp, 0x80, &(0x7f000000acc0)=[{&(0x7f0000009800)=""/168, 0xa8}, {&(0x7f00000098c0)=""/162, 0xa2}, {&(0x7f0000009980)=""/137, 0x89}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/193, 0xc1}, {&(0x7f000000ab40)=""/138, 0x8a}, {&(0x7f000000ac00)=""/192, 0xc0}], 0x7}, 0xc63}, {{&(0x7f000000ad40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f000000aec0)=[{&(0x7f000000adc0)=""/200, 0xc8}], 0x1, &(0x7f000000af00)=""/122, 0x7a}, 0xfff}, {{&(0x7f000000af80)=@nfc_llcp, 0x80, &(0x7f000000c000)=[{&(0x7f000000b000)=""/4096, 0x1000}], 0x1, &(0x7f000000c040)=""/139, 0x8b}}, {{&(0x7f000000c100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000000c600)=[{&(0x7f000000c180)=""/60, 0x3c}, {&(0x7f000000c1c0)=""/53, 0x35}, {&(0x7f000000c200)=""/87, 0x57}, {&(0x7f000000c280)=""/151, 0x97}, {&(0x7f000000c340)=""/189, 0xbd}, {&(0x7f000000c400)=""/34, 0x22}, {&(0x7f000000c440)=""/245, 0xf5}, {&(0x7f000000c540)=""/146, 0x92}], 0x8, &(0x7f000000c680)=""/139, 0x8b}, 0x3ff}, {{&(0x7f000000c740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f000000cd00)=[{&(0x7f000000c7c0)=""/159, 0x9f}, {&(0x7f000000c880)=""/82, 0x52}, {&(0x7f000000c900)=""/26, 0x1a}, {&(0x7f000000c940)=""/211, 0xd3}, {&(0x7f000000ca40)=""/213, 0xd5}, {&(0x7f000000cb40)=""/121, 0x79}, {&(0x7f000000cbc0)=""/106, 0x6a}, {&(0x7f000000cc40)=""/11, 0xb}, {&(0x7f000000cc80)=""/104, 0x68}], 0x9, &(0x7f000000cdc0)=""/129, 0x81}, 0x10001}, {{&(0x7f000000ce80)=@ethernet={0x0, @local}, 0x80, &(0x7f000000d240)=[{&(0x7f000000cf00)=""/8, 0x8}, {&(0x7f000000cf40)=""/176, 0xb0}, {&(0x7f000000d000)}, {&(0x7f000000d040)=""/97, 0x61}, {&(0x7f000000d0c0)=""/149, 0x95}, {&(0x7f000000d180)=""/133, 0x85}], 0x6, &(0x7f000000d2c0)}, 0x5}, {{&(0x7f000000d300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f000000d640)=[{&(0x7f000000d380)=""/251, 0xfb}, {&(0x7f000000d480)=""/253, 0xfd}, {&(0x7f000000d580)=""/115, 0x73}, {&(0x7f000000d600)=""/3, 0x3}], 0x4, &(0x7f000000d680)=""/155, 0x9b}, 0x4}], 0x9, 0x20, &(0x7f000000d980)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000440)=""/4096) 08:37:06 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x0, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3492.167922][ T9757] usb 5-1: USB disconnect, device number 69 08:37:06 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x7) 08:37:06 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r4, 0x4, 0x0, r5}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x56, 0xfffe, 0x5, {0x7, 0x97}, {0x4, 0x7ff}, @cond=[{0x1, 0x4, 0x800, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x0, 0x8001, 0x400, 0x8}]}) syz_open_dev$evdev(&(0x7f00000001c0), 0x400, 0x200) 08:37:07 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) recvmmsg(0xffffffffffffffff, &(0x7f000000d740)=[{{&(0x7f00000092c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000009340)=""/119, 0x77}], 0x1, &(0x7f0000009400)=""/100, 0x64}, 0x2}, {{&(0x7f0000009480)=@can={0x1d, 0x0}, 0x80, &(0x7f0000009700)=[{&(0x7f0000009500)=""/212, 0xd4}, {&(0x7f0000009600)=""/207, 0xcf}], 0x2, &(0x7f0000009740)=""/49, 0x31}, 0x200}, {{&(0x7f0000009780)=@nfc_llcp, 0x80, &(0x7f000000acc0)=[{&(0x7f0000009800)=""/168, 0xa8}, {&(0x7f00000098c0)=""/162, 0xa2}, {&(0x7f0000009980)=""/137, 0x89}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/193, 0xc1}, {&(0x7f000000ab40)=""/138, 0x8a}, {&(0x7f000000ac00)=""/192, 0xc0}], 0x7}, 0xc63}, {{&(0x7f000000ad40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f000000aec0)=[{&(0x7f000000adc0)=""/200, 0xc8}], 0x1, &(0x7f000000af00)=""/122, 0x7a}, 0xfff}, {{&(0x7f000000af80)=@nfc_llcp, 0x80, &(0x7f000000c000)=[{&(0x7f000000b000)=""/4096, 0x1000}], 0x1, &(0x7f000000c040)=""/139, 0x8b}}, {{&(0x7f000000c100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000000c600)=[{&(0x7f000000c180)=""/60, 0x3c}, {&(0x7f000000c1c0)=""/53, 0x35}, {&(0x7f000000c200)=""/87, 0x57}, {&(0x7f000000c280)=""/151, 0x97}, {&(0x7f000000c340)=""/189, 0xbd}, {&(0x7f000000c400)=""/34, 0x22}, {&(0x7f000000c440)=""/245, 0xf5}, {&(0x7f000000c540)=""/146, 0x92}], 0x8, &(0x7f000000c680)=""/139, 0x8b}, 0x3ff}, {{&(0x7f000000c740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f000000cd00)=[{&(0x7f000000c7c0)=""/159, 0x9f}, {&(0x7f000000c880)=""/82, 0x52}, {&(0x7f000000c900)=""/26, 0x1a}, {&(0x7f000000c940)=""/211, 0xd3}, {&(0x7f000000ca40)=""/213, 0xd5}, {&(0x7f000000cb40)=""/121, 0x79}, {&(0x7f000000cbc0)=""/106, 0x6a}, {&(0x7f000000cc40)=""/11, 0xb}, {&(0x7f000000cc80)=""/104, 0x68}], 0x9, &(0x7f000000cdc0)=""/129, 0x81}, 0x10001}, {{&(0x7f000000ce80)=@ethernet={0x0, @local}, 0x80, &(0x7f000000d240)=[{&(0x7f000000cf00)=""/8, 0x8}, {&(0x7f000000cf40)=""/176, 0xb0}, {&(0x7f000000d000)}, {&(0x7f000000d040)=""/97, 0x61}, {&(0x7f000000d0c0)=""/149, 0x95}, {&(0x7f000000d180)=""/133, 0x85}], 0x6, &(0x7f000000d2c0)}, 0x5}, {{&(0x7f000000d300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f000000d640)=[{&(0x7f000000d380)=""/251, 0xfb}, {&(0x7f000000d480)=""/253, 0xfd}, {&(0x7f000000d580)=""/115, 0x73}, {&(0x7f000000d600)=""/3, 0x3}], 0x4, &(0x7f000000d680)=""/155, 0x9b}, 0x4}], 0x9, 0x20, &(0x7f000000d980)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000440)=""/4096) 08:37:07 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000000c0)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2={0x1f, 0x4}, @nl=@kern={0x10, 0x0, 0x0, 0x80000000}, @llc={0x1a, 0x322, 0x6, 0x80, 0x9, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x2, 0x0, 0x0, 0x0, 0x1ff, &(0x7f0000000000)='batadv0\x00', 0x8, 0x5, 0x8}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:07 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r4, 0x4, 0x0, r5}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x56, 0xfffe, 0x5, {0x7, 0x97}, {0x4, 0x7ff}, @cond=[{0x1, 0x4, 0x800, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x0, 0x8001, 0x400, 0x8}]}) 08:37:07 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) [ 3492.526112][T12454] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3492.536604][T12454] ath9k_htc: Failed to initialize the device [ 3492.564199][ T9613] usb 1-1: ath9k_htc: USB layer deinitialized [ 3492.685831][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3492.702765][T11033] ath9k_htc: Failed to initialize the device [ 3492.711306][T11861] usb 3-1: ath9k_htc: USB layer deinitialized [ 3493.005230][ T9675] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3493.012581][ T9675] ath9k_htc: Failed to initialize the device [ 3493.020643][ T9757] usb 5-1: ath9k_htc: USB layer deinitialized [ 3493.075185][T11861] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3493.385106][ T9757] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 3493.655668][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3493.665199][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3493.673833][T11861] usb 3-1: Product: syz [ 3493.680171][T11861] usb 3-1: Manufacturer: syz [ 3493.684799][T11861] usb 3-1: SerialNumber: syz [ 3493.736214][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3493.945187][ T9757] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3493.955251][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3493.963326][ T9757] usb 5-1: Product: syz [ 3493.969838][ T9757] usb 5-1: Manufacturer: syz [ 3493.974539][ T9757] usb 5-1: SerialNumber: syz [ 3494.015878][ T9757] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3494.325181][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3494.552774][ T9675] usb 3-1: USB disconnect, device number 39 [ 3494.615095][ T9757] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:09 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) recvmmsg(0xffffffffffffffff, &(0x7f000000d740)=[{{&(0x7f00000092c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000009340)=""/119, 0x77}], 0x1, &(0x7f0000009400)=""/100, 0x64}, 0x2}, {{&(0x7f0000009480)=@can={0x1d, 0x0}, 0x80, &(0x7f0000009700)=[{&(0x7f0000009500)=""/212, 0xd4}, {&(0x7f0000009600)=""/207, 0xcf}], 0x2, &(0x7f0000009740)=""/49, 0x31}, 0x200}, {{&(0x7f0000009780)=@nfc_llcp, 0x80, &(0x7f000000acc0)=[{&(0x7f0000009800)=""/168, 0xa8}, {&(0x7f00000098c0)=""/162, 0xa2}, {&(0x7f0000009980)=""/137, 0x89}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/193, 0xc1}, {&(0x7f000000ab40)=""/138, 0x8a}, {&(0x7f000000ac00)=""/192, 0xc0}], 0x7}, 0xc63}, {{&(0x7f000000ad40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f000000aec0)=[{&(0x7f000000adc0)=""/200, 0xc8}], 0x1, &(0x7f000000af00)=""/122, 0x7a}, 0xfff}, {{&(0x7f000000af80)=@nfc_llcp, 0x80, &(0x7f000000c000)=[{&(0x7f000000b000)=""/4096, 0x1000}], 0x1, &(0x7f000000c040)=""/139, 0x8b}}, {{&(0x7f000000c100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000000c600)=[{&(0x7f000000c180)=""/60, 0x3c}, {&(0x7f000000c1c0)=""/53, 0x35}, {&(0x7f000000c200)=""/87, 0x57}, {&(0x7f000000c280)=""/151, 0x97}, {&(0x7f000000c340)=""/189, 0xbd}, {&(0x7f000000c400)=""/34, 0x22}, {&(0x7f000000c440)=""/245, 0xf5}, {&(0x7f000000c540)=""/146, 0x92}], 0x8, &(0x7f000000c680)=""/139, 0x8b}, 0x3ff}, {{&(0x7f000000c740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f000000cd00)=[{&(0x7f000000c7c0)=""/159, 0x9f}, {&(0x7f000000c880)=""/82, 0x52}, {&(0x7f000000c900)=""/26, 0x1a}, {&(0x7f000000c940)=""/211, 0xd3}, {&(0x7f000000ca40)=""/213, 0xd5}, {&(0x7f000000cb40)=""/121, 0x79}, {&(0x7f000000cbc0)=""/106, 0x6a}, {&(0x7f000000cc40)=""/11, 0xb}, {&(0x7f000000cc80)=""/104, 0x68}], 0x9, &(0x7f000000cdc0)=""/129, 0x81}, 0x10001}, {{&(0x7f000000ce80)=@ethernet={0x0, @local}, 0x80, &(0x7f000000d240)=[{&(0x7f000000cf00)=""/8, 0x8}, {&(0x7f000000cf40)=""/176, 0xb0}, {&(0x7f000000d000)}, {&(0x7f000000d040)=""/97, 0x61}, {&(0x7f000000d0c0)=""/149, 0x95}, {&(0x7f000000d180)=""/133, 0x85}], 0x6, &(0x7f000000d2c0)}, 0x5}, {{&(0x7f000000d300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f000000d640)=[{&(0x7f000000d380)=""/251, 0xfb}, {&(0x7f000000d480)=""/253, 0xfd}, {&(0x7f000000d580)=""/115, 0x73}, {&(0x7f000000d600)=""/3, 0x3}], 0x4, &(0x7f000000d680)=""/155, 0x9b}, 0x4}], 0x9, 0x20, &(0x7f000000d980)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000440)=""/4096) 08:37:09 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:09 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r3, 0x4, 0x0, r4}) 08:37:09 executing program 3: clock_gettime(0x3, &(0x7f0000000400)) 08:37:09 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000000)) 08:37:09 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x0, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3494.831852][ T9588] usb 5-1: USB disconnect, device number 70 08:37:09 executing program 3: clock_gettime(0x3, &(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) fanotify_init(0x0, 0x80001) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) accept4(r0, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000000080)=0x80, 0x80800) r1 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x800) sendmsg$kcm(r1, &(0x7f0000000dc0)={&(0x7f0000000300)=@generic={0x8, "ec40e0340c4099d36807018d1a46714d1f4ec74f200c7dc6dcfb7661e49ae748e20ae74dda61c2e20d3211bc563e44d0804160caf0466025d5e896e1ba7c3cd27931ea51c0549345ad2ecfbd937faa91ffffa3cee5d40daf820371133a06dc1495875fb6dad96f3866ee9f5cf9dab67f9633e55aa27d4d8c8486dee932fd"}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)="0bd0903a419c1d62b2320f3077c4a8129782ce8ff08f899e6375e9daea47a99810a0d494c927cd8688c5c3d6da43844adb1b555b8ff47e285886a327e35c0d8be8da411fdfbefe4e68bfcb64b6505cdb822d01578e4be1dd06801c83d696c1a3335e78", 0x63}, {&(0x7f0000000400)="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", 0xfb}, {&(0x7f0000000500)}, {&(0x7f0000000540)="de96b6f4f85d1c51aa25e528947a88d8d5f42e4e6692e1064d285aea3c3e5a3423df3c258361b99309cef9dd0386d2cf134fd3b0dd50fba17c3211401c98c9711cc2295bde0279260b9daa467fb16655bd2aea3017d1bc7d4441b9fc45fe9f6af9b52ebea206225924a0c2636e096360bdcdb4d49a06198b2b6a62c7960db2fcb7c794d769ee250d8439b761c917ef9cf3f43770650eea5b14d8e8b1a37c10e14ef6d052e6917009b930f0d54107e70ad42da2166630f018df49b8d525add745640db68012bfb12913f11e780403e5523021e54632e047ad83d153bb24803553bb", 0xe1}], 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x730}, 0x42) socketpair(0x28, 0x4, 0x505, &(0x7f0000000100)) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000140)=0xd60) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000180)=""/140) 08:37:09 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000000)={0x9, 0x9, 0x1, 0x5, 0xf0b, 0xfffffffe}) 08:37:09 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) recvmmsg(0xffffffffffffffff, &(0x7f000000d740)=[{{&(0x7f00000092c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000009340)=""/119, 0x77}], 0x1, &(0x7f0000009400)=""/100, 0x64}, 0x2}, {{&(0x7f0000009480)=@can={0x1d, 0x0}, 0x80, &(0x7f0000009700)=[{&(0x7f0000009500)=""/212, 0xd4}, {&(0x7f0000009600)=""/207, 0xcf}], 0x2, &(0x7f0000009740)=""/49, 0x31}, 0x200}, {{&(0x7f0000009780)=@nfc_llcp, 0x80, &(0x7f000000acc0)=[{&(0x7f0000009800)=""/168, 0xa8}, {&(0x7f00000098c0)=""/162, 0xa2}, {&(0x7f0000009980)=""/137, 0x89}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/193, 0xc1}, {&(0x7f000000ab40)=""/138, 0x8a}, {&(0x7f000000ac00)=""/192, 0xc0}], 0x7}, 0xc63}, {{&(0x7f000000ad40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f000000aec0)=[{&(0x7f000000adc0)=""/200, 0xc8}], 0x1, &(0x7f000000af00)=""/122, 0x7a}, 0xfff}, {{&(0x7f000000af80)=@nfc_llcp, 0x80, &(0x7f000000c000)=[{&(0x7f000000b000)=""/4096, 0x1000}], 0x1, &(0x7f000000c040)=""/139, 0x8b}}, {{&(0x7f000000c100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000000c600)=[{&(0x7f000000c180)=""/60, 0x3c}, {&(0x7f000000c1c0)=""/53, 0x35}, {&(0x7f000000c200)=""/87, 0x57}, {&(0x7f000000c280)=""/151, 0x97}, {&(0x7f000000c340)=""/189, 0xbd}, {&(0x7f000000c400)=""/34, 0x22}, {&(0x7f000000c440)=""/245, 0xf5}, {&(0x7f000000c540)=""/146, 0x92}], 0x8, &(0x7f000000c680)=""/139, 0x8b}, 0x3ff}, {{&(0x7f000000c740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f000000cd00)=[{&(0x7f000000c7c0)=""/159, 0x9f}, {&(0x7f000000c880)=""/82, 0x52}, {&(0x7f000000c900)=""/26, 0x1a}, {&(0x7f000000c940)=""/211, 0xd3}, {&(0x7f000000ca40)=""/213, 0xd5}, {&(0x7f000000cb40)=""/121, 0x79}, {&(0x7f000000cbc0)=""/106, 0x6a}, {&(0x7f000000cc40)=""/11, 0xb}, {&(0x7f000000cc80)=""/104, 0x68}], 0x9, &(0x7f000000cdc0)=""/129, 0x81}, 0x10001}, {{&(0x7f000000ce80)=@ethernet={0x0, @local}, 0x80, &(0x7f000000d240)=[{&(0x7f000000cf00)=""/8, 0x8}, {&(0x7f000000cf40)=""/176, 0xb0}, {&(0x7f000000d000)}, {&(0x7f000000d040)=""/97, 0x61}, {&(0x7f000000d0c0)=""/149, 0x95}, {&(0x7f000000d180)=""/133, 0x85}], 0x6, &(0x7f000000d2c0)}, 0x5}, {{&(0x7f000000d300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f000000d640)=[{&(0x7f000000d380)=""/251, 0xfb}, {&(0x7f000000d480)=""/253, 0xfd}, {&(0x7f000000d580)=""/115, 0x73}, {&(0x7f000000d600)=""/3, 0x3}], 0x4, &(0x7f000000d680)=""/155, 0x9b}, 0x4}], 0x9, 0x20, &(0x7f000000d980)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:09 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r3, 0x4, 0x0, r4}) 08:37:09 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:09 executing program 3: clock_gettime(0x2, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000000)) 08:37:09 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)={0xebf, 0x2, 0x4, 0x1, 0x84, {0x0, 0x2710}, {0x5, 0x1, 0x4, 0x8, 0x0, 0x4, "32ce95ef"}, 0xcdf3, 0x3, @userptr=0x5, 0x1ff}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000180)={0x100, 0x0, 0x4, 0x20, 0x101, {0x0, 0xea60}, {0x2, 0x1, 0x40, 0xfe, 0x6, 0x1, "13a9497a"}, 0xb2, 0x7, @userptr=0x1, 0x2000}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x7, 0x20000) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000240)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = fork() getpgrp(r6) syz_open_procfs$namespace(r6, &(0x7f00000032c0)='ns/time\x00') syz_open_procfs$namespace(r6, &(0x7f0000000100)='ns/mnt\x00') ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0)={r5}) [ 3495.405177][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3495.412207][T11033] ath9k_htc: Failed to initialize the device [ 3495.420378][ T9675] usb 3-1: ath9k_htc: USB layer deinitialized [ 3495.646218][ T9757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3495.653242][ T9757] ath9k_htc: Failed to initialize the device [ 3495.661144][ T9588] usb 5-1: ath9k_htc: USB layer deinitialized [ 3495.785039][ T9675] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3496.025832][ T9588] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 3496.305234][ T9675] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3496.314393][ T9675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3496.329128][ T9675] usb 3-1: Product: syz [ 3496.333301][ T9675] usb 3-1: Manufacturer: syz [ 3496.339607][ T9675] usb 3-1: SerialNumber: syz [ 3496.386062][ T9675] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3496.555705][ T9588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3496.570617][ T9588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3496.578784][ T9588] usb 5-1: Product: syz [ 3496.583103][ T9588] usb 5-1: Manufacturer: syz [ 3496.593535][ T9588] usb 5-1: SerialNumber: syz [ 3496.635925][ T9588] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3496.965293][ T9675] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3497.181655][T10730] usb 3-1: USB disconnect, device number 40 [ 3497.215113][ T9588] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:12 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:12 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r3, 0x4, 0x0, r4}) 08:37:12 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:12 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/55, 0x37}, {&(0x7f00000000c0)=""/140, 0x8c}], 0x2, &(0x7f00000001c0)=""/210, 0xd2}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f0000000440)=""/191, 0xbf}, {&(0x7f0000000500)=""/115, 0x73}], 0x3, &(0x7f0000000580)=""/124, 0x7c}, 0xd93}, {{&(0x7f0000000600)=@x25, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/200, 0xc8}], 0x1, &(0x7f00000007c0)=""/77, 0x4d}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)=""/255, 0xff}, {&(0x7f0000000940)=""/33, 0x21}], 0x2, &(0x7f00000009c0)=""/137, 0x89}}, {{&(0x7f0000000a80)=@xdp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000b00)=""/140, 0x8c}, {&(0x7f0000000bc0)=""/94, 0x5e}, {&(0x7f0000000c40)=""/194, 0xc2}, {&(0x7f0000000d40)=""/7, 0x7}, {&(0x7f0000000d80)=""/170, 0xaa}, {&(0x7f0000000e40)=""/150, 0x96}, {&(0x7f0000000f00)=""/83, 0x53}, {&(0x7f0000000f80)=""/34, 0x22}], 0x8, &(0x7f0000001040)=""/191, 0xbf}}, {{&(0x7f0000001100)=@x25={0x9, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001180)=""/244, 0xf4}, {&(0x7f0000001280)=""/131, 0x83}], 0x2}, 0x1000}, {{&(0x7f0000001380)=@can, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001400)=""/148, 0x94}], 0x1, &(0x7f0000001500)=""/9, 0x9}, 0x4}], 0x7, 0x2, &(0x7f0000001700)={0x77359400}) bind$can_j1939(r0, &(0x7f0000001740)={0x1d, 0x0, 0x1, {0x1, 0x0, 0x3}, 0xff}, 0x18) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000001780), 0x4) clock_gettime(0x2, &(0x7f0000000400)) 08:37:12 executing program 5: clock_gettime(0x0, &(0x7f0000006040)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005e00)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/80, 0x50}, {&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f0000000340)=""/159, 0x9f}], 0x4, &(0x7f0000000440)=""/187, 0xbb}, 0x47f}, {{&(0x7f0000000500)=@x25={0x9, @remote}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000580)=""/227, 0xe3}, {&(0x7f0000000680)=""/189, 0xbd}, {&(0x7f0000000740)=""/157, 0x9d}, {&(0x7f0000000800)=""/12, 0xc}, {&(0x7f0000000840)=""/43, 0x2b}, {&(0x7f0000006100)=""/104, 0x68}, {&(0x7f0000000900)=""/152, 0x98}, {&(0x7f00000009c0)=""/100, 0x64}, {&(0x7f0000000a40)=""/115, 0x73}], 0x9, &(0x7f0000000b80)=""/219, 0xdb}, 0x1}, {{&(0x7f0000000c80)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/232, 0xe8}, {&(0x7f0000001e00)=""/97, 0x61}, {&(0x7f0000001e80)=""/147, 0x93}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/101, 0x65}, {&(0x7f0000002fc0)=""/211, 0xd3}], 0x7, &(0x7f0000003140)=""/109, 0x6d}, 0x6}, {{&(0x7f00000031c0)=@nfc_llcp, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003240)=""/127, 0x7f}], 0x1}, 0x2}, {{&(0x7f0000003300)=@generic, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003380)=""/209, 0xd1}, {&(0x7f0000003480)=""/214, 0xd6}, {&(0x7f0000003580)=""/242, 0xf2}, {&(0x7f0000003680)=""/170, 0xaa}, {&(0x7f0000003740)=""/178, 0xb2}, {&(0x7f0000003800)=""/248, 0xf8}, {&(0x7f0000003900)=""/33, 0x21}, {&(0x7f0000003940)=""/146, 0x92}, {&(0x7f0000003a00)=""/12, 0xc}, {&(0x7f0000003a40)=""/82, 0x52}], 0xa, &(0x7f0000003b80)=""/229, 0xe5}, 0x20}, {{&(0x7f0000003c80)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000005180)=[{&(0x7f0000003d00)=""/78, 0x4e}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/191, 0xbf}, {&(0x7f0000004e40)=""/255, 0xff}, {&(0x7f0000004f40)=""/198, 0xc6}, {&(0x7f0000005040)=""/65, 0x41}, {&(0x7f00000050c0)=""/189, 0xbd}], 0x7, &(0x7f0000005200)=""/216, 0xd8}, 0x6ab1}, {{&(0x7f0000005300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000005380)}, 0x8}, {{&(0x7f00000053c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000005700)=[{&(0x7f0000005440)=""/203, 0xcb}, {&(0x7f0000005540)=""/234, 0xea}, {&(0x7f0000005640)=""/11, 0xb}, {&(0x7f0000005680)=""/127, 0x7f}], 0x4, &(0x7f0000005740)=""/226, 0xe2}, 0x4}, {{&(0x7f0000005840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000880)=[{&(0x7f00000058c0)=""/239, 0xef}, {&(0x7f00000059c0)=""/8, 0x8}, {&(0x7f0000005a00)=""/83, 0x53}, {&(0x7f0000005a80)=""/156, 0x9c}, {&(0x7f0000005b40)=""/218, 0xda}, {&(0x7f0000005c40)=""/233, 0xe9}], 0x6, &(0x7f0000005dc0)=""/8, 0x8}, 0x2}], 0x9, 0x40000143, &(0x7f0000006080)={r0, r1+60000000}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = syz_open_dev$vim2m(&(0x7f0000005380), 0xb36b, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000060c0)={0x0, 0x2, 0x8}) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, &(0x7f0000000140)) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80100) 08:37:12 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3497.432710][T11033] usb 5-1: USB disconnect, device number 71 08:37:12 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x82180) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:12 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) getsockopt$rose(0xffffffffffffffff, 0x104, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:37:12 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0xfffffff9], &(0x7f0000000080)=[0x2, 0x5, 0xfdb2, 0x20, 0x9, 0x9, 0x2, 0xffff, 0x7], 0x14, 0x5, 0x3, &(0x7f00000000c0)=[0xffff, 0x0, 0x10000, 0xbc, 0xffffffe1], &(0x7f0000000100)=[0xffffffff, 0x0, 0xfffffff9, 0x81]}) clock_gettime(0x2, &(0x7f0000000400)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) 08:37:12 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:12 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r3, 0x4, 0x0, r4}) 08:37:12 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x492a00, 0x0) recvmsg$can_j1939(r2, &(0x7f00000012c0)={&(0x7f0000000080)=@x25, 0x80, &(0x7f0000001200)=[{&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)}, {&(0x7f00000011c0)=""/48, 0x30}], 0x4, &(0x7f0000001240)=""/74, 0x4a}, 0x40000020) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, &(0x7f0000000140)) accept4(r0, &(0x7f0000003500)=@can={0x1d, 0x0}, &(0x7f0000003580)=0x80, 0x80800) bind$can_j1939(r2, &(0x7f00000035c0)={0x1d, r3, 0x1, {0x0, 0x0, 0x2}, 0x103}, 0x18) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x0, 0x1}}, 0x18) [ 3498.045104][ T9675] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3498.052092][ T9675] ath9k_htc: Failed to initialize the device [ 3498.060747][T10730] usb 3-1: ath9k_htc: USB layer deinitialized [ 3498.295113][ T9588] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3498.302496][ T9588] ath9k_htc: Failed to initialize the device [ 3498.310632][T11033] usb 5-1: ath9k_htc: USB layer deinitialized [ 3498.425001][T10730] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 3498.675008][T11033] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 3498.955386][T10730] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3498.964448][T10730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3498.980101][T10730] usb 3-1: Product: syz [ 3498.984283][T10730] usb 3-1: Manufacturer: syz [ 3498.989313][T10730] usb 3-1: SerialNumber: syz [ 3499.045990][T10730] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3499.305116][T11033] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3499.314766][T11033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3499.324361][T11033] usb 5-1: Product: syz [ 3499.329486][T11033] usb 5-1: Manufacturer: syz [ 3499.334098][T11033] usb 5-1: SerialNumber: syz [ 3499.385929][T11033] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3499.625404][T10730] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3499.845073][ T9757] usb 3-1: USB disconnect, device number 41 [ 3500.035233][T11033] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:14 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x400, 0x1, 0x4, 0xe000, 0x1738, {0x0, 0xea60}, {0x5, 0x8, 0x2, 0x1, 0xfe, 0x84, "422de71f"}, 0x8, 0x3, @fd=0xffffffffffffffff, 0xa2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd=r3, 0x4}) 08:37:14 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0x9000001c}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0xa, 0x1, 0x3, 0x80000, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) clock_gettime(0x1, &(0x7f00000003c0)) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x9, 0x6, &(0x7f0000000600)=[{&(0x7f0000000100)="8cac7d667e27459b58489cc0060b1db93d202a27ab8226d679a389a6f1ed9a7c0919ad0a46af4bcecf059adae7007702fb23cb158f1ec408fb71a89642849ef389cda26e12e6416b8dcd239fbddb7607003f947d249bb79eabdd47b3669bc17bb18027a1ca439ea8894f5f370d56793a051107db8ae5be3b8a5f44ae462d562f4e6cd6dae14d30a9fdbef18e440c660678b212181df2c7e3ec6998a55d03a0ca39c915b88b38b0c3b5c1aa15e72696d9", 0xb0, 0x80}, {&(0x7f00000001c0)="ddcf287867f9923711aca731636597c45ea07207bc4cf3625cc62ef5dd8810336bf9bf75d1e576d34c36126d9a87f92b200944f0e9948156dc0dd072c8dcca0f55e53e170ff0fc235db222acaa1b7eab38b49093c3ba6449a5ea7c3c245d00ea224749745cad5af64f23d3462830118464cdca779f26d2110094e3876c0a55927d20c1d5cf9917f6110b08f9ddb76888d61da0e603619c76b74196f8cd36d19b9bf3e2c6accd8dfe8e30e6f854c662661bb051a64018383d3e2b3e3c4e013c67c2990ad228f53d7f096ab1c463dd2dec08bc11dbf83334b1c2713f24380f39c987769c1915dd", 0xe6, 0x7fffffff}, {&(0x7f00000002c0)="fda719010fa09e4d36637f74273c3d74ab9f576d657f40c82696bef31885fa70fedefa2109d5e8dc4802c4661c2338b36a9cd0393c6257b1bdf8a6b3c72868d844a7d89782f5b0afaadcdd80f2357f8c5c9bcf4278500af58cea6a797263748d276819d96b3ea84d62ea8111af7a2880c83667443c46f084ae6e18ca0d1761305fdbf692f1e2f3e3ae0b204644eabb6ac2be77e4c9e126502ad866de084276db", 0xa0}, {&(0x7f0000000440)="14405c232394d20df8edcd1528f616b4ed49f31ec0be3d688e19385cfaeee3665f0728b5dc691e2a3f06efc2a13f41bd2151eb4871ee881dd041019d810a4a2af1614b1ff9cf896bd89f949fff9679ebbd025330842566a39d07ed2633788f1cde234f96144b59af277d455a809dd01b50ce5d044ab8c5e4c6c40bd665c4deb946da2d7148d9d6c184cf428d404f600537481edca5b34ccc36715c2b1445a369cf63cf10c4a58f0b", 0xa8, 0x8}, {&(0x7f0000000840)="bfea79c09568b8a3f8354e07b1b7680f29e00b945333468e305b6af690924065d0e05f", 0x23, 0x2}, {&(0x7f0000000500)="de68a96e00883952e1749c0ea89627949b589a6b64d658c62fe51e8ee1cce4e78acc0267cd5e627d2c37a8d9a7e50d86305ebb3132c025cb71f37ecfceb050b931a25ea9ebb07bfd9233705be41c3d53b06181d1579b3e5c59d1fcfc059930afa4d3b939416513cf21e6cecfdef8deb04e62c37350a46121036d5318d686f1f4afbc358503f716617544ea29525b383f39fad0ede0451d1b6d54368e6811bc16432e9601c1b509598ef99c4199b9024c895d15a98dba1c394f44de36abb604ad8c8c5368388295b6f9ba5e01dec38696bde7f94429238724e9537fb2d6223008fc5bde5dd63970f64df935bd", 0xec, 0x6eaf}], 0x1, &(0x7f00000007c0)={[{@codepage={'codepage', 0x3d, 'cp932'}}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, r2}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 08:37:14 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:14 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:14 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:14 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3500.251350][ T9588] usb 5-1: USB disconnect, device number 72 [ 3500.360367][T20719] loop3: detected capacity change from 0 to 264192 08:37:15 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) socket(0x26, 0x80004, 0xfc5) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000080)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000240)={0x80000002}) socketpair(0xf, 0xa, 0x2004, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@bridge_setlink={0x48, 0x13, 0x300, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x61, 0x44}, [@IFLA_WEIGHT={0x8, 0xf, 0x5}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3f}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4810}, 0x4000) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000800), &(0x7f0000000000)=0x4) 08:37:15 executing program 0: clock_gettime(0x2, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:15 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) [ 3500.439731][T20719] exfat: Deprecated parameter 'codepage' [ 3500.494707][T20719] exfat: Bad value for 'codepage' 08:37:15 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:15 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x1], 0x2, 0x2, 0x1000, &(0x7f0000000080)=[0x401, 0x3], &(0x7f00000000c0)=[0xfffffffe, 0xfffff801, 0x80000000, 0xa1, 0x800]}) 08:37:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:15 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$vim2m(&(0x7f0000000000), 0x100000000, 0x2) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) [ 3500.703671][T10730] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3500.721055][T10730] ath9k_htc: Failed to initialize the device 08:37:15 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) [ 3500.757101][ T9757] usb 3-1: ath9k_htc: USB layer deinitialized [ 3501.085021][T11033] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3501.092593][T11033] ath9k_htc: Failed to initialize the device [ 3501.100485][ T9588] usb 5-1: ath9k_htc: USB layer deinitialized [ 3501.165088][ T9757] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 3501.475153][ T9588] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 3501.745299][ T9757] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3501.754550][ T9757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3501.763020][ T9757] usb 3-1: Product: syz [ 3501.767798][ T9757] usb 3-1: Manufacturer: syz [ 3501.772408][ T9757] usb 3-1: SerialNumber: syz [ 3501.836046][ T9757] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3501.995332][ T9588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3502.005012][ T9588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3502.013844][ T9588] usb 5-1: Product: syz [ 3502.020246][ T9588] usb 5-1: Manufacturer: syz [ 3502.025966][ T9588] usb 5-1: SerialNumber: syz [ 3502.076203][ T9588] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3502.555187][ T9757] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3502.655203][ T9588] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3502.786594][T11861] usb 3-1: USB disconnect, device number 42 08:37:17 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:17 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = accept4(r0, &(0x7f0000000000)=@sco={0x1f, @none}, &(0x7f0000000080)=0x80, 0x80000) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)=0x50) 08:37:17 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) socket$kcm(0x29, 0x5, 0x0) 08:37:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 08:37:17 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480d00, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:17 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), &(0x7f0000007800)=0x4) [ 3502.875324][T10730] usb 5-1: USB disconnect, device number 73 08:37:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 08:37:17 executing program 5: socketpair(0xa, 0xa, 0x5, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$kcm(r0, &(0x7f0000000c40)={&(0x7f00000008c0)=@caif=@util={0x25, "66c219685a27f269a203bd55ba7e1a0f"}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)="1ff654c4fa9f076d761681f5cbd57799be9bb520807d0446e7ae96d58d07b0a48ac6c4d9cf944af5a1d2b476cfefc3f13d4cd79fd6d0533a44018fc7e284b572ee3899a88c79e5872630084919095f4a2ec87c6700e14f9f4f187c733847f93a1dd10151247f81a92a2162a3160f44c15b39c9c55c86f60dd54acebf91788ddc0296d36351aa491ed872054d8fa7d150c4efdd9b2366abb6b6769132f26eb9aae164aeae144b0b5e7a7db511", 0xac}, {&(0x7f0000000a00)="154f2ba1985988efb2b1163022007aa4f4e31b99e938672d22c611de96f66f149aa63a9252a5447a6fb82f5a9f235e8b5435b725cbf6ccdaa3646b308f7a7e88da1cf5b2bf154bcb869bed609c897a3d30d27f42ca98199ac6f03f3531f05f9fd8b236c0c17f5c027db09c37", 0x6c}], 0x2, &(0x7f0000000ac0)=[{0x50, 0x113, 0x8, "2ac78bad8723fca0b9ed29854c20fddfd2d9da1266f069033c65617a1de8d2e675635923860cec5eec31bdf03956539a0401df6a4a365fde1f87704f3dd1"}, {0x48, 0x102, 0x2, "7402ba3e2d1ff0edbbaabee32ba8772a9db5ff110a739144fc515c3befc23dff4d9d52c17ee4c5bb2dd0ace45ceb56de804513caad01fd19"}, {0xe8, 0x11, 0x7, "48914443e2871cf470361ae20342d2e09454630e3497a613b2506eeb4c1f24d964b4715eaa2815196b76c2424950b0da44c74199c791d5ab01ea39750b6b4d091c850090993b1ddf556d086eb3a0dc692b19617c8b1e74dbbb285d54ab270aa76421a2d7ddeadf5476e47bdff576c70f417ac1a0c0ae419a1ae5301da677cd33f9a62c7ba6defcfe6f61a3583429c0dcc85108113379264e409c2cce4b90f6a608643872a25000840fd83647b90c5540f6b78f40c4cab086f6ab3fc1cf1d7ad4a7f1cc4117c83ad054e946631fffff39dc89d2771592bf"}], 0x180}, 0x40000) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f0000000140)) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x1, 0xff, 0x1}, 0xfe}, 0x18) 08:37:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 08:37:17 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x8) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:17 executing program 3: clock_gettime(0x2, &(0x7f0000004700)) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) recvmmsg(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)=@ax25={{0x3, @netrom}, [@rose, @null, @netrom, @null, @rose, @remote, @null, @bcast]}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/154, 0x9a}, {&(0x7f0000000180)=""/209, 0xd1}, {&(0x7f0000000280)=""/241, 0xf1}], 0x3, &(0x7f0000000440)=""/170, 0xaa}, 0x20}, {{&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/23, 0x17}, {&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/133, 0x85}], 0x3, &(0x7f0000000740)=""/182, 0xb6}, 0x2}, {{&(0x7f0000000840)=@tipc=@name, 0x80, &(0x7f0000001a40)=[{0xfffffffffffffffe}, {&(0x7f00000008c0)=""/90, 0x5a}, {&(0x7f0000000940)=""/223, 0xdf}, {&(0x7f0000004880)=""/4096, 0x1000}], 0x4, &(0x7f0000001a80)=""/193, 0xc1}}, {{&(0x7f0000001b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003000)=[{&(0x7f0000001c00)=""/240, 0xf0}, {&(0x7f0000001d00)=""/35, 0x23}, {&(0x7f0000001d40)=""/75, 0x4b}, {&(0x7f0000001dc0)=""/39, 0x27}, {&(0x7f0000001e00)=""/196, 0xc4}, {&(0x7f0000001f00)=""/4089, 0xff9}, {&(0x7f0000004740)=""/262, 0x106}], 0x7, &(0x7f0000003080)=""/97, 0x61}, 0x9}, {{&(0x7f0000003100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003180)=""/54, 0x36}], 0x1, &(0x7f0000003200)=""/67, 0x43}, 0x9}, {{&(0x7f0000003280)=@ll, 0x80, &(0x7f0000004400)=[{&(0x7f0000003300)=""/108, 0x6c}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/92, 0x5c}], 0x3, &(0x7f0000004440)=""/197, 0xc5}, 0x14}], 0x6, 0x2160, &(0x7f00000046c0)) 08:37:17 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) [ 3503.645212][ T9757] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3503.652586][ T9757] ath9k_htc: Failed to initialize the device [ 3503.661758][T11861] usb 3-1: ath9k_htc: USB layer deinitialized [ 3503.735330][ T9588] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3503.742902][ T9588] ath9k_htc: Failed to initialize the device [ 3503.751673][T10730] usb 5-1: ath9k_htc: USB layer deinitialized [ 3504.025011][T11861] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 3504.125540][T10730] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 3504.595366][T11861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3504.604801][T11861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3504.615814][T11861] usb 3-1: Product: syz [ 3504.620360][T11861] usb 3-1: Manufacturer: syz [ 3504.629780][T11861] usb 3-1: SerialNumber: syz [ 3504.645349][T10730] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3504.655384][T10730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3504.664185][T10730] usb 5-1: Product: syz [ 3504.670911][T10730] usb 5-1: Manufacturer: syz [ 3504.676805][T10730] usb 5-1: SerialNumber: syz [ 3504.692445][T11861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3504.716561][T10730] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3505.325139][ T9757] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3505.325163][ T9675] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:20 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x0, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:20 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000080)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000000)={"a215734ef16a9e3ce779a4d1a7101557f53f380f15b0193c6d6bfefb750e", 0xe1e9, 0x2, 0x1, [0x3, 0x9, 0x0, 0x4, 0x101, 0xf70, 0x2, 0x80000001, 0x9, 0x1000, 0x4, 0x0, 0x9000000, 0x20, 0x4, 0x8, 0x1819403c, 0x2]}) 08:37:20 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000300)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000002c0)={0x0, &(0x7f0000000280)=""/35}) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) sendmsg$can_j1939(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x2, 0xff}, 0x1}, 0x18, &(0x7f0000000100)={&(0x7f0000000180)="6734acb09de02a76f522a38086cce524e08772b44f28bfe44b7900800c413bea9f9a965793cd0fbb4a8cfd5a28f20da922af471dc39009c4745a13785cbc18e6061b31e02d4be77c8490c216d440ff0f81cd3daa81b053d043df31139b717c41fe272234416cc4b5b57ac73add497d36ac37ae55cacce97c223d28e5600445a64879e5e705b9596153ac67c0f957aef7e476df26cb6a1329b408172bfc55c3ab217886d5157b577dde12a2cda2947217d7f636b1ca7201b669528f0e1142", 0xbe}, 0x1, 0x0, 0x0, 0x20004040}, 0x8000) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000340)=""/59) 08:37:20 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:20 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000007800)) [ 3505.562034][ T9588] usb 3-1: USB disconnect, device number 43 [ 3505.589927][ T9672] usb 5-1: USB disconnect, device number 74 08:37:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x0, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:20 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:20 executing program 3: clock_gettime(0x7, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) setsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000080)=0x3, 0x4) 08:37:20 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0xfffffffffffffffe, &(0x7f0000000000)=0x23) 08:37:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x0, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:20 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) [ 3506.365112][ T9757] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3506.372399][ T9757] ath9k_htc: Failed to initialize the device [ 3506.375014][ T9675] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3506.385505][ T9588] usb 3-1: ath9k_htc: USB layer deinitialized [ 3506.401006][ T9675] ath9k_htc: Failed to initialize the device [ 3506.412023][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3506.765165][ T9588] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 3506.785350][ T9672] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 3507.285466][ T9588] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3507.294772][ T9588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3507.304377][ T9588] usb 3-1: Product: syz [ 3507.309589][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3507.318764][ T9588] usb 3-1: Manufacturer: syz [ 3507.323373][ T9588] usb 3-1: SerialNumber: syz [ 3507.330405][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3507.340082][ T9672] usb 5-1: Product: syz [ 3507.344274][ T9672] usb 5-1: Manufacturer: syz [ 3507.356498][ T9672] usb 5-1: SerialNumber: syz [ 3507.396370][ T9588] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3507.418026][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3508.005245][ T9672] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3508.017767][ T9675] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:22 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:22 executing program 3: getpid() clock_gettime(0x4bf8b627505b48fb, &(0x7f0000000040)) r0 = fork() getpgrp(r0) syz_open_procfs$namespace(r0, &(0x7f00000032c0)='ns/time\x00') capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)={0x7363, 0x4, 0x4, 0xfff, 0x5, 0x8e}) 08:37:22 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) accept4(r2, 0x0, &(0x7f0000000000), 0x800) 08:37:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:22 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:22 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000007800)) [ 3508.230098][T21800] usb 3-1: USB disconnect, device number 44 [ 3508.259794][T12454] usb 5-1: USB disconnect, device number 75 08:37:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:23 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3508.401099][T20974] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) 08:37:23 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:23 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:23 executing program 3: clock_gettime(0x5, &(0x7f0000000400)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@initdev, @in6=@dev}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000040)=0xfede) [ 3509.085085][ T9672] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3509.092219][ T9672] ath9k_htc: Failed to initialize the device [ 3509.098630][ T9675] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3509.109314][ T9675] ath9k_htc: Failed to initialize the device [ 3509.117119][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3509.124792][T12454] usb 5-1: ath9k_htc: USB layer deinitialized [ 3509.495092][T12454] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 3509.495130][T21800] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 3510.015259][T12454] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3510.024351][T12454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3510.034125][T12454] usb 5-1: Product: syz [ 3510.038779][T12454] usb 5-1: Manufacturer: syz [ 3510.043387][T12454] usb 5-1: SerialNumber: syz [ 3510.064457][T21800] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3510.075062][T21800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3510.084588][T21800] usb 3-1: Product: syz [ 3510.085968][T12454] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3510.093533][T21800] usb 3-1: Manufacturer: syz [ 3510.104011][T21800] usb 3-1: SerialNumber: syz [ 3510.165961][T21800] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3510.765168][T12454] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3510.785469][T21800] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:25 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:25 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:25 executing program 3: clock_gettime(0x5, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000080)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) 08:37:25 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) socket(0xa, 0x801, 0x5e2) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000100), 0x4) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x1401, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc8d0}, 0x20000800) socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x1d, 0xa, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, &(0x7f00000000c0)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000180)=0x5, 0x4) [ 3510.984662][T11861] usb 5-1: USB disconnect, device number 76 08:37:25 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000007800)) [ 3511.066708][T11033] usb 3-1: USB disconnect, device number 45 08:37:25 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:25 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x40012140, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) recvmsg$can_j1939(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000100)=""/68, 0x44}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000340)=""/93, 0x5d}], 0x6, &(0x7f00000003c0)=""/50, 0x32}, 0x0) 08:37:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:25 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080), &(0x7f0000000040)=0x4) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/119) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000000c0)=0x3, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x103400) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000200)=""/217) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000000)) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:25 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3511.805092][T12454] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3511.806078][ T3252] ieee802154 phy0 wpan0: encryption failed: -22 [ 3511.812758][T12454] ath9k_htc: Failed to initialize the device [ 3511.818359][T21800] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3511.818482][T21800] ath9k_htc: Failed to initialize the device [ 3511.818842][ T3252] ieee802154 phy1 wpan1: encryption failed: -22 [ 3511.834972][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3511.852436][T11861] usb 5-1: ath9k_htc: USB layer deinitialized [ 3512.205179][T11861] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 3512.215158][T11033] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 3512.725180][T11861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3512.734347][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3512.742923][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3512.752219][T11861] usb 5-1: Product: syz [ 3512.756986][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3512.765990][T11861] usb 5-1: Manufacturer: syz [ 3512.770604][T11861] usb 5-1: SerialNumber: syz [ 3512.775799][T11033] usb 3-1: Product: syz [ 3512.779985][T11033] usb 3-1: Manufacturer: syz [ 3512.784619][T11033] usb 3-1: SerialNumber: syz [ 3512.825929][T11861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3512.842119][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3513.425164][T11861] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3513.434722][T11033] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:28 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:28 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000040)=@ax25={{0x3, @default}, [@netrom, @remote, @default, @default, @null, @bcast, @default, @null]}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/211, 0xd3}, {&(0x7f00000001c0)=""/9, 0x9}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000340)=""/50, 0x32}, {&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000380)=""/119, 0x77}, {&(0x7f0000000540)=""/49, 0x31}], 0x8, &(0x7f0000000600)=""/214, 0xd6}, 0x5}, {{&(0x7f0000000700)=@alg, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/178, 0xb2}, {&(0x7f0000000840)=""/75, 0x4b}, {&(0x7f00000008c0)=""/84, 0x54}, {&(0x7f0000000940)=""/145, 0x91}, {&(0x7f0000000a00)=""/136, 0x88}], 0x5, &(0x7f0000000b40)=""/119, 0x77}, 0x9}], 0x2, 0x0, &(0x7f0000000c40)) 08:37:28 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x3e1302, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x8, 0x20001) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x4) 08:37:28 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x52777ce, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:28 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), 0x0) [ 3513.656147][T12454] usb 3-1: USB disconnect, device number 46 [ 3513.682463][ T3626] usb 5-1: USB disconnect, device number 77 08:37:28 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 08:37:28 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) r0 = fork() wait4(r0, 0x0, 0x1000000, &(0x7f0000000000)) 08:37:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:28 executing program 5: syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x800) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000009580)={0x0, @nl=@unspec, @xdp={0x2c, 0x4, 0x0, 0x19}, @can={0x1d, 0x0}, 0x240b, 0x0, 0x0, 0x0, 0x336, &(0x7f0000009540)='dummy0\x00', 0xfffffffffffff7a3, 0x2, 0x9}) bind$can_j1939(r1, &(0x7f0000009600)={0x1d, r2, 0x0, {0x2}, 0x1}, 0x18) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000e00)=0xe8) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000040)=0x5) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x5]) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r3, 0x2, {0x1, 0xff, 0x4}, 0xff}, 0x18) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000000c0)=0x1) 08:37:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:28 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) [ 3514.525115][T11861] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3514.532448][T11033] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3514.539823][T11033] ath9k_htc: Failed to initialize the device [ 3514.548539][T11861] ath9k_htc: Failed to initialize the device [ 3514.554825][T12454] usb 3-1: ath9k_htc: USB layer deinitialized [ 3514.565096][ T3626] usb 5-1: ath9k_htc: USB layer deinitialized [ 3514.935017][ T3626] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 3514.945458][T12454] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 3515.465198][ T3626] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3515.474592][T12454] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3515.483915][ T3626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3515.495202][T12454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3515.503523][ T3626] usb 5-1: Product: syz [ 3515.509313][T12454] usb 3-1: Product: syz [ 3515.513783][ T3626] usb 5-1: Manufacturer: syz [ 3515.520240][T12454] usb 3-1: Manufacturer: syz [ 3515.526057][ T3626] usb 5-1: SerialNumber: syz [ 3515.531817][T12454] usb 3-1: SerialNumber: syz [ 3515.586042][T12454] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3515.599522][ T3626] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3516.185141][ T3626] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3516.199099][T12454] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], 0x0, 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:31 executing program 3: clock_gettime(0x5, &(0x7f0000000000)) 08:37:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 08:37:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair(0x15, 0xa, 0x3c6, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f000000ae40)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/156, 0x9c}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/225, 0xe1}, {&(0x7f0000002400)=""/138, 0x8a}], 0x6}, 0x7bd6}, {{&(0x7f00000024c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002540)=""/129, 0x81}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x2, &(0x7f0000002640)=""/160, 0xa0}, 0x6}, {{&(0x7f0000002700)=@qipcrtr, 0x80, &(0x7f0000003a00)=[{&(0x7f0000002780)=""/158, 0x9e}, {&(0x7f0000003900)=""/206, 0xce}, {&(0x7f0000002840)=""/58, 0x3a}], 0x3, &(0x7f0000003a40)=""/175, 0xaf}, 0x2}, {{&(0x7f0000003b00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000003b80)=""/134, 0x86}, {&(0x7f0000003c40)=""/56, 0x38}, {&(0x7f0000003c80)=""/63, 0x3f}, {&(0x7f0000003cc0)=""/229, 0xe5}, {&(0x7f0000003dc0)=""/107, 0x6b}, {&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/172, 0xac}, {&(0x7f0000004f00)=""/195, 0xc3}, {&(0x7f0000005000)=""/133, 0x85}], 0x9, &(0x7f0000005180)=""/231, 0xe7}, 0x4}, {{&(0x7f0000005280)=@llc, 0x80, &(0x7f0000005680)=[{&(0x7f0000005300)=""/144, 0x90}, {&(0x7f00000053c0)=""/221, 0xdd}, {&(0x7f00000054c0)=""/199, 0xc7}, {&(0x7f00000055c0)=""/36, 0x24}, {&(0x7f0000005600)=""/100, 0x64}], 0x5}, 0x101}, {{&(0x7f0000005700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000008c80)=[{&(0x7f0000005780)=""/132, 0x84}, {&(0x7f0000005840)=""/4096, 0x1000}, {&(0x7f0000006840)=""/4096, 0x1000}, {&(0x7f0000007840)=""/244, 0xf4}, {&(0x7f0000007940)=""/247, 0xf7}, {&(0x7f0000007a40)=""/218, 0xda}, {&(0x7f0000007b40)=""/176, 0xb0}, {&(0x7f000000b040)=""/4109, 0x100d}, {&(0x7f0000008c00)=""/115, 0x73}], 0x9}, 0x8}, {{&(0x7f0000008d40)=@generic, 0x80, &(0x7f000000adc0)=[{&(0x7f0000008dc0)=""/4096, 0x1000}, {&(0x7f0000009dc0)=""/4096, 0x1000}], 0x2, &(0x7f000000ae00)}, 0xfffff33a}], 0x7, 0x30, &(0x7f000000b000)={0x77359400}) connect$netrom(r1, &(0x7f0000002880)={{0x3, @null, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) 08:37:31 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:31 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), 0x0) [ 3516.408349][T11033] usb 3-1: USB disconnect, device number 47 [ 3516.432219][ T9672] usb 5-1: USB disconnect, device number 78 08:37:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], 0x0, 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x3}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x3, {0x1, 0xff, 0x3}, {0x1, 0xff}, 0xfd, 0xfe}, {0x2, 0x0, {0x2, 0x1, 0x3}, {0x2, 0x0, 0x2}, 0x1, 0x2}], 0x40) 08:37:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x100000, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:31 executing program 3: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000000)) clock_gettime(0x2, &(0x7f0000000400)) recvmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000140)=""/101, 0x65}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/150, 0x96}, {&(0x7f0000000300)=""/8, 0x8}, {&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000500)=""/185, 0xb9}], 0x8, &(0x7f00000005c0)=""/18, 0x12}, 0x400}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000600)=""/65, 0x41}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/237, 0xed}, {&(0x7f0000001880)}, {&(0x7f00000018c0)=""/112, 0x70}, {&(0x7f0000001940)=""/67, 0x43}, {&(0x7f00000019c0)=""/218, 0xda}], 0x8, &(0x7f0000001b40)=""/191, 0xbf}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001c00)=""/153, 0x99}, {&(0x7f0000001cc0)=""/235, 0xeb}, {&(0x7f0000001dc0)=""/241, 0xf1}, {&(0x7f0000001ec0)=""/107, 0x6b}], 0x4}, 0x7}, {{&(0x7f0000001f80)=@caif=@dbg, 0x80, &(0x7f0000002200)=[{&(0x7f0000002000)=""/149, 0x95}, {&(0x7f00000020c0)=""/202, 0xca}, {&(0x7f00000021c0)=""/14, 0xe}], 0x3}, 0x80000001}, {{&(0x7f0000002240)=@can, 0x80, &(0x7f0000004380)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/121, 0x79}, {&(0x7f0000003340)=""/29, 0x1d}, {&(0x7f0000003380)=""/4096, 0x1000}], 0x4, &(0x7f00000043c0)=""/185, 0xb9}, 0x72}, {{&(0x7f0000004480)=@vsock, 0x80, &(0x7f00000058c0)=[{&(0x7f0000004500)=""/232, 0xe8}, {&(0x7f0000004600)=""/139, 0x8b}, {&(0x7f00000046c0)=""/181, 0xb5}, {&(0x7f0000004780)=""/26, 0x1a}, {&(0x7f00000047c0)=""/222, 0xde}, {&(0x7f00000048c0)=""/4096, 0x1000}], 0x6, &(0x7f0000005940)=""/91, 0x5b}, 0x8}, {{&(0x7f00000059c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005a40)=""/210, 0xd2}], 0x1, &(0x7f0000005b80)=""/84, 0x54}, 0x5}], 0x7, 0x40, 0x0) 08:37:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], 0x0, 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x3, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x8, 0x0, 0x4, 0x2, 0x6, {}, {0x4, 0x0, 0x6, 0x0, 0x58, 0x0, "5635a544"}, 0x4, 0x4, @userptr=0x2, 0xa93}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x2008}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f0000000180)) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x1, {0x0, 0xf0, 0x4}, {0x2, 0xff, 0x4}, 0xfd}], 0x20) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r2 = socket(0xb, 0x2, 0x4) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000100), 0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r3, &(0x7f0000000200)={r4, r2, 0x7f}) 08:37:31 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x44540, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000140)=""/145) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x80000) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x20) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000100)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) sendmsg$can_j1939(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)="1d66f97a2021a03b28b3afa24485567bd50ce4c45f05c7fc984eeb3d335810b5f8181eb969e2dff20ea4d882ab62572521b5dce371ab5067080e38dccf257a8512ea9addbbe3825f7d88445496764fd0f03b76e57d81cff17dc5a6982b0b6c467db11be64e62db47fec673d4c3980ea5afed33fafb6f757ea643e1522952f3906866e6ab343caea9a630c598b9720f1d6ed5967c37ae58b59ff0a8637bc177dc52b04be0da9318a69639b145cbdacd102833fb62aed67ffa2730f3f2b44374f2c578ba3caf188f9fc2ca065472f846f917ba42e9c9673241b1a4f3359adedbe3e17a30df1fc30f4530635306fb0152fa87c80244fed664dd879cdf5f70a866da3ad21b479a116d0f9476520075fc747af5ea60efa02c5e0f383f69dbc12a2e665a5c3f256041f931567af64a5e9ce1fb97658cbf8e52c66d89149295f3297c769364dc00dd38d5cda6b4bccf9dba6629935725ca92a9a0252a9067c87ba7bb661947ca4118c92a530d1eea19471497f1e93ea5f497556a628984c7d3b3317fa6def663f10fd4be09b1eab246d4d166646653d3d4a4abd8a363aa8186501d482aed755f3d614504f201bb421ee2fd0de255b8ba22793ff30cb97cf5f55cddb7bc5c9c6bfe5c1e6eda431845e57eabc8f163aea009b332a9d235e16851b43537c9f0cecbb70cb7b9f8d711f8b556f01ff8b272580008e061743c8112eb2f15c5ca8476f9f46709d6e10464a93afc11be23a163152ed3517d400eb511ae63a9bc441533c41a306acca6373104441afa92d368c40e2c2fbcdfb5dc4b1c738a43b3b0456658800938541bc1c75e88353f6b84e2c079e8628e1a0fded997ef7c833e838f8cd146ec33e4c8d8d932ab4dd1229173fe0b2a47e0c5c3a2f95b1d7157ca900a08f80fd777487806610673360b57a15bbadad59c5f3cc617e9c6816c4e56784e00318fb8270a562ca7ff18fc9fed3866635bdcbe313781b7a7546e294f448a94719e08855586f2d32c50b88d6b8367a98f96676dd19d141d246a6e38723b31584a59d44661db4f03fa7922c4c453a69f874a0365656d58e87f747377cdcd72a9fe5332942086f7aeeec7dec6fc25eefd7fd9a8cae704fe12f7575e7e7003839c5b9fc54762f13f0a150a83a7aaa2d4ff581c8e8162ab7d4b2a669f23f5dd734d99a32eef3f0210182f521775dd3e3b7847ab56566e15dcb7a026cf309b19a557fe0714fad09eaf8630da0cecf1fe346ef07c72724a431d0742b5f4d57b387dedb2246b6b40111c3d9843b9b9535261f596c786619de4d18d98f6fa9db281ea0638bbb70d722de37ad3b9643bd377eacf73cbc439584d34e7936f7bbfb806077f30a573a5e98444a0a2c09b82c1412ec83a66365eefb710779a0004e90c12615e0d80a53c2bdb4efed06b3e409ed7a1842c1efd7f1f053ffa8580ca400cee401cfec4ac486a576e142a9d577184af222a6321cd72882d4074a3e323bc7db9818a697d35c738c1481658ddd509466266313c6553f7f03427217267bfb9df7493a2ca0f29453a5b838f43e0bc8f42ee90e6a69aac0e50b43e912b1b812c3aa7c2b1723b12602d50194161db22e0efbfbb096c2ddb667710ac6597df3eb6a9351367330bacdd3ff17a4e0c87cfee684fa142fbdf54284af5ed675a0ccdfd6d0398c74e17d1beb6b9a698eb212c39083764aa7f201e4628810bbd12c336e77a560777a1b9b7f71e21250e1a3fbd4ce24979068b5aec536bac263efbbf32f24c514b36c0493dada668bd727e0e360f40ae6e1b38e21d0578f2f238c452d88c961625a2b5bcd7258a7531e6f99d7d692d4554a478db83dd7fec0f166999c7a6b60e4494c96ca622f97b006dc55c708f3fe5621120d1ea07644ddf6d81c616484578bab08b11abb5d34038229b952b830c86131aedce758eb293440203b7578a5cb4978e39d82fcc9548622c5809e17e5228a5418b1b06fa652c621198bf5993e3735b16a931743d57b71bc26f1a86e8597d356b83c18d0f89bd3ca5b4abaac5ccdb9c3ae52ace932a5b0e1db97281ab3ba87cdf73a56e3fd4927046bfba52c753ae8e63b2931aeee4d7073c971fb027e5afc4f7f3142c013b3b2868c30e15398560372c2af6c52c6487eabf81b5798545ad47e2fe47aada9278f5566878abe9912bb4a6d7f0f08f335c6cc6f1288dab0481e6996d79f52f72be5dc556745c367035c58549eb816c62c48cb1d7041b89e7e4d77efa00cb96d909f29b6ec9467da1a0436f91c60e16e3b24bafd8c006b41fe7fce6cf8990cbba123abda365d538724da212df9917dfe620a86fa05b28dc3a7fdffbaf074bb7fad6bd060f7cc55f37d3b30fbec1e23fbbad42baef6ec9a0f54aa4987cfc2964727fd98e292ed3655ced1f007bad07c86b0c4c8085713becb35dc243d591381f4869ec3a383b9fbc52fd5aee1b86069b90eed4d121e29a41870eb7fb908dfa92ff913c9f1bd5d5595df916f803a0f16cf3b58a35ef93fd7d8826a2320b7f1f0f2252ee45cc4fb2e788de7595f9cf0660933911e07894b2b321f6d634c7f53618113e197e8a271008010bf888532471145198cd770514c13e80e93c50df353eec198902877109f767da331b97c737ae71fe977b70aaa5d9862b0fbc7c52afcc8608d6eb1002b04c9dcb4589b2a3a6ae1b41ecf9345a21cf037dc7f11aed627797cbf53711086801deeb7e13a96755294432fb438262800b054599e4d3e0a9c8468c9b1ac48105b70e18b0fb30a927b1fca4aaa1752355b2e0eb70080ccef03bb95baf0f5037ddfb97a14aebfc1b045ece68ab9545431ab9f1e5f83fe50a22806bc7f2ff6c917b757db4e325602d04cb514a1a53abb9a1bd2fd692649ab990af7b292f5b3ee09a58ca592560875dda12496b316fa8b74efaee9005bee93a670fdaf3047fd09aca5c0561af5988c8e2e41aef197ab09e3a4ef6b7c603ec9c7f26ad4f7a0091851a4d469fb7166747a462a3730348843deb8f3d15221519df711241e9f3ede4e8558f6bb2e0b5936c423effe2749cdc398f5b511fb2def72c98d621da9eb14fa9b7573f38434c3a066eceda5b58a70e1624f1e9c3c2fc0ea932eb024e2597b24ca8fdaca58809769aeebfacf9d84bf38488bad6f61597caba3af26c0fdf6844daf88e242d8e82e7a6e5d021da041fafab60ba361781459b0367bb58a425b1a5c20979f0c59807fda6ec613c190aadefdb5a1b6ac7597ba15d56683dd123a87dda8d071a1cf692e047c0581a8776afe1b01b870c271b68361995f95bb2576ba8e3570a4deceaf4d96f40039fc8c7d6a1b2350ce41419aaea16c274e3ab2cb896857493acf0cebe068c8eeb1962d9aff0248298d66d41ea21e666b484f5624915d3f0d2171b8bb70fe8e5d2a67afbd465799b08b06188147d89a25b503dfcf3260449985d5c173a311b9eac28b9a715b7636af6d82975932b70445ae7635ee019170d8ccc1cde5ac44557a4ea9aca954157252f28bc62055c266675c782e4e84da4d126861b7fc73a71685534580813c365aafb0cec1fa96f491e7c9c1711162718ad3fa5b42b2aadf02cacee54e8a81426ce0ebe8aaa6ce7a76f33eed734ce2ff59269341bc28a25c90f530de87299cbd38c6ef38a240261d0837ab4ca97c7e7bfacb328571218843a77646206489daec29c49f0452bd0fefbf0accb92c834681d28b3c1c73a7ad8eee114bffdffd8723843a36a3e546978973c0a1549be188f8b7d4cf2fccec947fbf9b01fb5650b0163cede621dd974f276f7bfc5abfacb6f30d6a16a5fbb11dd5f6dbc4b69b8ac9260534050246004d7b0424bfca2ba399ad2b1b1958f3fdcdbd0d2e8ceebace31d04a64aa1ee31f7393558998edd87af7e96e690e10972f6719e6565583c1ec121ddff224538fa76f4d2488930d20a58bc7abde9344f385aafde17f8d8f4bf202c4b09960267b13ad3e0dc2ffa13eb9af4bd237bb447942106d6661b2cc6222853b8af695f49b28d445fbc7b62ed50b774c461b19c820d0ba946a1a454b9e947724779e2cbaa9dad1becf6d00887b7ee60b83b8c0f884c2877ea5d2cc6d540b70fc238937b1b43dcd72e571fe5e3a57db2003f5ec060d134b139ef56928bf99fc9ab1289740d6404e2ddf5546277200dee586e1bca4d11b3e4327a96888d819b7ea43cbab6830aa5279fd4506877214e3206f4ff301ee36690669c5caed551ab5d1d6a871ed67a60c2418457dd3134c1b60dd7be662da641e01e07fe1389b1ed28199f97f2691def8013fab5a3543045c56b755d7e5d732b92927f7043d7e7c1bc27709512a9e364caf439ff5c37d4d9373ad8d6b2e1c1757f2b84c6c9c5a92df21aec4c37174cf0476d4c2e9e11ae6fcc24de3685df11ecffadb5f0d36b00131d1ebf6d9dbb2c7d55c8c33dbc66cf115f1f861e96f7d44a9e4898e425f130cc142ec7fa17baf434cfe71d4c03faa46fada22c6dae3ea568a5e6826407577c71503f6e33e9e463320534b3a4202952e05e755f3be18726e93e5a41575aab15cfcf8ba25e60f51e0fafd4df452850c1e9b8a758fd82f0fde39409b3934d684f938676a95f3d85885bfecc70b2a56ceee136db6a5d84ec9fc25cbcf2a30c423c352585ec3adb3fa198b7d8decda90d55211dffba0af7ae7afa4eedd0451e5c01c2a619abc581de614adcd5dd7b12fd1182936dd805255285be349ddd07ea081bf1ddde8479c5e4d9fbaad8c413a4517427c3d9abce55a90dbd8facd3a46bbcd2d04dcc46246e7f5605be4737e5c2ddc3bd8eda08f3bdd615dc5b6cc19c317b86fb5d69b689864731a82b7b7793f8118b248938a97b42abdbfb0a36034a122622f8285c0b8bb660cbeac86262e551580ff035b2f10ab6f6f00d79a6d9075d0a70c527d7572be57e3441d5342a4adf129975880b18b1e7ad1e96fa0c00a51b6808d1acf13ad319c6ccd512eb299976f3e50293c6d469bf0fba3994ed23033d9e0bb78d4865de6be8f182a05111551b2d502a8e94a0b788edf286cb316e675a2ba9d4c55aba708d0254a29a233e39bc40ab33c89a18dce46545f1b178318b5163a86ea0fef5f7dca0b24800b9f4ba381fcad1ffb59deaa76b25b91ab2d6d89c563e9d4163709d3873988dd1896277f99b01983bc229c581e1aae8973eb87abdaa9f80e4ff6f1b9ca03adfd1946c1dd40554be36353f686a47bcb1d4af424158a13e7e3e7684e0928e9b23695765a15bc196ef1c0692906ac74ccb977d533550526c2c0ef4208ec5e27345d53ce3956e2c1bd0e5aef6ee22b9c8d3896d19503b0fdfaea34f052f6bdbe1ee7e175904a0bfd8b673d85ee811be2f72bc944f30f1f365364202fabe4e2341bf6e4892442c907f692ced83466591d12fdce1a96b0030fd1fb630f301ada6fca15aaa7697b81c15627b1d583d618be5e8ac4eb68ca10cd431aa72fa56616cc143be222ad7f84045df4a0a5c79e47b620f05f25d01fd7555f057ecef792a4903dd91f98080e5f2775c9cfb6d684cb36ee77ba2cf80d4fa5da8b1e788aba4e22c87be75baca77ce2d33eebd04956d225f6f7dae9c5626eff7329dbaae054d4343678998c3e692cdc90257e945d989a04c2ad03dfbd05e2e91e3bb632b0110c0cd0b12ce6216131410fb0617e8dd65dabfcfb296d81511f528783a9b377c365462f44f01001161c73468e64cca48da47d7ec2581626c2bc3b700127f641548dda8f7d51e79a18900e39ae9330cb0b43f30ba664750ef4e9d56a641841868c49ad2a764072c887e9aa5852acee2daaecc3df7", 0x1000}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 08:37:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) [ 3517.245171][ T3626] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3517.252361][T12454] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3517.260098][T12454] ath9k_htc: Failed to initialize the device [ 3517.268599][ T3626] ath9k_htc: Failed to initialize the device [ 3517.276280][T11033] usb 3-1: ath9k_htc: USB layer deinitialized [ 3517.282939][ T9672] usb 5-1: ath9k_htc: USB layer deinitialized [ 3517.655020][T11033] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 3517.665196][ T9672] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 3518.185325][ T9672] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3518.194523][ T9672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3518.203080][ T9672] usb 5-1: Product: syz [ 3518.208174][ T9672] usb 5-1: Manufacturer: syz [ 3518.212835][ T9672] usb 5-1: SerialNumber: syz [ 3518.225599][T11033] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3518.234669][T11033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3518.244837][T11033] usb 3-1: Product: syz [ 3518.250170][T11033] usb 3-1: Manufacturer: syz [ 3518.254788][T11033] usb 3-1: SerialNumber: syz [ 3518.256700][ T9672] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3518.296763][T11033] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3518.865142][ T9672] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3518.985233][T11033] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:33 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 3519.089362][ T3626] usb 5-1: USB disconnect, device number 79 08:37:33 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f74", 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x0, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000003400)) fanotify_init(0x2, 0x101000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000077c0), 0x0) 08:37:33 executing program 5: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000001340)=@full={0xb, @remote, @remote, 0x0, [@null, @rose, @netrom, @remote, @remote, @null]}, &(0x7f0000001380)=0xffffffffffffff7b, 0x0) connect$rose(r0, &(0x7f00000013c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000080)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvfrom$rose(r0, &(0x7f0000000000)=""/47, 0x2f, 0x40000020, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x669) setsockopt$rose(r2, 0x104, 0x1, &(0x7f0000000100)=0x70a9, 0x4) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f00000001c0)=0x30c6) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000180)=0x6) 08:37:33 executing program 3: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) 08:37:33 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0xc, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) [ 3519.202049][T21800] usb 3-1: USB disconnect, device number 48 08:37:33 executing program 3: clock_gettime(0x0, &(0x7f0000000400)) 08:37:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x2, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:33 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:33 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) 08:37:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3519.885032][ T9672] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3519.892131][ T9672] ath9k_htc: Failed to initialize the device [ 3519.900401][ T3626] usb 5-1: ath9k_htc: USB layer deinitialized [ 3520.045184][T11033] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3520.052263][T11033] ath9k_htc: Failed to initialize the device [ 3520.061152][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3520.295182][ T3626] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 3520.425125][T21800] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 3520.845292][ T3626] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3520.854539][ T3626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3520.865101][ T3626] usb 5-1: Product: syz [ 3520.869349][ T3626] usb 5-1: Manufacturer: syz [ 3520.874041][ T3626] usb 5-1: SerialNumber: syz [ 3520.926214][ T3626] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3520.995424][T21800] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3521.011028][T21800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3521.019986][T21800] usb 3-1: Product: syz [ 3521.024189][T21800] usb 3-1: Manufacturer: syz [ 3521.034505][T21800] usb 3-1: SerialNumber: syz [ 3521.098256][T21800] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3521.505123][ T3626] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:36 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x0, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 3521.722232][T12454] usb 5-1: USB disconnect, device number 80 [ 3521.765229][ T9672] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:36 executing program 5: r0 = epoll_create(0x490) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000180)=""/197) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000140)) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x2, {0x0, 0x1, 0x3}, {0x1, 0xf0}, 0x0, 0x1}, {0x1, 0x1, {0x2}, {0x1, 0xf0, 0x3}, 0x1, 0xff}, {0x0, 0x2, {0x0, 0x0, 0x2}, {0x1, 0x1, 0x1}, 0xfd, 0xff}, {0x7, 0x1, {0x3, 0x1, 0x3}, {0x0, 0xc169c44e26f63a45}, 0xff, 0xfd}], 0x80) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000100)=""/47) socketpair(0x4, 0x0, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @null, 0x5, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f00000000c0), 0x4) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000340)={0x1, @bcast, @bpq0, 0x4, 'syz1\x00', @default, 0xffffffe2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 08:37:36 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) recvmmsg(0xffffffffffffffff, &(0x7f0000004500)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1, &(0x7f0000000100)=""/53, 0x35}, 0x20}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000140)=""/232, 0xe8}, {&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x6, &(0x7f00000024c0)=""/125, 0x7d}, 0x3}, {{&(0x7f0000002540)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000025c0)=""/229, 0xe5}, {&(0x7f00000026c0)=""/227, 0xe3}, {&(0x7f00000027c0)=""/100, 0x64}, {&(0x7f0000002840)=""/72, 0x48}, {&(0x7f00000028c0)=""/179, 0xb3}, {&(0x7f0000002980)=""/250, 0xfa}, {&(0x7f0000002a80)=""/133, 0x85}, {&(0x7f0000002b40)=""/186, 0xba}], 0x8, &(0x7f0000002c80)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000003c80)=@nfc_llcp, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003d00)=""/178, 0xb2}, {&(0x7f0000003dc0)=""/115, 0x73}, {&(0x7f0000003e40)=""/45, 0x2d}, {&(0x7f0000003e80)=""/117, 0x75}, {&(0x7f0000003f00)=""/67, 0x43}], 0x5, &(0x7f0000004000)=""/45, 0x2d}, 0x4}, {{&(0x7f0000004040)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000004400)=[{&(0x7f00000040c0)=""/40, 0x28}, {&(0x7f0000004100)=""/244, 0xf4}, {&(0x7f0000004200)=""/242, 0xf2}, {&(0x7f0000004300)=""/194, 0xc2}], 0x4, &(0x7f0000004440)=""/132, 0x84}, 0x6}], 0x5, 0x40002000, &(0x7f0000004640)={0x0, 0x3938700}) 08:37:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3521.985275][T21800] usb 3-1: USB disconnect, device number 49 08:37:36 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000), 0x0) 08:37:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:36 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) recvmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/49, 0x31}, 0x6}, {{&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000280)=""/218, 0xda}], 0x3, &(0x7f0000000440)=""/237, 0xed}, 0x28d75c0}, {{&(0x7f0000000540)=@hci, 0x80, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/156, 0x9c}, {&(0x7f0000000680)=""/80, 0x50}], 0x2, &(0x7f0000000700)=""/82, 0x52}, 0xfff}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000940)=[{&(0x7f0000000800)=""/36, 0x24}, {&(0x7f0000000840)=""/253, 0xfd}], 0x2, &(0x7f0000000980)}}, {{&(0x7f00000009c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/170, 0xaa}, {&(0x7f0000000b00)=""/14, 0xe}, {&(0x7f0000000b40)=""/104, 0x68}], 0x3, &(0x7f0000000c00)=""/51, 0x33}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/238, 0xee}], 0x1, &(0x7f0000000d80)=""/167, 0xa7}, 0x2}], 0x6, 0x2000, &(0x7f0000000fc0)={0x77359400}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0xfff, 0x0, 0x84800, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000980)={0x4000001b}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x18, 0x140e, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) 08:37:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3522.525238][ T3626] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3522.532266][ T3626] ath9k_htc: Failed to initialize the device [ 3522.541558][T12454] usb 5-1: ath9k_htc: USB layer deinitialized [ 3522.845130][ T9672] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 3522.852774][ T9672] ath9k_htc: Failed to initialize the device [ 3522.860667][T21800] usb 3-1: ath9k_htc: USB layer deinitialized [ 3522.905177][T12454] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 3523.445405][T12454] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3523.454465][T12454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3523.464618][T12454] usb 5-1: Product: syz [ 3523.469558][T12454] usb 5-1: Manufacturer: syz [ 3523.474154][T12454] usb 5-1: SerialNumber: syz [ 3523.516020][T12454] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3524.085141][T12454] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:38 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:38 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000010c0)={r1, &(0x7f00000000c0)=""/4096}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, &(0x7f0000000040)) 08:37:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:38 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f15e3d91"}, 0xf8f2, 0x3, @fd, 0x4}) 08:37:38 executing program 3: clock_gettime(0x7, &(0x7f0000000400)) 08:37:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 3524.307978][T27697] usb 5-1: USB disconnect, device number 81 08:37:38 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:38 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x0) 08:37:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 08:37:39 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f15e3d91"}, 0x0, 0x3, @fd, 0x4}) [ 3524.569294][T21469] [ 3524.571664][T21469] ====================================================== [ 3524.578772][T21469] WARNING: possible circular locking dependency detected [ 3524.585969][T21469] 5.13.0-syzkaller #0 Not tainted [ 3524.591258][T21469] ------------------------------------------------------ [ 3524.598254][T21469] syz-executor.3/21469 is trying to acquire lock: [ 3524.604731][T21469] ffffffff8cfd6720 (fs_reclaim){+.+.}-{0:0}, at: __fs_reclaim_acquire+0x0/0x30 [ 3524.613696][T21469] [ 3524.613696][T21469] but task is already holding lock: [ 3524.621147][T21469] ffff8880b9b31088 (lock#2){-.-.}-{2:2}, at: local_lock_acquire+0x7/0x130 [ 3524.629676][T21469] [ 3524.629676][T21469] which lock already depends on the new lock. [ 3524.629676][T21469] [ 3524.640142][T21469] [ 3524.640142][T21469] the existing dependency chain (in reverse order) is: [ 3524.649222][T21469] [ 3524.649222][T21469] -> #1 (lock#2){-.-.}-{2:2}: [ 3524.656069][T21469] lock_acquire+0x182/0x4a0 [ 3524.661104][T21469] local_lock_acquire+0x23/0x130 [ 3524.666637][T21469] rmqueue_pcplist+0x10c/0x4d0 [ 3524.671949][T21469] rmqueue+0x1eb4/0x22e0 [ 3524.676725][T21469] get_page_from_freelist+0x4b3/0xa30 [ 3524.683051][T21469] __alloc_pages+0x26c/0x5f0 [ 3524.688247][T21469] stack_depot_save+0x361/0x490 [ 3524.693618][T21469] kasan_save_stack+0x3e/0x50 [ 3524.698797][T21469] kasan_record_aux_stack+0xee/0x120 [ 3524.704586][T21469] call_rcu+0x1a0/0xa20 [ 3524.709329][T21469] __schedule+0xc0f/0x11f0 [ 3524.714246][T21469] preempt_schedule_notrace+0x12c/0x170 [ 3524.720295][T21469] preempt_schedule_notrace_thunk+0x16/0x18 [ 3524.726717][T21469] trace_lock_release+0x9f/0x140 [ 3524.732162][T21469] lock_release+0x81/0x7b0 [ 3524.737101][T21469] kmem_cache_alloc+0x41/0x340 [ 3524.742388][T21469] __alloc_file+0x26/0x2f0 [ 3524.747316][T21469] alloc_empty_file+0xa9/0x1b0 [ 3524.752695][T21469] path_openat+0x119/0x39b0 [ 3524.757849][T21469] do_filp_open+0x221/0x460 [ 3524.762853][T21469] do_open_execat+0x16d/0x710 [ 3524.768028][T21469] bprm_execve+0x505/0x1470 [ 3524.773030][T21469] kernel_execve+0x8ce/0x9a0 [ 3524.778213][T21469] call_usermodehelper_exec_async+0x262/0x3b0 [ 3524.784852][T21469] ret_from_fork+0x1f/0x30 [ 3524.789777][T21469] [ 3524.789777][T21469] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 3524.796991][T21469] check_prevs_add+0x4f9/0x5b30 [ 3524.802368][T21469] __lock_acquire+0x4476/0x6100 [ 3524.807828][T21469] lock_acquire+0x182/0x4a0 [ 3524.812844][T21469] __fs_reclaim_acquire+0x20/0x30 [ 3524.818376][T21469] fs_reclaim_acquire+0x59/0xf0 [ 3524.824948][T21469] prepare_alloc_pages+0x151/0x5a0 [ 3524.830658][T21469] __alloc_pages+0x14d/0x5f0 [ 3524.835746][T21469] stack_depot_save+0x361/0x490 [ 3524.841099][T21469] save_stack+0xf9/0x1f0 [ 3524.845901][T21469] __set_page_owner+0x42/0x2f0 [ 3524.851164][T21469] __alloc_pages_bulk+0x9f2/0x1090 [ 3524.856775][T21469] __vmalloc_node_range+0x3ad/0x7f0 [ 3524.862477][T21469] vzalloc+0x75/0x80 [ 3524.866870][T21469] n_tty_open+0x19/0x150 [ 3524.871655][T21469] tty_ldisc_setup+0xcf/0x3c0 [ 3524.876862][T21469] tty_init_dev+0x271/0x4c0 [ 3524.881908][T21469] tty_open+0x89a/0xdd0 [ 3524.886582][T21469] chrdev_open+0x53b/0x5f0 [ 3524.891521][T21469] do_dentry_open+0x7cb/0x1010 [ 3524.896788][T21469] path_openat+0x28e6/0x39b0 [ 3524.901876][T21469] do_filp_open+0x221/0x460 [ 3524.906889][T21469] do_sys_openat2+0x124/0x460 [ 3524.912079][T21469] __x64_sys_openat+0x243/0x290 [ 3524.917444][T21469] do_syscall_64+0x3d/0xb0 [ 3524.922382][T21469] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3524.928871][T21469] [ 3524.928871][T21469] other info that might help us debug this: [ 3524.928871][T21469] [ 3524.939166][T21469] Possible unsafe locking scenario: [ 3524.939166][T21469] [ 3524.946593][T21469] CPU0 CPU1 [ 3524.951946][T21469] ---- ---- [ 3524.957372][T21469] lock(lock#2); [ 3524.960990][T21469] lock(fs_reclaim); [ 3524.967553][T21469] lock(lock#2); [ 3524.973696][T21469] lock(fs_reclaim); [ 3524.977655][T21469] [ 3524.977655][T21469] *** DEADLOCK *** [ 3524.977655][T21469] [ 3524.985776][T21469] 4 locks held by syz-executor.3/21469: [ 3524.991305][T21469] #0: ffffffff8d5ca708 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x235/0xdd0 [ 3525.001826][T21469] #1: ffff8880257541c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_init_dev+0x6a/0x4c0 [ 3525.011399][T21469] #2: ffff888025754098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x6a/0xb0 [ 3525.020770][T21469] #3: ffff8880b9b31088 (lock#2){-.-.}-{2:2}, at: local_lock_acquire+0x7/0x130 [ 3525.029985][T21469] [ 3525.029985][T21469] stack backtrace: [ 3525.036107][T21469] CPU: 1 PID: 21469 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3525.044498][T21469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3525.054530][T21469] Call Trace: [ 3525.057807][T21469] dump_stack_lvl+0x1ae/0x29f [ 3525.062504][T21469] ? show_regs_print_info+0x12/0x12 [ 3525.067682][T21469] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3525.073381][T21469] ? save_trace+0x5a/0x9f0 [ 3525.077775][T21469] print_circular_bug+0xb17/0xdc0 [ 3525.082779][T21469] ? hlock_conflict+0x1f0/0x1f0 [ 3525.087616][T21469] ? __bfs+0x369/0x700 [ 3525.091686][T21469] ? check_path+0x40/0x40 [ 3525.096014][T21469] ? noop_count+0x30/0x30 [ 3525.100323][T21469] ? save_trace+0x5a/0x9f0 [ 3525.104716][T21469] check_noncircular+0x2cc/0x390 [ 3525.109631][T21469] ? add_chain_block+0x850/0x850 [ 3525.114550][T21469] check_prevs_add+0x4f9/0x5b30 [ 3525.119470][T21469] ? reacquire_held_locks+0x5f0/0x5f0 [ 3525.124917][T21469] ? mark_lock+0x199/0x1eb0 [ 3525.129408][T21469] ? mark_lock+0x199/0x1eb0 [ 3525.133979][T21469] ? mark_lock+0x199/0x1eb0 [ 3525.138466][T21469] ? mark_lock+0x199/0x1eb0 [ 3525.142947][T21469] ? __bfs+0x700/0x700 [ 3525.146992][T21469] ? __bfs+0x700/0x700 [ 3525.151213][T21469] ? __bfs+0x700/0x700 [ 3525.155271][T21469] ? mark_lock+0x199/0x1eb0 [ 3525.159775][T21469] ? mark_lock+0x199/0x1eb0 [ 3525.164269][T21469] ? __bfs+0x700/0x700 [ 3525.168329][T21469] ? lockdep_lock+0x102/0x2c0 [ 3525.173008][T21469] ? lockdep_count_forward_deps+0x240/0x240 [ 3525.178898][T21469] ? __lock_acquire+0x1385/0x6100 [ 3525.184020][T21469] ? __bfs+0x700/0x700 [ 3525.188175][T21469] __lock_acquire+0x4476/0x6100 [ 3525.193027][T21469] ? __lock_acquire+0x1385/0x6100 [ 3525.198049][T21469] ? trace_lock_acquire+0x180/0x180 [ 3525.203233][T21469] ? trace_lock_acquire+0x180/0x180 [ 3525.208428][T21469] ? __bfs+0x700/0x700 [ 3525.212570][T21469] ? trace_lock_acquire+0x180/0x180 [ 3525.217755][T21469] ? rcu_read_lock_sched_held+0x87/0x110 [ 3525.223366][T21469] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 3525.229328][T21469] lock_acquire+0x182/0x4a0 [ 3525.233812][T21469] ? warn_alloc+0x340/0x340 [ 3525.238317][T21469] ? read_lock_is_recursive+0x10/0x10 [ 3525.243672][T21469] ? rcu_lock_release+0x5/0x20 [ 3525.248507][T21469] ? __lock_acquire+0x6100/0x6100 [ 3525.253616][T21469] __fs_reclaim_acquire+0x20/0x30 [ 3525.258730][T21469] ? warn_alloc+0x340/0x340 [ 3525.263227][T21469] fs_reclaim_acquire+0x59/0xf0 [ 3525.268080][T21469] prepare_alloc_pages+0x151/0x5a0 [ 3525.273191][T21469] __alloc_pages+0x14d/0x5f0 [ 3525.277765][T21469] ? __rmqueue_pcplist+0x2030/0x2030 [ 3525.283034][T21469] ? arch_stack_walk+0x98/0xe0 [ 3525.287853][T21469] ? stack_trace_save+0x104/0x1e0 [ 3525.292862][T21469] ? alloc_pages+0x2e5/0x520 [ 3525.297430][T21469] stack_depot_save+0x361/0x490 [ 3525.302260][T21469] save_stack+0xf9/0x1f0 [ 3525.306489][T21469] ? __reset_page_owner+0x1a0/0x1a0 [ 3525.311674][T21469] ? __alloc_pages_bulk+0x9f2/0x1090 [ 3525.317035][T21469] ? __vmalloc_node_range+0x3ad/0x7f0 [ 3525.322403][T21469] ? vzalloc+0x75/0x80 [ 3525.326448][T21469] ? n_tty_open+0x19/0x150 [ 3525.330843][T21469] ? tty_ldisc_setup+0xcf/0x3c0 [ 3525.335681][T21469] ? tty_init_dev+0x271/0x4c0 [ 3525.340422][T21469] ? tty_open+0x89a/0xdd0 [ 3525.344816][T21469] ? chrdev_open+0x53b/0x5f0 [ 3525.349425][T21469] ? do_dentry_open+0x7cb/0x1010 [ 3525.354342][T21469] ? path_openat+0x28e6/0x39b0 [ 3525.359094][T21469] ? do_filp_open+0x221/0x460 [ 3525.363927][T21469] ? do_sys_openat2+0x124/0x460 [ 3525.368770][T21469] ? __x64_sys_openat+0x243/0x290 [ 3525.373776][T21469] ? do_syscall_64+0x3d/0xb0 [ 3525.378347][T21469] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3525.384397][T21469] ? preempt_count_add+0x66/0x130 [ 3525.389464][T21469] __set_page_owner+0x42/0x2f0 [ 3525.394210][T21469] ? post_alloc_hook+0x102/0x220 [ 3525.399129][T21469] __alloc_pages_bulk+0x9f2/0x1090 [ 3525.404222][T21469] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 3525.409747][T21469] ? rcu_read_lock_sched_held+0x87/0x110 [ 3525.415454][T21469] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 3525.421411][T21469] ? n_tty_open+0x19/0x150 [ 3525.425906][T21469] ? __vmalloc_node_range+0x2c5/0x7f0 [ 3525.431590][T21469] ? __kmalloc_node+0x29b/0x430 [ 3525.436422][T21469] ? __get_vm_area_node+0x2bd/0x2f0 [ 3525.441613][T21469] __vmalloc_node_range+0x3ad/0x7f0 [ 3525.446791][T21469] ? __wake_up+0x153/0x210 [ 3525.451245][T21469] ? n_tty_open+0x19/0x150 [ 3525.455656][T21469] vzalloc+0x75/0x80 [ 3525.459617][T21469] ? n_tty_open+0x19/0x150 [ 3525.464039][T21469] n_tty_open+0x19/0x150 [ 3525.468259][T21469] tty_ldisc_setup+0xcf/0x3c0 [ 3525.472919][T21469] tty_init_dev+0x271/0x4c0 [ 3525.477407][T21469] tty_open+0x89a/0xdd0 [ 3525.481543][T21469] ? chrdev_open+0x1dd/0x5f0 [ 3525.486116][T21469] ? tty_compat_ioctl+0xc80/0xc80 [ 3525.491129][T21469] ? do_raw_spin_unlock+0x134/0x8a0 [ 3525.496308][T21469] ? __fsnotify_parent+0x483/0x670 [ 3525.501444][T21469] chrdev_open+0x53b/0x5f0 [ 3525.505845][T21469] ? cd_forget+0x160/0x160 [ 3525.510414][T21469] ? hook_file_open+0xf2/0x230 [ 3525.515313][T21469] ? tomoyo_file_open+0xe6/0x170 [ 3525.520231][T21469] ? fsnotify_perm+0x2fd/0x4d0 [ 3525.524974][T21469] ? cd_forget+0x160/0x160 [ 3525.529383][T21469] do_dentry_open+0x7cb/0x1010 [ 3525.534131][T21469] path_openat+0x28e6/0x39b0 [ 3525.538704][T21469] ? stack_trace_snprint+0xe0/0xe0 [ 3525.543798][T21469] ? do_filp_open+0x460/0x460 [ 3525.548451][T21469] ? alloc_fd+0x5eb/0x690 [ 3525.552795][T21469] ? rcu_read_lock_sched_held+0x87/0x110 [ 3525.558407][T21469] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 3525.564366][T21469] do_filp_open+0x221/0x460 [ 3525.568851][T21469] ? vfs_tmpfile+0x230/0x230 [ 3525.573416][T21469] ? alloc_fd+0x5eb/0x690 [ 3525.577724][T21469] ? do_raw_spin_unlock+0x134/0x8a0 [ 3525.582910][T21469] ? _raw_spin_unlock+0x24/0x40 [ 3525.587753][T21469] ? alloc_fd+0x5eb/0x690 [ 3525.592079][T21469] do_sys_openat2+0x124/0x460 [ 3525.596746][T21469] ? __context_tracking_exit+0x7a/0xd0 [ 3525.602364][T21469] ? do_sys_open+0x220/0x220 [ 3525.607079][T21469] __x64_sys_openat+0x243/0x290 [ 3525.611927][T21469] ? __ia32_sys_open+0x270/0x270 [ 3525.616847][T21469] ? vtime_user_enter+0x1ea/0x2d0 [ 3525.621855][T21469] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3525.627816][T21469] ? lockdep_hardirqs_on+0x8d/0x130 [ 3525.632996][T21469] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3525.638954][T21469] do_syscall_64+0x3d/0xb0 [ 3525.643351][T21469] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3525.649233][T21469] RIP: 0033:0x4196c4 [ 3525.653107][T21469] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3525.672981][T21469] RSP: 002b:00007f7b60ac8cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3525.681401][T21469] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004196c4 [ 3525.689353][T21469] RDX: 0000000000000002 RSI: 00007f7b60ac8d60 RDI: 00000000ffffff9c [ 3525.697391][T21469] RBP: 00007f7b60ac8d60 R08: 0000000000000000 R09: 000000000000000e [ 3525.705619][T21469] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 3525.713583][T21469] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 [ 3525.721543][T21469] BUG: sleeping function called from invalid context at mm/page_alloc.c:5179 [ 3525.730628][T21469] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 21469, name: syz-executor.3 [ 3525.740067][T21469] INFO: lockdep is turned off. [ 3525.744889][T21469] irq event stamp: 200 [ 3525.748931][T21469] hardirqs last enabled at (199): [] _raw_spin_unlock_irqrestore+0x8b/0x120 [ 3525.759334][T21469] hardirqs last disabled at (200): [] __alloc_pages_bulk+0x801/0x1090 [ 3525.769127][T21469] softirqs last enabled at (0): [] copy_process+0x1498/0x5b30 [ 3525.778295][T21469] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 3525.785481][T21469] CPU: 1 PID: 21469 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 3525.793872][T21469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3525.803915][T21469] Call Trace: [ 3525.807182][T21469] dump_stack_lvl+0x1ae/0x29f [ 3525.811842][T21469] ? copy_process+0x1498/0x5b30 [ 3525.816669][T21469] ? show_regs_print_info+0x12/0x12 [ 3525.821850][T21469] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3525.827583][T21469] ? __fs_reclaim_acquire+0x30/0x30 [ 3525.832793][T21469] ___might_sleep+0x4e5/0x6b0 [ 3525.837461][T21469] ? is_module_text_address+0x16/0x130 [ 3525.842978][T21469] ? __might_sleep+0x100/0x100 [ 3525.847890][T21469] ? rcu_lock_release+0x5/0x20 [ 3525.852654][T21469] ? __lock_acquire+0x6100/0x6100 [ 3525.857683][T21469] prepare_alloc_pages+0x1c0/0x5a0 [ 3525.862789][T21469] __alloc_pages+0x14d/0x5f0 [ 3525.867368][T21469] ? __rmqueue_pcplist+0x2030/0x2030 [ 3525.872639][T21469] ? arch_stack_walk+0x98/0xe0 [ 3525.877401][T21469] ? stack_trace_save+0x104/0x1e0 [ 3525.882420][T21469] ? alloc_pages+0x2e5/0x520 [ 3525.887006][T21469] stack_depot_save+0x361/0x490 [ 3525.891868][T21469] save_stack+0xf9/0x1f0 [ 3525.896099][T21469] ? __reset_page_owner+0x1a0/0x1a0 [ 3525.901282][T21469] ? __alloc_pages_bulk+0x9f2/0x1090 [ 3525.906564][T21469] ? __vmalloc_node_range+0x3ad/0x7f0 [ 3525.911918][T21469] ? vzalloc+0x75/0x80 [ 3525.916311][T21469] ? n_tty_open+0x19/0x150 [ 3525.920706][T21469] ? tty_ldisc_setup+0xcf/0x3c0 [ 3525.925538][T21469] ? tty_init_dev+0x271/0x4c0 [ 3525.930197][T21469] ? tty_open+0x89a/0xdd0 [ 3525.934504][T21469] ? chrdev_open+0x53b/0x5f0 [ 3525.939076][T21469] ? do_dentry_open+0x7cb/0x1010 [ 3525.943994][T21469] ? path_openat+0x28e6/0x39b0 [ 3525.948747][T21469] ? do_filp_open+0x221/0x460 [ 3525.953517][T21469] ? do_sys_openat2+0x124/0x460 [ 3525.958349][T21469] ? __x64_sys_openat+0x243/0x290 [ 3525.963353][T21469] ? do_syscall_64+0x3d/0xb0 [ 3525.967924][T21469] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3525.973992][T21469] ? preempt_count_add+0x66/0x130 [ 3525.979484][T21469] __set_page_owner+0x42/0x2f0 [ 3525.984236][T21469] ? post_alloc_hook+0x102/0x220 [ 3525.989165][T21469] __alloc_pages_bulk+0x9f2/0x1090 [ 3525.994353][T21469] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 3525.999885][T21469] ? rcu_read_lock_sched_held+0x87/0x110 [ 3526.005582][T21469] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 3526.011713][T21469] ? n_tty_open+0x19/0x150 [ 3526.016111][T21469] ? __vmalloc_node_range+0x2c5/0x7f0 [ 3526.021470][T21469] ? __kmalloc_node+0x29b/0x430 [ 3526.026318][T21469] ? __get_vm_area_node+0x2bd/0x2f0 [ 3526.031518][T21469] __vmalloc_node_range+0x3ad/0x7f0 [ 3526.036732][T21469] ? __wake_up+0x153/0x210 [ 3526.041133][T21469] ? n_tty_open+0x19/0x150 [ 3526.045540][T21469] vzalloc+0x75/0x80 [ 3526.049431][T21469] ? n_tty_open+0x19/0x150 [ 3526.053912][T21469] n_tty_open+0x19/0x150 [ 3526.058145][T21469] tty_ldisc_setup+0xcf/0x3c0 [ 3526.062802][T21469] tty_init_dev+0x271/0x4c0 [ 3526.067374][T21469] tty_open+0x89a/0xdd0 [ 3526.071595][T21469] ? chrdev_open+0x1dd/0x5f0 [ 3526.076169][T21469] ? tty_compat_ioctl+0xc80/0xc80 [ 3526.081192][T21469] ? do_raw_spin_unlock+0x134/0x8a0 [ 3526.086373][T21469] ? __fsnotify_parent+0x483/0x670 [ 3526.091467][T21469] chrdev_open+0x53b/0x5f0 [ 3526.095868][T21469] ? cd_forget+0x160/0x160 [ 3526.100267][T21469] ? hook_file_open+0xf2/0x230 [ 3526.105012][T21469] ? tomoyo_file_open+0xe6/0x170 [ 3526.110104][T21469] ? fsnotify_perm+0x2fd/0x4d0 [ 3526.114849][T21469] ? cd_forget+0x160/0x160 [ 3526.119267][T21469] do_dentry_open+0x7cb/0x1010 [ 3526.124015][T21469] path_openat+0x28e6/0x39b0 [ 3526.128610][T21469] ? stack_trace_snprint+0xe0/0xe0 [ 3526.133704][T21469] ? do_filp_open+0x460/0x460 [ 3526.138365][T21469] ? alloc_fd+0x5eb/0x690 [ 3526.142793][T21469] ? rcu_read_lock_sched_held+0x87/0x110 [ 3526.148513][T21469] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 3526.154505][T21469] do_filp_open+0x221/0x460 [ 3526.158996][T21469] ? vfs_tmpfile+0x230/0x230 [ 3526.163657][T21469] ? alloc_fd+0x5eb/0x690 [ 3526.167985][T21469] ? do_raw_spin_unlock+0x134/0x8a0 [ 3526.173173][T21469] ? _raw_spin_unlock+0x24/0x40 [ 3526.178007][T21469] ? alloc_fd+0x5eb/0x690 [ 3526.182402][T21469] do_sys_openat2+0x124/0x460 [ 3526.187064][T21469] ? __context_tracking_exit+0x7a/0xd0 [ 3526.192506][T21469] ? do_sys_open+0x220/0x220 [ 3526.197079][T21469] __x64_sys_openat+0x243/0x290 [ 3526.201914][T21469] ? __ia32_sys_open+0x270/0x270 [ 3526.206841][T21469] ? vtime_user_enter+0x1ea/0x2d0 [ 3526.211846][T21469] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3526.217808][T21469] ? lockdep_hardirqs_on+0x8d/0x130 [ 3526.222994][T21469] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3526.228954][T21469] do_syscall_64+0x3d/0xb0 [ 3526.233438][T21469] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3526.239311][T21469] RIP: 0033:0x4196c4 [ 3526.243203][T21469] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3526.262788][T21469] RSP: 002b:00007f7b60ac8cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3526.271391][T21469] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004196c4 [ 3526.279620][T21469] RDX: 0000000000000002 RSI: 00007f7b60ac8d60 RDI: 00000000ffffff9c [ 3526.288112][T21469] RBP: 00007f7b60ac8d60 R08: 0000000000000000 R09: 000000000000000e [ 3526.296068][T21469] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 3526.304025][T21469] R13: 00007ffc7de709ef R14: 00007f7b60ac9300 R15: 0000000000022000 [ 3526.318902][T12454] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive 08:37:40 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f15e3d91"}, 0x0, 0x0, @fd, 0x4}) [ 3526.384692][T12454] ath9k_htc: Failed to initialize the device [ 3526.455799][T27697] usb 5-1: ath9k_htc: USB layer deinitialized [ 3526.815040][T27697] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 3527.335346][T27697] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3527.344575][T27697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3527.353735][T27697] usb 5-1: Product: syz [ 3527.358609][T27697] usb 5-1: Manufacturer: syz [ 3527.363203][T27697] usb 5-1: SerialNumber: syz 08:37:42 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:42 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:42 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000180)=""/113) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000000)=0x20, 0x4) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) socket$can_j1939(0x1d, 0x2, 0x7) 08:37:42 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f15e3d91"}, 0x0, 0x0, @fd}) 08:37:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 08:37:42 executing program 3: ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000100)=""/110) clock_gettime(0x2, &(0x7f0000000400)) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000000)=""/156) fork() syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/mnt\x00') [ 3527.405624][T27697] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3527.433522][T12454] usb 5-1: USB disconnect, device number 82 [ 3527.440150][T27697] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 3527.450926][T12454] usb 5-1: ath9k_htc: USB layer deinitialized 08:37:42 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x0, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:42 executing program 3: clock_gettime(0x4, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000080)=""/91, 0x5b}, {&(0x7f0000000100)=""/177, 0xb1}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/217, 0xd9}, {}, {&(0x7f00000012c0)=""/15, 0xf}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x7, &(0x7f0000002380)=""/63, 0x3f}, 0x81}, {{&(0x7f00000023c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002440)=""/185, 0xb9}, {&(0x7f0000002500)=""/228, 0xe4}, {&(0x7f0000002600)=""/216, 0xd8}, {&(0x7f0000002700)=""/36, 0x24}, {&(0x7f0000002740)=""/43, 0x2b}], 0x5}, 0x5}, {{&(0x7f0000002800)=@ethernet={0x0, @local}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002880)=""/2, 0x2}, {&(0x7f00000028c0)=""/234, 0xea}, {&(0x7f00000029c0)=""/164, 0xa4}, {&(0x7f0000002a80)=""/160, 0xa0}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/139, 0x8b}, {&(0x7f0000003c00)=""/189, 0xbd}], 0x7, &(0x7f0000003d40)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000004d40)=@xdp, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004dc0)=""/156, 0x9c}, {&(0x7f0000004e80)=""/123, 0x7b}], 0x2, &(0x7f0000004f40)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000005f40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000006140)=[{&(0x7f0000005fc0)=""/28, 0x1c}, {&(0x7f0000006000)=""/117, 0x75}, {&(0x7f0000006080)=""/175, 0xaf}], 0x3, &(0x7f0000006180)}, 0x5}], 0x5, 0x1, &(0x7f0000006300)) 08:37:42 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f15e3d91"}, 0x0, 0x0, @fd}) 08:37:42 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000040)) 08:37:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x0, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3527.855018][T12454] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 3528.435119][T12454] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3528.444370][T12454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3528.452975][T12454] usb 5-1: Product: syz [ 3528.457807][T12454] usb 5-1: Manufacturer: syz [ 3528.462413][T12454] usb 5-1: SerialNumber: syz [ 3528.506930][T12454] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3529.105050][T12454] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:43 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x0, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:43 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0xfffffff8, 0x2, 0x4, 0x100, 0x400, {0x77359400}, {0x2, 0x1, 0x3, 0xa5, 0x1, 0x1f, "dfe5e7f8"}, 0x7, 0x4, @planes=&(0x7f0000000000)={0x7, 0x3, @mem_offset=0xfffffff8}, 0x6}) clock_gettime(0x2, &(0x7f0000000400)) 08:37:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f15e3d91"}, 0x0, 0x0, @fd}) 08:37:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x0, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:43 executing program 5: syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80000000, 0x3, &(0x7f0000000280)=[{&(0x7f0000000080)="612c5b97da1b8db5614423001b430279f4661e17ed7a", 0x16, 0x7}, {&(0x7f00000000c0)="93461117faf0a005bf3cda09b279accf0cc20b2fab3d1b46a56ebd34672c5ba928469bd26c0e27c92787612500cbf28c7858f92a4645f40835b53059cda445b11d53257f46ab23006177db1e4b4f65589dda2c0c5b09b3ebabf30bfe", 0x5c}, {&(0x7f0000000180)="fe92d1036d94ca4b35ceaf8546e0a7b513e1f3b12652034a40f193917953af5c155ce39d5a2acb1607d5a0b91eaf5ec7cb4e27e6ff59d5a90fd26a55cecac6d3220199bc525678b2a3ca8894aaf8ca424cd74a82c4d4c42ca4201fcc5d048251e26d9b612708c706deb98bdce5d8807deefcc9d605eeaa396bd0c6bfbe7b5797030f81c4f0b69c8d028d86e7ad168a0a376b6ca187b000a0f37e8d5bcaab109913f334256757fc30078903d2cb26b20ed847d1a4391aa8a78af9151318afa0a85b511161a56683a40b41518b", 0xcc, 0x4}], 0x4, &(0x7f0000000300)={[{@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@errors_remount}, {@errors_remount}, {@umask={'umask', 0x3d, 0x7}}, {@discard}, {@errors_remount}, {@discard}, {}, {@utf8}], [{@obj_type={'obj_type', 0x3d, '&\\*'}}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x4080, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) sendmsg$kcm(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002f00)="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", 0x1000}, {&(0x7f0000002840)="7dd35bf8d727d90bf60841c5b11a8c9d6ed3486e6523933d99cdeb01a69b8e871cb6aec57362ed96d9f4e9cbf12ec0b5d20080e4771ddf1d99fccb4c4a451a3b1bc3ef1a1a18e3003710becb3dc4f7b7947456667ba1cb0296a265ab813431f21735de3600eee977edc75f0a61a1bdb888a8a2a3e5bdab00a82f25d5fe4d8caac9c0a9db3e5c7247bc64a5f90a47b490f1ccbd348e0ec1965aa77bfe438dff64523f8047337769ef4f", 0xa9}, {&(0x7f0000002900)="d97c97f348d1ecea0df903f66589e11487fee34f722fdbc5af4d139ccf5f91bb5face76fa0ec2f557029fa0e38c038c9fd5749816700f108d8bc4416f6e0caeb656d498f2b04b0e718fb3d36ccd983207dae86145bc61d466d338e95", 0x5c}, {&(0x7f0000003f00)="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", 0x1000}], 0x4, &(0x7f0000006300)=ANY=[@ANYBLOB="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"], 0x1398}, 0x2404c850) syz_mount_image$exfat(&(0x7f0000002a00), &(0x7f0000002a40)='./file0\x00', 0xffffffffffff243d, 0x5, &(0x7f0000002c80)=[{&(0x7f0000002a80)="a5338c459095b01ece27ff462e4e2ecfd167a7153faf9983e59bbe496587c4ecec3ef8bf33cab257707e57cd1ff439dd9aa2a739c8d26f1be339f0361e5d2fac21223cb7f2323dbf07e23929e6f697852503f5be80f26ad8142839d875bd79da49bfbec09581dfb7fddaebf5f8384440aac5e77856992c091b5047c5c58f", 0x7e, 0x4}, {&(0x7f0000002b00)="3951d0ddb759a78182399f1b781b25ca5e465af42fa10d30874fcc0f6c37d923d8dc69608b13feeb22381a3622eb89e1a56d23a59972256db974bbdbf8c844a0504c8baf4e4cb3dc160adbe1d07c68de28682983352fe3aa4b459ab14bf9ff55b16911cc150d7eeb0ad9365f42329736732986889fc08c2bf8d6f388fb1149fbe8c390e6a5127550752676a1529f49a6612a7a52", 0x94, 0x1}, {&(0x7f0000002bc0)="0ff3f90d82ad3142fa20f172ad24467b52d1e1293d6cf222ce1546765423f01d3843a45572230f3188dfddcc493bcd", 0x2f, 0x8}, {&(0x7f0000002c00)="79e9ee96f9685dd31a22c2b5b723d0f17fa1fdb97bb474ba", 0x18, 0xf92d}, {&(0x7f0000002c40)='0:,-', 0x4, 0xffffffff}], 0x1b0804, &(0x7f0000002d00)={[{@dmask={'dmask', 0x3d, 0x3}}], [{@euid_gt={'euid>', 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_gt}]}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002d80)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000002e80)=0xe8) connect$can_j1939(r1, &(0x7f0000002ec0)={0x1d, r3, 0x2, {0x1, 0xff, 0x1}}, 0x18) syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x9, 0x6, &(0x7f00000026c0)=[{&(0x7f0000000440)="85e90a1a2654b115be9512fe9d3f6109546a0c254a55e56dda6d8d58d68fdd6a4ab0692c3e5309f4397048f00930c377e7ae6b5ea6f031bf388f0f4e9cfd24d04f1849", 0x43, 0x9}, {&(0x7f00000004c0)="ad67ebd30092f91f3222cd659213b82bdc04fd0f23470a44dff382db70a40b7e2961916ff99612c3fbb90f43dd7cc31f36e0277151e768a6827c3b3e0aa49d69fa200ceac0e78ab249dca6ab68f075b5d194a2da5437df2a287b16d72e98fe2c9f83974c", 0x64, 0xd2f}, {&(0x7f0000000540)="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", 0x1000, 0x3f}, {&(0x7f0000001540)="03bddccd393163f2bee367961ff0cff0391a89edce5c95597df954772412773bb42bec0868121ce085c3ee4d3c3795e65576e035608505e0ea3be57e26a16ce831b1399937c58e52e6c9302dfd1c074162c245555374a44a01a3a2392a86a4ee5ce2cbdef1346f536fbe440d66f8ba64cc0fbb05b8fe6b69a3c38b4d9614fabcc4235a310123f08b3cec2d951e77e862da62dafff958dd60e06fd453604b6502e677a27884753bceedd5724ce52f52ded58676b0182315d8071480bb832744f328c50a0dd3cefe2ce619efa101069a1119e44dd3a89c279bd3d2a57e00a650f3e0a871ddca71e33325", 0xe9, 0x7}, {&(0x7f0000001640)="f3b1bcd399888c287bbbe579e2b412d8a05577d16c48f3c0db997cb55ba16cd9a51cc40890ef3a84cd205c2ca4fb056ddea7d8202919d32dff8558a7eec1f0b1b9d6f58197e7d4a9e34b4799a2e07fc1afa47891d5282b220ab804d4f3030b17", 0x60, 0xa}, {&(0x7f00000016c0)="b23191ae0b2ca3c5429cb1dcd0d0c45a48a06a8831af96ab7a5e57ac165564b53a15c422f67150c3cf0d5463a8e3db4d23539a14cc7317ac775cf66f2d1968ebc56cb51340b3e1f229e3578fe6d7502eef0a7bb3f1a6d62f84bced92774cebade166b85560f8228579e4ccb4523c237f831eaa99d99c57078beb940380e9d793a8f3d309ddb5206a51905d53cf8f93e4dab5da200d97cd306f4c506b7d972d900f6b9ed7281aa8fc3f0ffe1d11592fea1ad19333109ec2d34a38f7bf11674f02ea4041fa6ab172e5a4c2df13c36c8d44e1b8a47b07e267d034b65f82b2bb3b4345a992cc1434f1bc4e5bc309f4f16676818df86496ebc5529779b61d14bbe565dcf965600bed0fd46f9324c768f5af573b4950817dfc65bd4e306a0d722a4dbdaebfc57cff6d63c29882c76ac8f6da28a48852fcb8ddc6c6a3046dda6888ce1633a1793b80b4a5c9e61094bcfd7fff311bf36ad11a8215a3387f37cc3331d9f3d028350158e003b9fa63ae2201cbbcaaf2eecdb110c5c532417f9dcb1fbce0e60bd0b4be9495617a62bdedb8f40c26c3c13d114af23f9083445089b6312f6f02b82d152686107d45d3e7d0c6a64b8503025b51cd2907f02f72f0282232ea61446ad655ba7803c787dd580cc5bd3d4d68f28b4147957bca5632786b7b3b5f3f5fea60b94acbfac310421281d166e5e02c1da09a25b57528a27922f44c951d6d215bfa70ac776f8c1aca69e5ff11d4977fe1925507cde4922b9978241302edc2d0b367ed4c87ebdb0d966f5984e19f29d31656ae866db1263ab71a1aaf3f72d9266f3d2a327b7a8d6b3e34da96058b93871b07957d4797486bb47c1597ae7154b262ada176fdbe47583fe95c089df78b21943bb166b0ef8b7d185210c4776680f6bfb611c3226188944096e346affb0a033aa5e48032ac42d8d7592c1ad15cf7ec30765152fdd332ba669cdf708d825e5e0d34e107cd5d3f0201c17a481292f9666abbb1b2c64c8d6a143fa47a5e5669e462146f2e57cf0b5373725c8daf95d1f55cc6951efdb6e61ce790cc3a0acf431915c581c6e1992b325c927dfe699475ef97bb77c2405e7167b2784005a6c50787f3ef2e804a3a42d653c128f66760d781bf228dbfb83fc936ee788ce7808f32a48857e3f52eeebb10c4f5f20b3f1de36f7ca822c3bb5e6e75957b230fa1a5e85ab467a2c01e40cc24e5f552ee51ebf070818068a16b576cb8ffd9447d8c5dc98ffcb32e1e73637b9588a9f7cf32ebb53ae159b8b1d414b22400e0bcd8bb528e257e11b2caa1e9272c99ae714ccf7d113da5b3e16435d87629e96b152a9ad18e13df9a486cd412766a399e6813a267752e87423539e7d1163a65b0e37c14cf3ceb55376cc2778b7eceeab20ac4363f3c74b416d304c4b84a6d10602a5099d55892336d10875e8e392a6c7146fd6a79d1fc472aeb07d75fdefe1a2d59244aee98784be889a1ca318de457da9a72f00709715d48a9a68412c11f2f6087e634b5c9ca0d016a223b8295fcaf5af3c747c0ef1c0542a1aef0f1fefe2245c658f02049000f16ced838e301e79889c7b92c0ec7445524141a30aa5b978ecaf563c3e86ad202d6873585fd83053023ed476a4f2e7cf7e9ffb5094e711105e22ed86f5cbecb9190e02562fb4e693e1b8ffb4b9478fe63a9442e442e556661734477d763052d453a3128fb7d432aa6fe02c39cee83f1c08011452a1c6bb55396a6060a2e890a6938a9e529724e2f8c75745ae295c5fba166fb8f230020bf65cdf8b9bf4042771a999705b1069121c63d7afcad91c2890884c00e5b9048a0c64ce1d480c8d8df302831b9641661e0bf94766bb643550233fc9b4fed589ba123fc54f9c859ec6c86cd770176906534918bed367c06ab2590a32068d8219f7d8d7b94fe968bd904e1860883471c245b91a04330ed6610e0bb87d90f36aa4ab35fd88f6e7f3495bb3383a45e547281ae59b7c15cc49b6a2af58f953f744f34717dbd0b6dd69df3b7d4dadf2ea4c55e3507f7ed6ef552cb3a74b3539b83d071e3e5612a30a133ef2c66066a636e11523a5cb4629662c8d386adaddb9c7f68364304eb7c8f21657e7fa4ef9e84a9a5b2f35f4b65d8f1c0696a6322ea7efadb974f0f494e30ac70ba440d54319c784b2db96dd619c837d17ee82afbfdccdd27307b8cdc6814ce3ba4a12451f09521d2fa823e2f5f843cf6f65f216662188a7b50c790a3118a3bf32eaa3aa0bf12da6c2785532ec08b3805cea18359d23bbac0fd7694bcdc860cd598de92a12b7ef6124b0ceed479fe786887212fcd8edfe2261b3f89eac58e1e85df5bc94528a440c48ea28dfa4b7f7589a6f303dd2a29701692b10fe09df6118d66782c5fb2d0c20a4ce3cb7184522dc6b9f9f97689d020a2c3817bce50de8e3f52db51438c8c7e85b7096dac1b563e697844517a219a0ecaa8e1045117267fcd9ad65d34e3619a026d6666f132e7de50e17569a4a5a8d21ab7b7d68e23d435af8cfafb44474c794845d56a9f459ac4256f1eed518375cacdb28e2db24df12b3dfec3235c23f94a2152d67a8fa00403522c652235961ab18c874e18e4356ab3c5006098cb4c8b8bd9abdd3d05fdf31f00efd011362fe213fb2b8c534ce880cc7b7ce83a1a5f83424be1c4b30fb98918cf5ea16253b0860f3fb21258d0a8f9c65148b8496086f3f64406dad4ff567cd173881258659416fcdb65b19ee2f314d862f52cc07adea0b9d64b243cfc171afcbcb2f71b4cc88bf16187d95e606f1bdd07ca9a7f02f9d1ec45fd5521bffe3d459f200e632a52c336c93817e2fc1a9b8bd424abc8f6d9760d8f780298c5addbc2e9f89066f27458b1ce74eb23715f0884d207b65049d2496d3150beafc3fc192601ea00ad4edfcb1deb2c2a3795cfe6cdb452d52557b5f2871d070e429048afbaffc4ac71fff9a362806556c1f61ec26981d2d155c1ba40c06380e7997ebd272b1c306482824946662228ba268c35aa64da45fc2542d3a82d40b499626d141f524a63a7e338e73daa72c76ea11c2487c4bc7082f253e8d1580ac1f142b854e4efbdb16a1fac79116e470b977ee58a916f001ec3b317776f822361b9df5f6d2b1aa703788693b59860b74cdfe0188324ef949b459946cbbe9d3d6e75add75ee8846529fa680ee1dcf70784863fe64d1dc324faea538cce9287c46cc6112d7b902431c82889f21f4a8c9f4187e336bcbf69286224ef18c33662fdb2405ca8c38dcf3dcb002cda19f3eb31b2cc8cffa28a5979dd3c433adb5e50d5f499d652ec0e5045f9a34f46f2c3bc30ff0c5f5ab7c87d55d521e0546093a6cfe7cb48f3defd124bf73b75fa698d5b771b5675bd52f3d7b7162ba8cacfc38eabf8935a6b26fad0d3f9324ea9b89d76dfcfe24baf5e405d510e86040731325ffc4941fe422027d9f12292b8896e9a5ee058dad6772307a9ef1d49356b3705ea1924489d7cd8aa915ed12ff9e2f98b6aadafb405c7df3aa6978f3d93e516f8e4427b00ef99a29bf34d36fe9849cddafe4f50c64556d12539cc1e725aee01d820fee2588695631f904c37534fe7a2cb6eed760aa8044254f21a5d89a26792d820d7c37d84fa50b87c1b207d71b8a3b598ead610a0ccc4a1959ad84b0226ab0538e986d48b8b3de8297987416696fd112889ecd796f1ee77e374f1c29928bcff53353297d20d3679b275e53b1455ad11621bba0b3da7fc62d01a0148854843d7beac36ca1a72d779f4c1b7c47a8895ecaebbd52f282a52f3af22a81e8a039b3fbb7eee1173945f193f21fd7f85fdaa93b2c4530a381c0489a8abc2775372ca2efedec8f258949f4e23da53a0cc7fb19e2813d44bd4d3263d85d65bf671cc8b27cc1f46122219e73285093f73757b22c16aacb01d1c1321675864d02951801b25e4bf41927f9a3ac0e2ea373d1ed4006f1f2b96603e1126d21fae0fea6bc75724eecfa6566a16305cfcf593e31c5800f3906cb7a496081f3f4d1760b9c33d7741f3066084e8ffb44906be944059e403a30dbc70c5bbd8a8000c2463dacd352884d6954ffe04128212a8ab9c7ab5b873499e94bc15cd8ecd9fa2149ad554d88c100f145b17b30135cba09c1b2e229e3b2f087178c3cabcfc31f2d2fdfbfe55e6e6c1a254ac821439a239a9c5f8647cc6576fba8b4d6c2a5cdd6e1543ded4e6915163998f9bfe161a17d59fe73772bdff26a619353eb0ab8776053a05fb6a9b42404a20a62eb7facef6107e09a99f296a02079b0192c2815944839390437aa7ad81beb3edae5f3c3bfa587bf788b2c01a79063d99170aa3a1e4af00346ca856d9ea89447434dc17bcb831f0de09cd6552c1d29e84ab1e4950d6f38c3226c93350e5350b6da73e38a3138d8316f8029118759143cda6dab924ee152431ee2f5abd23a2ef15f75b1ef7394d4478b3c2700196714ca0f8024667742c06343fe248919320621141101e4649bbc2910b8df88d24fae525fce478a2ca6579e71e55cea473188e45034e07a526aa7a136491fb660f6fae7aea9e708b1c172b6b5e21217b198ca1525d5ba2a30e535351583381f7f36c1ea5cd43fb79ea31d6e86c7fb594bed2dce44fb088257c38bdfe7f84ff88f0fb1f4fcf590aee7e18b99c94ad3b682680f5ac7526229a996681131541253b5f4611be25cb63c6e3a51af24afb7dee1858ce30f2aba9f1c5be03a000eb5af401fe5d9048080354418f8ce74fd6598c1ee019b1a6c5057bd6e032ffa8a2ebf4bb91e62989ba5f9ffc775dac67791db6fd34d2d64d40157a07d84d614fc32fcadd4f3950530882f117e85d2ee37a1995f06618a20a0e32a3636ac0ea5098e33b2200d807a849305e93611b7b55480439812b5b6a0dfc99c1a889f9ba41025872b230895400dcf608b14b0e55e19aba803ca4beac7ffc208234c8b4a52017946a1aad49b720ec29424622ed29a530bf910708c73658ce78c71a864c050a0bbbe59c2f4a9fae0cadb9184e35b9fdd46ae54a9350ccd1e492ad2827deb101107392d8e10b43189f82ff08aea95fe8fbd2769ff9d5adbc3ce67b9b838c526408faa394328d0de19e321ff7ffc4ff0a9c2d9b3e22a48c4843d7fa64c099368779415b93bae2ac73281f4aff6970767a4f4f6db36e7f9488c6f659f8776ee55f279497bd3acee9e0f0e2f92a070db90aa69d1a5321c46e2d6ac53b2207c666fc48cddb678eebc3c0535f0996ef9de6b383e9c8702d6d7f45e1ed43eb1777147ee66179cac4f90144c72087d7cdbae8e99cc07c15a24680af1fd43055f5c3c217519b51f28844b6afc66394af3afdf48868a9278a7dbf8ac73e3373fd08b4f9b69dbee48ced2dc41ad171432c936e6a5ad9b02ffe2b754eedb5b1d46492629a4af93a7a55f80d3b6a416faec453923dd2228c8d1f7934699ebb4391525cff019369f3c6e2bd9ea3f0b7b6d0ac726cf9d21a9cb9757116ddbd69c3af57b4fe43830a251e975e7174e5523255131d5c2de3c2e268dc896657d296c2b8b1807d85b79f8bafb3c52da460ec8dd9ff126ab9e0dd16adef8c6bc0958ae1a7b82da70da5659a9f18b1b20d7630be06caaeef163d55d5ebbc81409289c6cf35e9c9ef45899f78a45a5757f73aa481eabb48c4df8e9b9d5eae9c9a464159412860242f0aac19669dcb4ef299893210eb18b224a73c31e68bb70a2b4ec5e169c7ff6f254d8c6ca3cb28638468d4f79cc6d418840a41bad63f10e7573bc0b39219cc264eaf6db24c625f877f762be4bd631f73e743340479771f13a48c388bc4a47678f9b255", 0x1000, 0x8000}], 0x100010, &(0x7f0000002780)={[{@codepage={'codepage', 0x3d, 'macroman'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fmask={'fmask', 0x3d, 0x800}}, {@errors_continue}, {@codepage={'codepage', 0x3d, 'cp865'}}], [{@smackfsroot={'smackfsroot', 0x3d, 'errors=remount-ro'}}]}) [ 3529.314002][T27697] usb 5-1: USB disconnect, device number 83 08:37:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f15e3d91"}, 0x0, 0x0, @fd}) 08:37:43 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x101000, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) getsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) clock_gettime(0x2, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) 08:37:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3529.371722][T21565] loop5: detected capacity change from 0 to 264192 08:37:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3529.428935][T21565] exfat: Deprecated parameter 'utf8' [ 3529.460217][T21565] exfat: Unknown parameter 'obj_type' 08:37:44 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f15e3d91"}, 0x0, 0x0, @fd}) 08:37:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3530.124995][T12454] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3530.131955][T12454] ath9k_htc: Failed to initialize the device [ 3530.138423][T27697] usb 5-1: ath9k_htc: USB layer deinitialized [ 3530.505072][T27697] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 3531.065492][T27697] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3531.074802][T27697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3531.083211][T27697] usb 5-1: Product: syz [ 3531.087666][T27697] usb 5-1: Manufacturer: syz [ 3531.092270][T27697] usb 5-1: SerialNumber: syz [ 3531.136533][T27697] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3531.725043][T27697] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:46 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x0, "19ee2c529b17"}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:46 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000380)=0x8001) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000080)=@can, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/202, 0xca}], 0x1, &(0x7f0000000240)=""/174, 0xae}, 0x7}], 0x1, 0x120, &(0x7f0000000340)={0x77359400}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000003c0)=0x6, &(0x7f0000000440)=0x4) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000480)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7f, @default, @rose={'rose', 0x0}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)=""/44) 08:37:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:46 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x6304) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) 08:37:46 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f15e3d91"}, 0x0, 0x0, @fd}) 08:37:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3531.932236][T11033] usb 5-1: USB disconnect, device number 84 08:37:46 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) write$char_usb(r0, &(0x7f0000000000)="f976d1bb92d18783bb060ed2527c11852d442f0868ad2dbf08b3a479aa6555fdcea43b805725090db17c54c44ac45682d7b290ee34100c0d76c5c5e50a8aab653cef8201e0ce30070b950cd915d43f8ff609e6b6dee5b5ad18c11a86ab1ed4aa1ece4cb58702310585466c8169a975b95a2447c2b238792efc3a67392ff8b133fe6a4eaf3ff0f4ba2524a937f868e6e1e21c322d670848315b3bafd16ad4f1b2d9bff16aeaaa517be0aa53aab08bdf94dc6d6542", 0xb4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x10001, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) read$char_usb(r2, &(0x7f00000000c0)=""/73, 0x49) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000180)) 08:37:46 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f15e3d91"}, 0x0, 0x0, @fd}) 08:37:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:46 executing program 3: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x2, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x6, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, r0, 0x1, {0x1, 0xff}, 0xfe}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x6, "19ee2c529b17", 0x22}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000000080)=ANY=[@ANYBLOB="717f6f1f99a5b43818000000ea5af7dce6d3dd38451cdff81ac249751266f8cc00cfa71b3ab743a7550344c341b8ca928932876a2e0ef2c48f5d75327877168db0"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc4, &(0x7f0000003400)={[{0xbe, 0x4e00, "222b196d7af1c0a6f0f5f4c372ce680b635657d3c8aae1479af7f1c9a81fd1d3edf71635790ba733d61ae41b02a2e4299c8352e693740dd693143024937f1373fafe352782c75e3bfcb31fa041ea35f1fdaa740c59c998432c1f26a89c670ca248ced3a2286ac01a8c52b940cf654bca1081111f5a78482c50af939e27dd8d1a19aadb68fda77c19c4ef60d21f1a0e3a6bb5f050c5414a476e34e302b9f77203698fe486d48538b45bb10c2582327b56a1a26f53cfeb1061f5aef8e81fe4"}]}) accept4(r1, &(0x7f0000007680)=@qipcrtr, &(0x7f0000007700)=0x80, 0x80000) connect$can_j1939(r1, &(0x7f0000007780)={0x1d, r0, 0x0, {0x1, 0xc68f4a36e603677d}, 0x1}, 0x18) clock_gettime(0x2, &(0x7f0000000400)) 08:37:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) [ 3532.454946][T12454] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3532.764952][T27697] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 3532.771932][T27697] ath9k_htc: Failed to initialize the device [ 3532.780378][T11033] usb 5-1: ath9k_htc: USB layer deinitialized [ 3532.975179][T12454] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3532.984337][T12454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3532.994510][T12454] usb 4-1: Product: syz [ 3533.000120][T12454] usb 4-1: Manufacturer: syz [ 3533.004734][T12454] usb 4-1: SerialNumber: syz [ 3533.045633][T12454] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3533.135268][T11033] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 3533.615068][T12454] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3533.665185][T11033] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3533.674616][T11033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3533.684171][T11033] usb 5-1: Product: syz [ 3533.688979][T11033] usb 5-1: Manufacturer: syz [ 3533.693789][T11033] usb 5-1: SerialNumber: syz [ 3533.735670][T11033] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3533.834342][T11033] usb 4-1: USB disconnect, device number 50 [ 3534.355066][T27697] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:37:49 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002e00)={0x0, @xdp={0x2c, 0x2, 0x0, 0x26}, @ipx={0x4, 0x0, 0x1, "7f9f94b8896d", 0x3f}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)='veth0_virt_wifi\x00', 0x0, 0xbc, 0x1}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002e80)={0x1d, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x18, 0x140a, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000002fc0)=[{0x2, 0x0, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x4}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003040)={0x0, @sco, @can={0x1d, r0}, @ipx={0x4, 0x8001, 0x0, "19ee2c529b17"}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003000)='geneve0\x00', 0x941, 0x0, 0x853}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)="19f10d2e3b2ff1cfe8f0a5e891ec64e5fd6f4fd546090ecf2bea6f2ed6072d3da5a5f7304d36e6d683c5b911294f11a7394324e3b32427caf2874f741766265c668d4627ec7239c383", 0x49}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) syz_open_procfs$namespace(0x0, &(0x7f00000032c0)='ns/time\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003300)={0x0, @isdn={0x22, 0x2c, 0x6, 0x3, 0x8}, @hci={0x1f, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff7, 0x80}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:37:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f15e3d91"}, 0x0, 0x0, @fd}) 08:37:49 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000140)) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x80, 0x2000) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000040)=""/253) 08:37:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000da40)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001440)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000d9c0)={0x8}, 0x8, 0x10, &(0x7f000000da00)={0x2, 0x0, 0x80, 0xffffff81}, 0x10}, 0x78) 08:37:49 executing program 3: clock_gettime(0x2, &(0x7f0000000400)) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001700)={0x0, @ax25={0x3, @null, 0x5}, @xdp={0x2c, 0xe, 0x0, 0x28}, @generic={0xa, "f8ed342fec5600fa0500"}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f00000016c0)='wg2\x00', 0x1, 0x101, 0x6}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001880), 0xc0200, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000001900)=0x1) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001940)={0xff, 0x4b087ec, 0x800, 0x7, 0x8, 0x4000000}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x1d, r0, 0x2, {0x0, 0xf0, 0x4}, 0xfe}, 0x18, &(0x7f0000001800)={&(0x7f00000017c0)="b6904402fd3e6e968c66089709f20c9cdf829a4226165c0fa7e0c43bf6", 0x1d}, 0x1, 0x0, 0x0, 0x8805}, 0x200040c1) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{&(0x7f0000000000)=@pppoe, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/138, 0x8a}, {&(0x7f0000000140)=""/224, 0xe0}, {&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000280)=""/76, 0x4c}], 0x4, &(0x7f0000000340)=""/133, 0x85}, 0x1}, {{&(0x7f0000000440)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/137, 0x89}, {&(0x7f0000000580)=""/123, 0x7b}], 0x2, &(0x7f0000000640)=""/4096, 0x1000}, 0x7b31}], 0x2, 0x2000, 0x0) r2 = fork() getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f00000032c0)='ns/time\x00') r3 = fork() getpgrp(r3) syz_open_procfs$namespace(r3, &(0x7f00000032c0)='ns/time\x00') r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000006240), 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000001980)={0x3, 0x0, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0x2, 0xdf, 0x81, 0x2, 0x1, "fd545ad5"}, 0x3f, 0x2, @fd=r1, 0x4348, 0x0, r1}) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f00000018c0)={r5, r6, 0x80000000})