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", &(0x7f0000001540)=@tcp6=r5, 0x2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r3, 0x4, 0x7, 0x20, 0x5, 0x4d, @local, @empty, 0x40, 0x700, 0x3f, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r6, 0x2}, 0x18) 08:40:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) r2 = socket(0x23, 0x6, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', r1, 0x4, 0x27, 0xc7, 0x10000, 0x8, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8, 0x7f, 0x200}}) 08:40:51 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0x0, 0x8a, @empty, @empty, 0x700, 0x7, 0x3ff, 0x6}}) 08:40:51 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:51 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) r2 = socket(0x23, 0x6, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', r1, 0x4, 0x27, 0xc7, 0x10000, 0x8, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8, 0x7f, 0x200}}) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) (async) socket(0x23, 0x6, 0x8) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', r1, 0x4, 0x27, 0xc7, 0x10000, 0x8, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8, 0x7f, 0x200}}) (async) 08:40:51 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x1f, 0x4, 0x6000, 0x24c45431bff92274, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x1}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) r4 = socket(0x2b, 0x1, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001580)={r3, &(0x7f0000000540)="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", &(0x7f0000001540)=@tcp6=r4, 0x2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r2, 0x4, 0x7, 0x20, 0x5, 0x4d, @local, @empty, 0x40, 0x700, 0x3f, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) 08:40:51 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="935f2725e4a617723918ae74af89d778a17c12a3f77a838fd0210bc9776a3e2ec0ab4eacad277a0e7b80ea7f2a5408701a9529779897234530f52e1066a9997a20dc06d07a6409d03ffc6676661560e74abadf1d9ffc757279", 0x59, 0xfffffffffffffffd) 08:40:51 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0xe883, 0x0, @empty, @empty, 0x700, 0x7, 0x3ff, 0x6}}) 08:40:51 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:52 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) (async) r2 = socket(0x23, 0x6, 0x8) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', r1, 0x4, 0x27, 0xc7, 0x10000, 0x8, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8, 0x7f, 0x200}}) 08:40:52 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:52 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000000000), 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x1f, 0x4, 0x6000, 0x24c45431bff92274, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x1}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r2, &(0x7f0000004cc0)={0x18}, 0x18) r3 = socket(0x2b, 0x1, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001580)={r2, &(0x7f0000000540)="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", &(0x7f0000001540)=@tcp6=r3, 0x2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x4, 0x7, 0x20, 0x5, 0x4d, @local, @empty, 0x40, 0x700, 0x3f, 0x7}}) 08:40:52 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0xe883, 0x0, @empty, @empty, 0x700, 0x7, 0x3ff, 0x6}}) 08:40:52 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:52 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:52 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0xe883, 0x0, @empty, @empty, 0x700, 0x7, 0x3ff, 0x6}}) 08:40:52 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000000000), 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) pipe2$watch_queue(&(0x7f0000000180), 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x1f, 0x4, 0x6000, 0x24c45431bff92274, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x1}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r0, &(0x7f0000004cc0)={0x18}, 0x18) r1 = socket(0x2b, 0x1, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001580)={r0, &(0x7f0000000540)="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", &(0x7f0000001540)=@tcp6=r1, 0x2}, 0x20) 08:40:52 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:52 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000003}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 08:40:52 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:52 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000000000), 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) pipe2$watch_queue(&(0x7f0000000180), 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x1f, 0x4, 0x6000, 0x24c45431bff92274, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x1}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r0, &(0x7f0000004cc0)={0x18}, 0x18) socket(0x2b, 0x1, 0x2) 08:40:52 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0xe883, 0x8a, @empty, @empty, 0x0, 0x7, 0x3ff, 0x6}}) 08:40:53 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:53 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:53 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="935f2725e4a617723918ae74af89d778a17c12a3f77a838fd0210bc9776a3e2ec0ab4eacad277a0e7b80ea7f2a", 0x2d, 0xfffffffffffffffd) 08:40:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000003}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 08:40:53 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0xe883, 0x8a, @empty, @empty, 0x0, 0x7, 0x3ff, 0x6}}) 08:40:53 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000000000), 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) pipe2$watch_queue(&(0x7f0000000180), 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x1f, 0x4, 0x6000, 0x24c45431bff92274, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x1}}) pipe2$watch_queue(&(0x7f0000002c40), 0x80) socket(0x2b, 0x1, 0x2) 08:40:53 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:53 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:53 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r5, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r5, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r7 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r6, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r8 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x20) 08:40:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000003}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 08:40:53 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0xe883, 0x8a, @empty, @empty, 0x0, 0x7, 0x3ff, 0x6}}) 08:40:53 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:54 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:54 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000000000), 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) pipe2$watch_queue(&(0x7f0000000180), 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x1f, 0x4, 0x6000, 0x24c45431bff92274, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x1}}) socket(0x2b, 0x1, 0x2) [ 2306.999123][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 2307.006403][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 08:40:54 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r5, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r5, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r7 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r6, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r8 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x20) 08:40:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)="64a568a188cb90bdd943817b5f29281becca19307ae10e41255b0bba7039404ab80f9fc731b5bbef48c87b805f8081208bcc7c36931b9d600bea36cb9016b5", &(0x7f0000000040)=@udp6=r0}, 0x20) 08:40:54 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0xe883, 0x8a, @empty, @empty, 0x700, 0x0, 0x3ff, 0x6}}) 08:40:54 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:54 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x0, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:54 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000000000), 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) pipe2$watch_queue(&(0x7f0000000180), 0x80) socket(0x2b, 0x1, 0x2) 08:40:54 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0xe883, 0x8a, @empty, @empty, 0x700, 0x0, 0x3ff, 0x6}}) 08:40:54 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="935f2725e4a617723918ae74af89d778a17c12a3f77a83", 0x17, 0xfffffffffffffffd) 08:40:54 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r5, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r5, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r7 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r6, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r8 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x20) 08:40:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)="64a568a188cb90bdd943817b5f29281becca19307ae10e41255b0bba7039404ab80f9fc731b5bbef48c87b805f8081208bcc7c36931b9d600bea36cb9016b5", &(0x7f0000000040)=@udp6=r0}, 0x20) 08:40:54 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x0, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:54 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000000000), 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x2b, 0x1, 0x2) 08:40:55 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:55 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x0, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:55 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0xe883, 0x8a, @empty, @empty, 0x700, 0x0, 0x3ff, 0x6}}) 08:40:55 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:55 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000000000), 0x80) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x2) 08:40:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)="64a568a188cb90bdd943817b5f29281becca19307ae10e41255b0bba7039404ab80f9fc731b5bbef48c87b805f8081208bcc7c36931b9d600bea36cb9016b5", &(0x7f0000000040)=@udp6=r0}, 0x20) 08:40:55 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:55 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x0, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:55 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000000000), 0x80) socket(0x2b, 0x1, 0x2) 08:40:55 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:55 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0xe883, 0x8a, @empty, @empty, 0x700, 0x7, 0x0, 0x6}}) 08:40:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x29, 0x0, 0x80, 0x5, 0x4, @remote, @mcast1, 0x700, 0x20, 0x8a5, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 08:40:55 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:55 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x2b, 0x1, 0x2) 08:40:55 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:55 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0xe883, 0x8a, @empty, @empty, 0x700, 0x7, 0x0, 0x6}}) 08:40:56 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x0, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x29, 0x0, 0x80, 0x5, 0x4, @remote, @mcast1, 0x700, 0x20, 0x8a5, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) socket$inet6_udplite(0xa, 0x2, 0x88) (async) pipe2$watch_queue(&(0x7f0000002c40), 0x80) (async) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) (async) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x29, 0x0, 0x80, 0x5, 0x4, @remote, @mcast1, 0x700, 0x20, 0x8a5, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) (async) 08:40:56 executing program 4: socket(0x2b, 0x1, 0x2) 08:40:56 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="935f2725e4a617723918ae74", 0xc, 0xfffffffffffffffd) 08:40:56 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0xe883, 0x8a, @empty, @empty, 0x700, 0x7, 0x0, 0x6}}) 08:40:56 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:56 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x0, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:56 executing program 4: socket(0x0, 0x1, 0x2) 08:40:56 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x29, 0x0, 0x80, 0x5, 0x4, @remote, @mcast1, 0x700, 0x20, 0x8a5, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 08:40:56 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0xe883, 0x8a, @empty, @empty, 0x700, 0x7, 0x3ff}}) 08:40:56 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x0, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:56 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:57 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:57 executing program 3: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6erspan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000842}, 0x4000089) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 08:40:57 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0xe883, 0x8a, @empty, @empty, 0x700, 0x7, 0x3ff}}) 08:40:57 executing program 4: socket(0x0, 0x1, 0x2) 08:40:57 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x0, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:57 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:57 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:57 executing program 3: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6erspan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000842}, 0x4000089) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 08:40:57 executing program 1: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$FUSE_POLL(r3, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r2, 0x0, 0x81, 0xb8, 0xe883, 0x8a, @empty, @empty, 0x700, 0x7, 0x3ff}}) 08:40:57 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x0, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:57 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:57 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="935f2725e4a617", 0x7, 0xfffffffffffffffd) 08:40:57 executing program 4: socket(0x0, 0x1, 0x2) 08:40:57 executing program 3: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6erspan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000842}, 0x4000089) (async, rerun: 64) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 08:40:57 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:58 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:58 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="935f2725e4a617", 0x7, 0xfffffffffffffffd) 08:40:58 executing program 1: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:58 executing program 1: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:58 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:58 executing program 4: socket(0x2b, 0x0, 0x2) 08:40:58 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r2, &(0x7f0000004cc0)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf8000000}, [@alu={0x4, 0x1, 0x8, 0x2, 0x4, 0x30, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x0, 0x6, 0x4, 0xa, 0x30, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x40, 0xf1, &(0x7f0000000180)=""/241, 0x41000, 0xc, '\x00', r1, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0x7, 0xffffffb1, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r2, 0xffffffffffffffff]}, 0x80) 08:40:58 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="935f2725e4a617", 0x7, 0xfffffffffffffffd) 08:40:58 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:58 executing program 1: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:58 executing program 4: socket(0x2b, 0x0, 0x2) 08:40:58 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:58 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r2, &(0x7f0000004cc0)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf8000000}, [@alu={0x4, 0x1, 0x8, 0x2, 0x4, 0x30, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x0, 0x6, 0x4, 0xa, 0x30, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x40, 0xf1, &(0x7f0000000180)=""/241, 0x41000, 0xc, '\x00', r1, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0x7, 0xffffffb1, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r2, 0xffffffffffffffff]}, 0x80) 08:40:58 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="935f2725e4a617723918", 0xa, 0xfffffffffffffffd) 08:40:58 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, 0x0, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:58 executing program 4: socket(0x2b, 0x0, 0x2) 08:40:59 executing program 1: add_key(0x0, 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:59 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) (async) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r2, &(0x7f0000004cc0)={0x18}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf8000000}, [@alu={0x4, 0x1, 0x8, 0x2, 0x4, 0x30, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x0, 0x6, 0x4, 0xa, 0x30, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x40, 0xf1, &(0x7f0000000180)=""/241, 0x41000, 0xc, '\x00', r1, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0x7, 0xffffffb1, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r2, 0xffffffffffffffff]}, 0x80) 08:40:59 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="935f2725e4a617723918", 0xa, 0xfffffffffffffffd) 08:40:59 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:59 executing program 4: socket(0x2b, 0x1, 0x0) 08:40:59 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, 0x0, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:59 executing program 1: add_key(0x0, 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:59 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="935f2725e4a617723918", 0xa, 0xfffffffffffffffd) 08:40:59 executing program 3: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:59 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:59 executing program 4: socket(0x2b, 0x1, 0x0) 08:40:59 executing program 1: add_key(0x0, 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:59 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, 0x0, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:40:59 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="935f2725e4a617723918ae", 0xb, 0xfffffffffffffffd) 08:40:59 executing program 3: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:40:59 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:40:59 executing program 1: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 08:40:59 executing program 4: socket(0x2b, 0x1, 0x0) 08:40:59 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:00 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="935f2725e4a617723918ae", 0xb, 0xfffffffffffffffd) 08:41:00 executing program 3: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:41:00 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x0, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:00 executing program 4: socket(0x2b, 0x1, 0x0) 08:41:00 executing program 1: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 08:41:00 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:00 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="935f2725e4a617723918ae", 0xb, 0xfffffffffffffffd) 08:41:00 executing program 3: add_key(0x0, 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:41:00 executing program 4: socket(0x2b, 0x1, 0x0) 08:41:00 executing program 1: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 08:41:00 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x0, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:00 executing program 2: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(0x0, 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:00 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:00 executing program 3: add_key(0x0, 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:41:00 executing program 4: socket(0x2b, 0x1, 0x0) 08:41:00 executing program 1: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffffd) 08:41:00 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x0, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:01 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:01 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 08:41:01 executing program 1: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffffd) 08:41:01 executing program 3: add_key(0x0, 0x0, &(0x7f0000000140)="93", 0x1, 0xfffffffffffffffd) 08:41:01 executing program 4: socket(0x0, 0x1, 0x0) 08:41:01 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x0, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:01 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:01 executing program 1: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffffd) 08:41:01 executing program 3: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 08:41:01 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 08:41:01 executing program 4: socket(0x0, 0x1, 0x0) 08:41:01 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x0, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:01 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 08:41:01 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:01 executing program 3: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 08:41:01 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="935f2725e4a617723918ae74af89d778a17c12a3f77a838fd0210bc9776a3e2ec0ab4eacad277a0e7b80ea7f2a5408701a9529779897234530f52e1066a9997a20dc06d07a6409d03ffc6676661560e74abadf1d9ffc757279a613adb42c989091eee26e493fecfe216bacf5bd9f92efb819396c58002269ae1778bed78d152123a3aeb6c55dfd5324f139aa072169918b9d76db81348b222ef6f25aa36c65169f03a6281f5072dad2ebddb2f8ba85b46f", 0xb1, 0xfffffffffffffffd) 08:41:02 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x0, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:02 executing program 3: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 08:41:02 executing program 2: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 08:41:02 executing program 4: socket(0x0, 0x1, 0x0) 08:41:02 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x400009c) r2 = add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="935f2725e4a617723918ae74af89d778a17c12a3f77a838fd0210bc9776a3e2ec0ab4eacad277a0e7b80ea7f2a5408701a9529779897234530f52e1066a9997a20dc06d07a6409d03ffc6676661560e74abadf1d9ffc757279a613adb42c989091eee26e493fecfe216bacf5bd9f92efb819396c58002269ae1778bed78d152123a3aeb6c55dfd5324f139aa072169918b9d76db81348b222ef6f25aa36c65169f03a6281f5072dad2ebddb2f8ba85b46f", 0xb1, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="d78df1186bbaf5c9b81fec09246eeb3586276aaddb2ff5192c4e9d476d289974c01d84a25940591cf034aa100478b8f0dc58225764f645f3cb314e4cd7ea65eb5f6fdbd410c1022d7a3b55152cf3d609c5966d2861b4da80fdc4ac1614667eae2e1312ffb98bc758689b1916d21ec26e8582b53c9b2e68e68c79e0bc789d5402f944fb6e24196db4126ae3b7ded535b6591ff63aabb78685", 0x98, 0xfffffffffffffffd) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, r3) add_key$fscrypt_v1(0x0, &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "15758745d9e7339eff661d2ca42e77ec341bbec250a1509b8addd99e3a39ba0cd06499677a06686a0de2c063caf15f254192c60eb75a8925492ff91ab9fc294c"}, 0x48, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r3, 0x0, 0x2f}, &(0x7f00000005c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d626c616b6532732d3132382d67656e657269630000f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd7fc5229fbb3bde0c2cbc32d9a4880b3802806d7a5b2321a6a609dee1041aee04fda21a693a8c0c451d27a3f086360aae0541ee0642797d9a4371718deb019a6ae3cf1ecb40fc9f64484af4f1fdaba5755c216181147ff9d63a7c1460555605159b3fa050cd5d1e59adce16585e62b63fb023e43944d6480d93381df695afd2b1de8a01ea163c5b36"], 0x0, &(0x7f0000000880)=""/47) keyctl$search(0xa, r2, &(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x2}, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x5421, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) 08:41:02 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:02 executing program 2: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 08:41:02 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:02 executing program 3: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffffd) 08:41:02 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x400009c) r2 = add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="935f2725e4a617723918ae74af89d778a17c12a3f77a838fd0210bc9776a3e2ec0ab4eacad277a0e7b80ea7f2a5408701a9529779897234530f52e1066a9997a20dc06d07a6409d03ffc6676661560e74abadf1d9ffc757279a613adb42c989091eee26e493fecfe216bacf5bd9f92efb819396c58002269ae1778bed78d152123a3aeb6c55dfd5324f139aa072169918b9d76db81348b222ef6f25aa36c65169f03a6281f5072dad2ebddb2f8ba85b46f", 0xb1, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="d78df1186bbaf5c9b81fec09246eeb3586276aaddb2ff5192c4e9d476d289974c01d84a25940591cf034aa100478b8f0dc58225764f645f3cb314e4cd7ea65eb5f6fdbd410c1022d7a3b55152cf3d609c5966d2861b4da80fdc4ac1614667eae2e1312ffb98bc758689b1916d21ec26e8582b53c9b2e68e68c79e0bc789d5402f944fb6e24196db4126ae3b7ded535b6591ff63aabb78685", 0x98, 0xfffffffffffffffd) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, r3) add_key$fscrypt_v1(0x0, &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "15758745d9e7339eff661d2ca42e77ec341bbec250a1509b8addd99e3a39ba0cd06499677a06686a0de2c063caf15f254192c60eb75a8925492ff91ab9fc294c"}, 0x48, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r3, 0x0, 0x2f}, &(0x7f00000005c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d626c616b6532732d3132382d67656e657269630000f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd7fc5229fbb3bde0c2cbc32d9a4880b3802806d7a5b2321a6a609dee1041aee04fda21a693a8c0c451d27a3f086360aae0541ee0642797d9a4371718deb019a6ae3cf1ecb40fc9f64484af4f1fdaba5755c216181147ff9d63a7c1460555605159b3fa050cd5d1e59adce16585e62b63fb023e43944d6480d93381df695afd2b1de8a01ea163c5b36"], 0x0, &(0x7f0000000880)=""/47) keyctl$search(0xa, r2, &(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x2}, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x5421, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) 08:41:02 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:02 executing program 2: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 08:41:02 executing program 4: socket(0x2b, 0x0, 0x0) 08:41:02 executing program 3: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffffd) 08:41:03 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:03 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x400009c) r2 = add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="935f2725e4a617723918ae74af89d778a17c12a3f77a838fd0210bc9776a3e2ec0ab4eacad277a0e7b80ea7f2a5408701a9529779897234530f52e1066a9997a20dc06d07a6409d03ffc6676661560e74abadf1d9ffc757279a613adb42c989091eee26e493fecfe216bacf5bd9f92efb819396c58002269ae1778bed78d152123a3aeb6c55dfd5324f139aa072169918b9d76db81348b222ef6f25aa36c65169f03a6281f5072dad2ebddb2f8ba85b46f", 0xb1, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="d78df1186bbaf5c9b81fec09246eeb3586276aaddb2ff5192c4e9d476d289974c01d84a25940591cf034aa100478b8f0dc58225764f645f3cb314e4cd7ea65eb5f6fdbd410c1022d7a3b55152cf3d609c5966d2861b4da80fdc4ac1614667eae2e1312ffb98bc758689b1916d21ec26e8582b53c9b2e68e68c79e0bc789d5402f944fb6e24196db4126ae3b7ded535b6591ff63aabb78685", 0x98, 0xfffffffffffffffd) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, r3) add_key$fscrypt_v1(0x0, &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "15758745d9e7339eff661d2ca42e77ec341bbec250a1509b8addd99e3a39ba0cd06499677a06686a0de2c063caf15f254192c60eb75a8925492ff91ab9fc294c"}, 0x48, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r3, 0x0, 0x2f}, &(0x7f00000005c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d626c616b6532732d3132382d67656e657269630000f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd7fc5229fbb3bde0c2cbc32d9a4880b3802806d7a5b2321a6a609dee1041aee04fda21a693a8c0c451d27a3f086360aae0541ee0642797d9a4371718deb019a6ae3cf1ecb40fc9f64484af4f1fdaba5755c216181147ff9d63a7c1460555605159b3fa050cd5d1e59adce16585e62b63fb023e43944d6480d93381df695afd2b1de8a01ea163c5b36"], 0x0, &(0x7f0000000880)=""/47) keyctl$search(0xa, r2, &(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x2}, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x5421, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) 08:41:03 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:03 executing program 2: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:03 executing program 4: socket(0x2b, 0x0, 0x0) 08:41:03 executing program 3: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffffd) 08:41:03 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:03 executing program 4: socket(0x2b, 0x0, 0x0) 08:41:03 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x400009c) r2 = add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="935f2725e4a617723918ae74af89d778a17c12a3f77a838fd0210bc9776a3e2ec0ab4eacad277a0e7b80ea7f2a5408701a9529779897234530f52e1066a9997a20dc06d07a6409d03ffc6676661560e74abadf1d9ffc757279a613adb42c989091eee26e493fecfe216bacf5bd9f92efb819396c58002269ae1778bed78d152123a3aeb6c55dfd5324f139aa072169918b9d76db81348b222ef6f25aa36c65169f03a6281f5072dad2ebddb2f8ba85b46f", 0xb1, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="d78df1186bbaf5c9b81fec09246eeb3586276aaddb2ff5192c4e9d476d289974c01d84a25940591cf034aa100478b8f0dc58225764f645f3cb314e4cd7ea65eb5f6fdbd410c1022d7a3b55152cf3d609c5966d2861b4da80fdc4ac1614667eae2e1312ffb98bc758689b1916d21ec26e8582b53c9b2e68e68c79e0bc789d5402f944fb6e24196db4126ae3b7ded535b6591ff63aabb78685", 0x98, 0xfffffffffffffffd) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, r3) add_key$fscrypt_v1(0x0, &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "15758745d9e7339eff661d2ca42e77ec341bbec250a1509b8addd99e3a39ba0cd06499677a06686a0de2c063caf15f254192c60eb75a8925492ff91ab9fc294c"}, 0x48, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r3, 0x0, 0x2f}, &(0x7f00000005c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d626c616b6532732d3132382d67656e657269630000f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd7fc5229fbb3bde0c2cbc32d9a4880b3802806d7a5b2321a6a609dee1041aee04fda21a693a8c0c451d27a3f086360aae0541ee0642797d9a4371718deb019a6ae3cf1ecb40fc9f64484af4f1fdaba5755c216181147ff9d63a7c1460555605159b3fa050cd5d1e59adce16585e62b63fb023e43944d6480d93381df695afd2b1de8a01ea163c5b36"], 0x0, &(0x7f0000000880)=""/47) keyctl$search(0xa, r2, &(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x2}, r3) socket$inet6_udplite(0xa, 0x2, 0x88) 08:41:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5421, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r1 = socket(0x25, 0xa, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x2f, 0x7, 0x6, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x20, 0x40, 0xea9, 0xfffffffb}}) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000000)=0xd0, 0x4) 08:41:03 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2d, 0x8, 0x3, 0x8, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x0, 0x20, 0x7, 0x80000001}}) 08:41:03 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5421, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r1 = socket(0x25, 0xa, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x2f, 0x7, 0x6, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x20, 0x40, 0xea9, 0xfffffffb}}) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000000)=0xd0, 0x4) 08:41:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2d, 0x8, 0x3, 0x8, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x0, 0x20, 0x7, 0x80000001}}) 08:41:03 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x400009c) r2 = add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="935f2725e4a617723918ae74af89d778a17c12a3f77a838fd0210bc9776a3e2ec0ab4eacad277a0e7b80ea7f2a5408701a9529779897234530f52e1066a9997a20dc06d07a6409d03ffc6676661560e74abadf1d9ffc757279a613adb42c989091eee26e493fecfe216bacf5bd9f92efb819396c58002269ae1778bed78d152123a3aeb6c55dfd5324f139aa072169918b9d76db81348b222ef6f25aa36c65169f03a6281f5072dad2ebddb2f8ba85b46f", 0xb1, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="d78df1186bbaf5c9b81fec09246eeb3586276aaddb2ff5192c4e9d476d289974c01d84a25940591cf034aa100478b8f0dc58225764f645f3cb314e4cd7ea65eb5f6fdbd410c1022d7a3b55152cf3d609c5966d2861b4da80fdc4ac1614667eae2e1312ffb98bc758689b1916d21ec26e8582b53c9b2e68e68c79e0bc789d5402f944fb6e24196db4126ae3b7ded535b6591ff63aabb78685", 0x98, 0xfffffffffffffffd) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, r3) add_key$fscrypt_v1(0x0, &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "15758745d9e7339eff661d2ca42e77ec341bbec250a1509b8addd99e3a39ba0cd06499677a06686a0de2c063caf15f254192c60eb75a8925492ff91ab9fc294c"}, 0x48, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r3, 0x0, 0x2f}, &(0x7f00000005c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d626c616b6532732d3132382d67656e657269630000f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd7fc5229fbb3bde0c2cbc32d9a4880b3802806d7a5b2321a6a609dee1041aee04fda21a693a8c0c451d27a3f086360aae0541ee0642797d9a4371718deb019a6ae3cf1ecb40fc9f64484af4f1fdaba5755c216181147ff9d63a7c1460555605159b3fa050cd5d1e59adce16585e62b63fb023e43944d6480d93381df695afd2b1de8a01ea163c5b36"], 0x0, &(0x7f0000000880)=""/47) keyctl$search(0xa, r2, &(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x2}, r3) 08:41:03 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:04 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5421, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r1 = socket(0x25, 0xa, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x2f, 0x7, 0x6, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x20, 0x40, 0xea9, 0xfffffffb}}) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000000)=0xd0, 0x4) 08:41:04 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x400009c) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="935f2725e4a617723918ae74af89d778a17c12a3f77a838fd0210bc9776a3e2ec0ab4eacad277a0e7b80ea7f2a5408701a9529779897234530f52e1066a9997a20dc06d07a6409d03ffc6676661560e74abadf1d9ffc757279a613adb42c989091eee26e493fecfe216bacf5bd9f92efb819396c58002269ae1778bed78d152123a3aeb6c55dfd5324f139aa072169918b9d76db81348b222ef6f25aa36c65169f03a6281f5072dad2ebddb2f8ba85b46f", 0xb1, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="d78df1186bbaf5c9b81fec09246eeb3586276aaddb2ff5192c4e9d476d289974c01d84a25940591cf034aa100478b8f0dc58225764f645f3cb314e4cd7ea65eb5f6fdbd410c1022d7a3b55152cf3d609c5966d2861b4da80fdc4ac1614667eae2e1312ffb98bc758689b1916d21ec26e8582b53c9b2e68e68c79e0bc789d5402f944fb6e24196db4126ae3b7ded535b6591ff63aabb78685", 0x98, 0xfffffffffffffffd) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, r2) add_key$fscrypt_v1(0x0, &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "15758745d9e7339eff661d2ca42e77ec341bbec250a1509b8addd99e3a39ba0cd06499677a06686a0de2c063caf15f254192c60eb75a8925492ff91ab9fc294c"}, 0x48, r2) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r2, 0x0, 0x2f}, &(0x7f00000005c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d626c616b6532732d3132382d67656e657269630000f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd7fc5229fbb3bde0c2cbc32d9a4880b3802806d7a5b2321a6a609dee1041aee04fda21a693a8c0c451d27a3f086360aae0541ee0642797d9a4371718deb019a6ae3cf1ecb40fc9f64484af4f1fdaba5755c216181147ff9d63a7c1460555605159b3fa050cd5d1e59adce16585e62b63fb023e43944d6480d93381df695afd2b1de8a01ea163c5b36"], 0x0, &(0x7f0000000880)=""/47) [ 2317.155257][T29173] usb 4-1: new high-speed USB device number 67 using dummy_hcd 08:41:04 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2317.272181][T31825] usb 5-1: new high-speed USB device number 88 using dummy_hcd 08:41:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5421, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r1 = socket(0x25, 0xa, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x2f, 0x7, 0x6, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x20, 0x40, 0xea9, 0xfffffffb}}) 08:41:04 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2317.693616][T29173] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2317.703877][T29173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2317.712196][T29173] usb 4-1: Product: syz [ 2317.716530][T29173] usb 4-1: Manufacturer: syz [ 2317.721300][T29173] usb 4-1: SerialNumber: syz [ 2317.803335][T31825] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2317.805762][T29173] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2317.816216][T31825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2317.816333][T31825] usb 5-1: Product: syz [ 2317.816421][T31825] usb 5-1: Manufacturer: syz [ 2317.816510][T31825] usb 5-1: SerialNumber: syz [ 2317.874501][T31825] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2318.412364][T15914] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2318.502381][T15553] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2318.834675][T29173] usb 4-1: USB disconnect, device number 67 [ 2318.928880][T15829] usb 5-1: USB disconnect, device number 88 08:41:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2d, 0x8, 0x3, 0x8, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x0, 0x20, 0x7, 0x80000001}}) 08:41:06 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x400009c) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="935f2725e4a617723918ae74af89d778a17c12a3f77a838fd0210bc9776a3e2ec0ab4eacad277a0e7b80ea7f2a5408701a9529779897234530f52e1066a9997a20dc06d07a6409d03ffc6676661560e74abadf1d9ffc757279a613adb42c989091eee26e493fecfe216bacf5bd9f92efb819396c58002269ae1778bed78d152123a3aeb6c55dfd5324f139aa072169918b9d76db81348b222ef6f25aa36c65169f03a6281f5072dad2ebddb2f8ba85b46f", 0xb1, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="d78df1186bbaf5c9b81fec09246eeb3586276aaddb2ff5192c4e9d476d289974c01d84a25940591cf034aa100478b8f0dc58225764f645f3cb314e4cd7ea65eb5f6fdbd410c1022d7a3b55152cf3d609c5966d2861b4da80fdc4ac1614667eae2e1312ffb98bc758689b1916d21ec26e8582b53c9b2e68e68c79e0bc789d5402f944fb6e24196db4126ae3b7ded535b6591ff63aabb78685", 0x98, 0xfffffffffffffffd) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, r2) add_key$fscrypt_v1(0x0, &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "15758745d9e7339eff661d2ca42e77ec341bbec250a1509b8addd99e3a39ba0cd06499677a06686a0de2c063caf15f254192c60eb75a8925492ff91ab9fc294c"}, 0x48, r2) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r2, 0x0, 0x2f}, &(0x7f00000005c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d626c616b6532732d3132382d67656e657269630000f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd7fc5229fbb3bde0c2cbc32d9a4880b3802806d7a5b2321a6a609dee1041aee04fda21a693a8c0c451d27a3f086360aae0541ee0642797d9a4371718deb019a6ae3cf1ecb40fc9f64484af4f1fdaba5755c216181147ff9d63a7c1460555605159b3fa050cd5d1e59adce16585e62b63fb023e43944d6480d93381df695afd2b1de8a01ea163c5b36"], 0x0, &(0x7f0000000880)=""/47) 08:41:06 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:06 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2d, 0x8, 0x3, 0x8, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x0, 0x20, 0x7, 0x80000001}}) 08:41:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5421, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r1 = socket(0x25, 0xa, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 08:41:06 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0x0, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2319.472353][T15914] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2319.479844][T15914] ath9k_htc: Failed to initialize the device [ 2319.488304][T29173] usb 4-1: ath9k_htc: USB layer deinitialized [ 2319.542799][T15553] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2319.550305][T15553] ath9k_htc: Failed to initialize the device 08:41:06 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x400009c) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="935f2725e4a617723918ae74af89d778a17c12a3f77a838fd0210bc9776a3e2ec0ab4eacad277a0e7b80ea7f2a5408701a9529779897234530f52e1066a9997a20dc06d07a6409d03ffc6676661560e74abadf1d9ffc757279a613adb42c989091eee26e493fecfe216bacf5bd9f92efb819396c58002269ae1778bed78d152123a3aeb6c55dfd5324f139aa072169918b9d76db81348b222ef6f25aa36c65169f03a6281f5072dad2ebddb2f8ba85b46f", 0xb1, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="d78df1186bbaf5c9b81fec09246eeb3586276aaddb2ff5192c4e9d476d289974c01d84a25940591cf034aa100478b8f0dc58225764f645f3cb314e4cd7ea65eb5f6fdbd410c1022d7a3b55152cf3d609c5966d2861b4da80fdc4ac1614667eae2e1312ffb98bc758689b1916d21ec26e8582b53c9b2e68e68c79e0bc789d5402f944fb6e24196db4126ae3b7ded535b6591ff63aabb78685", 0x98, 0xfffffffffffffffd) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, r2) add_key$fscrypt_v1(0x0, &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "15758745d9e7339eff661d2ca42e77ec341bbec250a1509b8addd99e3a39ba0cd06499677a06686a0de2c063caf15f254192c60eb75a8925492ff91ab9fc294c"}, 0x48, r2) [ 2319.626143][T15829] usb 5-1: ath9k_htc: USB layer deinitialized 08:41:06 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:06 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0x0, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5421, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r1 = socket(0x25, 0xa, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:41:07 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0x0, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:07 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x400009c) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="935f2725e4a617723918ae74af89d778a17c12a3f77a838fd0210bc9776a3e2ec0ab4eacad277a0e7b80ea7f2a5408701a9529779897234530f52e1066a9997a20dc06d07a6409d03ffc6676661560e74abadf1d9ffc757279a613adb42c989091eee26e493fecfe216bacf5bd9f92efb819396c58002269ae1778bed78d152123a3aeb6c55dfd5324f139aa072169918b9d76db81348b222ef6f25aa36c65169f03a6281f5072dad2ebddb2f8ba85b46f", 0xb1, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="d78df1186bbaf5c9b81fec09246eeb3586276aaddb2ff5192c4e9d476d289974c01d84a25940591cf034aa100478b8f0dc58225764f645f3cb314e4cd7ea65eb5f6fdbd410c1022d7a3b55152cf3d609c5966d2861b4da80fdc4ac1614667eae2e1312ffb98bc758689b1916d21ec26e8582b53c9b2e68e68c79e0bc789d5402f944fb6e24196db4126ae3b7ded535b6591ff63aabb78685", 0x98, 0xfffffffffffffffd) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, r2) [ 2320.072098][T29173] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2320.202936][T15829] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2320.592364][T29173] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2320.601624][T29173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.610174][T29173] usb 4-1: Product: syz [ 2320.614664][T29173] usb 4-1: Manufacturer: syz [ 2320.619446][T29173] usb 4-1: SerialNumber: syz [ 2320.672928][T29173] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2320.753586][T15829] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2320.762999][T15829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.771167][T15829] usb 5-1: Product: syz [ 2320.775633][T15829] usb 5-1: Manufacturer: syz [ 2320.780419][T15829] usb 5-1: SerialNumber: syz [ 2320.834213][T15829] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2321.282428][T15914] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2321.422236][T29173] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2321.729891][T15829] usb 4-1: USB disconnect, device number 68 [ 2321.842422][ T404] usb 5-1: USB disconnect, device number 89 08:41:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2d, 0x8, 0x3, 0x8, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x0, 0x20, 0x7, 0x80000001}}) 08:41:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5421, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) socket(0x25, 0xa, 0x7) 08:41:09 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2322.343054][T15914] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2322.350554][T15914] ath9k_htc: Failed to initialize the device [ 2322.358188][T15829] usb 4-1: ath9k_htc: USB layer deinitialized 08:41:09 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2d, 0x8, 0x3, 0x8, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x0, 0x20, 0x7, 0x80000001}}) 08:41:09 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x0, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:09 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x400009c) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="935f2725e4a617723918ae74af89d778a17c12a3f77a838fd0210bc9776a3e2ec0ab4eacad277a0e7b80ea7f2a5408701a9529779897234530f52e1066a9997a20dc06d07a6409d03ffc6676661560e74abadf1d9ffc757279a613adb42c989091eee26e493fecfe216bacf5bd9f92efb819396c58002269ae1778bed78d152123a3aeb6c55dfd5324f139aa072169918b9d76db81348b222ef6f25aa36c65169f03a6281f5072dad2ebddb2f8ba85b46f", 0xb1, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="d78df1186bbaf5c9b81fec09246eeb3586276aaddb2ff5192c4e9d476d289974c01d84a25940591cf034aa100478b8f0dc58225764f645f3cb314e4cd7ea65eb5f6fdbd410c1022d7a3b55152cf3d609c5966d2861b4da80fdc4ac1614667eae2e1312ffb98bc758689b1916d21ec26e8582b53c9b2e68e68c79e0bc789d5402f944fb6e24196db4126ae3b7ded535b6591ff63aabb78685", 0x98, 0xfffffffffffffffd) 08:41:09 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x25, 0xa, 0x7) 08:41:09 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2322.502964][T29173] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2322.510448][T29173] ath9k_htc: Failed to initialize the device [ 2322.564771][ T404] usb 5-1: ath9k_htc: USB layer deinitialized 08:41:09 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x400009c) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="935f2725e4a617723918ae74af89d778a17c12a3f77a838fd0210bc9776a3e2ec0ab4eacad277a0e7b80ea7f2a5408701a9529779897234530f52e1066a9997a20dc06d07a6409d03ffc6676661560e74abadf1d9ffc757279a613adb42c989091eee26e493fecfe216bacf5bd9f92efb819396c58002269ae1778bed78d152123a3aeb6c55dfd5324f139aa072169918b9d76db81348b222ef6f25aa36c65169f03a6281f5072dad2ebddb2f8ba85b46f", 0xb1, 0xfffffffffffffffd) 08:41:09 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x0, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:09 executing program 2: socket(0x25, 0xa, 0x7) [ 2322.862107][T15829] usb 4-1: new high-speed USB device number 69 using dummy_hcd 08:41:09 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x400009c) [ 2323.052883][ T404] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2323.382381][T15829] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2323.392066][T15829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.400263][T15829] usb 4-1: Product: syz [ 2323.404724][T15829] usb 4-1: Manufacturer: syz [ 2323.409501][T15829] usb 4-1: SerialNumber: syz [ 2323.455122][T15829] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2323.572414][ T404] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2323.582254][ T404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.590423][ T404] usb 5-1: Product: syz [ 2323.594856][ T404] usb 5-1: Manufacturer: syz [ 2323.599619][ T404] usb 5-1: SerialNumber: syz [ 2323.658699][ T404] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2324.052432][T15914] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2324.232251][T29173] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2324.497237][ T404] usb 4-1: USB disconnect, device number 69 [ 2324.652960][T15829] usb 5-1: USB disconnect, device number 90 08:41:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) 08:41:12 executing program 2: socket(0x0, 0xa, 0x7) 08:41:12 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2325.153048][T15914] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2325.160542][T15914] ath9k_htc: Failed to initialize the device [ 2325.173425][ T404] usb 4-1: ath9k_htc: USB layer deinitialized 08:41:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) 08:41:12 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x0, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:12 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) 08:41:12 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2325.301966][T29173] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2325.309659][T29173] ath9k_htc: Failed to initialize the device [ 2325.363269][T15829] usb 5-1: ath9k_htc: USB layer deinitialized 08:41:12 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x0, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:12 executing program 1: add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, 0x0) 08:41:12 executing program 2: socket(0x0, 0xa, 0x7) [ 2325.542143][ T404] usb 4-1: new high-speed USB device number 70 using dummy_hcd 08:41:12 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:12 executing program 1: add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, 0x0) [ 2325.923572][T15829] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2326.072473][ T404] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2326.082841][ T404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2326.091056][ T404] usb 4-1: Product: syz [ 2326.095535][ T404] usb 4-1: Manufacturer: syz [ 2326.100321][ T404] usb 4-1: SerialNumber: syz [ 2326.169227][ T404] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2326.442957][T15829] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2326.452496][T15829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2326.460678][T15829] usb 5-1: Product: syz [ 2326.465375][T15829] usb 5-1: Manufacturer: syz [ 2326.470131][T15829] usb 5-1: SerialNumber: syz [ 2326.514941][T15829] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2326.752309][T15914] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2327.092206][T29173] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2327.170832][T15553] usb 4-1: USB disconnect, device number 70 [ 2327.526095][T15829] usb 5-1: USB disconnect, device number 91 08:41:14 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) pipe2$watch_queue(&(0x7f0000002c40), 0x80) 08:41:14 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x0, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:14 executing program 1: add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, 0x0) [ 2327.781987][T15914] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2327.789481][T15914] ath9k_htc: Failed to initialize the device [ 2327.797311][T15553] usb 4-1: ath9k_htc: USB layer deinitialized 08:41:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) pipe2$watch_queue(&(0x7f0000002c40), 0x80) 08:41:15 executing program 2: socket(0x0, 0xa, 0x7) 08:41:15 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:15 executing program 1: r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) 08:41:15 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x0, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2328.182512][T29173] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2328.190099][T29173] ath9k_htc: Failed to initialize the device 08:41:15 executing program 1: r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) [ 2328.247088][T15829] usb 5-1: ath9k_htc: USB layer deinitialized 08:41:15 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2328.344213][T15553] usb 4-1: new high-speed USB device number 71 using dummy_hcd 08:41:15 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:15 executing program 2: socket(0x25, 0x0, 0x7) [ 2328.812275][T15829] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2328.892389][T15553] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2328.901656][T15553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2328.909989][T15553] usb 4-1: Product: syz [ 2328.914497][T15553] usb 4-1: Manufacturer: syz [ 2328.919247][T15553] usb 4-1: SerialNumber: syz [ 2328.964565][T15553] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2329.332423][T15829] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2329.341945][T15829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.350149][T15829] usb 5-1: Product: syz [ 2329.354627][T15829] usb 5-1: Manufacturer: syz [ 2329.359408][T15829] usb 5-1: SerialNumber: syz [ 2329.405355][T15829] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2329.595945][T29952] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2329.972176][T29173] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2330.028088][T15829] usb 4-1: USB disconnect, device number 71 [ 2330.412457][T15914] usb 5-1: USB disconnect, device number 92 08:41:17 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:17 executing program 1: r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) 08:41:17 executing program 2: socket(0x25, 0x0, 0x0) [ 2330.662034][T29952] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2330.669543][T29952] ath9k_htc: Failed to initialize the device [ 2330.677616][T15829] usb 4-1: ath9k_htc: USB layer deinitialized 08:41:17 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:17 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}]}, 0x24}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) pipe2$watch_queue(&(0x7f0000002c40), 0x80) 08:41:17 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:17 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) 08:41:18 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2331.062981][T29173] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2331.070641][T29173] ath9k_htc: Failed to initialize the device 08:41:18 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) 08:41:18 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}]}, 0x24}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2331.146497][T15914] usb 5-1: ath9k_htc: USB layer deinitialized [ 2331.157875][T15829] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2331.342178][T15538] usb 3-1: new high-speed USB device number 119 using dummy_hcd 08:41:18 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2331.582632][T15914] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2331.683480][T15829] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2331.693534][T15829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.701700][T15829] usb 4-1: Product: syz [ 2331.706251][T15829] usb 4-1: Manufacturer: syz [ 2331.711024][T15829] usb 4-1: SerialNumber: syz [ 2331.754284][T15829] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2331.942519][T15538] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2331.954304][T15538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.962883][T15538] usb 3-1: Product: syz [ 2331.967235][T15538] usb 3-1: Manufacturer: syz [ 2331.972076][T15538] usb 3-1: SerialNumber: syz [ 2332.025155][T15538] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2332.112686][T15914] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2332.122182][T15914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2332.130372][T15914] usb 5-1: Product: syz [ 2332.134847][T15914] usb 5-1: Manufacturer: syz [ 2332.139655][T15914] usb 5-1: SerialNumber: syz [ 2332.194626][T15914] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2332.383223][ T404] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2332.712272][T29952] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2332.782253][T29173] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2332.816345][T15538] usb 4-1: USB disconnect, device number 72 [ 2333.153282][T15914] usb 3-1: USB disconnect, device number 119 [ 2333.219521][T31825] usb 5-1: USB disconnect, device number 93 08:41:20 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:41:20 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b", 0x20}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) 08:41:20 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}]}, 0x24}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2333.463578][ T404] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2333.471184][ T404] ath9k_htc: Failed to initialize the device [ 2333.478873][T15538] usb 4-1: ath9k_htc: USB layer deinitialized 08:41:20 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:20 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:20 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:20 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) 08:41:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) pipe2$watch_queue(&(0x7f0000002c40), 0x80) [ 2333.792130][T29952] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2333.799724][T29952] ath9k_htc: Failed to initialize the device [ 2333.807588][T15914] usb 3-1: ath9k_htc: USB layer deinitialized [ 2333.862457][T29173] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2333.869956][T29173] ath9k_htc: Failed to initialize the device [ 2333.902322][T15538] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2333.913593][T31825] usb 5-1: ath9k_htc: USB layer deinitialized 08:41:21 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:21 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) 08:41:21 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2334.232079][T15914] usb 3-1: new high-speed USB device number 120 using dummy_hcd 08:41:21 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) [ 2334.473191][T15538] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2334.482782][T15538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.490984][T15538] usb 4-1: Product: syz [ 2334.495687][T15538] usb 4-1: Manufacturer: syz [ 2334.500483][T15538] usb 4-1: SerialNumber: syz [ 2334.604308][T15538] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2334.772467][T15914] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2334.781914][T15914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.790100][T15914] usb 3-1: Product: syz [ 2334.794611][T15914] usb 3-1: Manufacturer: syz [ 2334.799352][T15914] usb 3-1: SerialNumber: syz [ 2334.844307][T15914] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2335.272210][ T531] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2335.442202][ T404] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2335.484600][T29952] usb 4-1: USB disconnect, device number 73 [ 2335.878585][T15538] usb 3-1: USB disconnect, device number 120 08:41:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:41:23 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:23 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0x0, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:23 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b"}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) 08:41:23 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b"}, 0x48, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) 08:41:23 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2336.342521][ T531] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2336.353124][ T531] ath9k_htc: Failed to initialize the device [ 2336.365224][T29952] usb 4-1: ath9k_htc: USB layer deinitialized 08:41:23 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) pipe2$watch_queue(&(0x7f0000002c40), 0x80) 08:41:23 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0x0, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:23 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b"}, 0x48, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) 08:41:23 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2336.501932][ T404] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2336.509520][ T404] ath9k_htc: Failed to initialize the device [ 2336.548636][T15538] usb 3-1: ath9k_htc: USB layer deinitialized 08:41:23 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0x0, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2336.782483][T29952] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2337.062185][T15538] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2337.312587][T29952] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2337.322041][T29952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.330205][T29952] usb 4-1: Product: syz [ 2337.334845][T29952] usb 4-1: Manufacturer: syz [ 2337.339629][T29952] usb 4-1: SerialNumber: syz [ 2337.395123][T29952] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2337.592618][T15538] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2337.602161][T15538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.610368][T15538] usb 3-1: Product: syz [ 2337.614856][T15538] usb 3-1: Manufacturer: syz [ 2337.619601][T15538] usb 3-1: SerialNumber: syz [ 2337.664664][T15538] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2337.982376][ T531] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2338.197615][T15914] usb 4-1: USB disconnect, device number 74 [ 2338.242948][T15538] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2338.683917][ T404] usb 3-1: USB disconnect, device number 121 08:41:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:41:25 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b"}, 0x48, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!', 0x1, r0) 08:41:25 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:25 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:25 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x0, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:25 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:25 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x0, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2339.062475][ T531] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2339.069986][ T531] ath9k_htc: Failed to initialize the device [ 2339.077682][T15914] usb 4-1: ath9k_htc: USB layer deinitialized 08:41:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:26 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b"}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f0000000080)='!', 0x1, r0) 08:41:26 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:26 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x0, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2339.302370][T15538] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2339.309852][T15538] ath9k_htc: Failed to initialize the device [ 2339.364675][ T404] usb 3-1: ath9k_htc: USB layer deinitialized 08:41:26 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x0, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2339.485901][T15914] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2339.851998][ T404] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2340.042864][T15914] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2340.052227][T15914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.060342][T15914] usb 4-1: Product: syz [ 2340.064793][T15914] usb 4-1: Manufacturer: syz [ 2340.069575][T15914] usb 4-1: SerialNumber: syz [ 2340.124911][T15914] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2340.448770][ T404] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2340.458199][ T404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.466731][ T404] usb 3-1: Product: syz [ 2340.471074][ T404] usb 3-1: Manufacturer: syz [ 2340.475988][ T404] usb 3-1: SerialNumber: syz [ 2340.535057][ T404] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2340.802346][T29173] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2341.016072][ T404] usb 4-1: USB disconnect, device number 75 [ 2341.192366][T15914] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:41:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:28 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b"}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, 0x0, 0x0, r0) 08:41:28 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:28 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:28 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x0, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2341.608725][T15829] usb 3-1: USB disconnect, device number 122 08:41:28 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x0, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:28 executing program 1: add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b"}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0) [ 2341.862590][T29173] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2341.870228][T29173] ath9k_htc: Failed to initialize the device [ 2341.884239][ T404] usb 4-1: ath9k_htc: USB layer deinitialized [ 2341.989799][T29315] usb 5-1: new high-speed USB device number 94 using dummy_hcd 08:41:29 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:29 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:29 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:29 executing program 1: add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b"}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0) [ 2342.269413][T15914] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2342.277162][T15914] ath9k_htc: Failed to initialize the device 08:41:29 executing program 1: add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6b4ac43c7c224b0608916e172d88412fd70750b51d53721d3f0ac2cffb06cc55550f3a8cd5ea64651cea26eea6c1a832250143b8977cb6613bc293f5756dee3b"}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0) [ 2342.319549][T15829] usb 3-1: ath9k_htc: USB layer deinitialized 08:41:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:29 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2342.552941][T29315] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2342.562373][T29315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2342.570574][T29315] usb 5-1: Product: syz [ 2342.575071][T29315] usb 5-1: Manufacturer: syz [ 2342.579855][T29315] usb 5-1: SerialNumber: syz [ 2342.724593][T29315] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2343.362259][T15829] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2343.781072][T29315] usb 5-1: USB disconnect, device number 94 08:41:31 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:31 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:31 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:31 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:31 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2344.422218][T15829] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2344.429845][T15829] ath9k_htc: Failed to initialize the device [ 2344.493277][T29315] usb 5-1: ath9k_htc: USB layer deinitialized 08:41:31 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2344.682037][T15914] usb 2-1: new high-speed USB device number 10 using dummy_hcd 08:41:31 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:31 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:31 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2344.932591][T29315] usb 5-1: new high-speed USB device number 95 using dummy_hcd 08:41:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) [ 2345.222443][T15914] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2345.232561][T15914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.240842][T15914] usb 2-1: Product: syz [ 2345.245301][T15914] usb 2-1: Manufacturer: syz [ 2345.250076][T15914] usb 2-1: SerialNumber: syz [ 2345.334240][T15914] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2345.482526][T29315] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2345.491880][T29315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.500079][T29315] usb 5-1: Product: syz [ 2345.504696][T29315] usb 5-1: Manufacturer: syz [ 2345.509467][T29315] usb 5-1: SerialNumber: syz [ 2345.575260][T29315] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2346.052646][ T404] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2346.263853][T15829] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2346.478472][T15538] usb 2-1: USB disconnect, device number 10 [ 2346.716214][T29315] usb 5-1: USB disconnect, device number 95 [ 2347.142018][ T404] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2347.149441][ T404] ath9k_htc: Failed to initialize the device [ 2347.157670][T15538] usb 2-1: ath9k_htc: USB layer deinitialized 08:41:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:34 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:34 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) [ 2347.312035][T15829] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2347.319521][T15829] ath9k_htc: Failed to initialize the device [ 2347.365406][T29315] usb 5-1: ath9k_htc: USB layer deinitialized 08:41:34 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0x0, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:34 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:34 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0x0, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2347.632426][ T531] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2347.644779][T15538] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2347.682637][ T404] usb 4-1: new high-speed USB device number 76 using dummy_hcd 08:41:34 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:34 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0x0, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2347.902701][T29315] usb 5-1: new high-speed USB device number 96 using dummy_hcd 08:41:35 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2348.153964][ T531] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2348.163719][ T531] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.172284][ T531] usb 3-1: Product: syz [ 2348.176624][ T531] usb 3-1: Manufacturer: syz [ 2348.181386][ T531] usb 3-1: SerialNumber: syz [ 2348.194786][T15538] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2348.204830][T15538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.213371][T15538] usb 2-1: Product: syz [ 2348.217732][T15538] usb 2-1: Manufacturer: syz [ 2348.222649][T15538] usb 2-1: SerialNumber: syz [ 2348.284365][ T404] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2348.293817][ T404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.302137][ T404] usb 4-1: Product: syz [ 2348.306477][ T404] usb 4-1: Manufacturer: syz [ 2348.311252][ T404] usb 4-1: SerialNumber: syz [ 2348.384381][ T404] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2348.397211][ T531] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2348.419486][T15538] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2348.494095][T29315] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2348.503457][T29315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.511648][T29315] usb 5-1: Product: syz [ 2348.516088][T29315] usb 5-1: Manufacturer: syz [ 2348.520881][T29315] usb 5-1: SerialNumber: syz [ 2348.585680][T29315] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2349.022358][ T531] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2349.033316][T15914] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2349.047325][T29952] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2349.222782][ T404] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2349.448457][T29315] usb 3-1: USB disconnect, device number 123 [ 2349.479906][T15829] usb 2-1: USB disconnect, device number 11 [ 2349.530308][T15538] usb 4-1: USB disconnect, device number 76 [ 2349.679690][T29173] usb 5-1: USB disconnect, device number 96 [ 2350.102281][T15914] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2350.102410][T29952] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2350.109691][T15914] ath9k_htc: Failed to initialize the device [ 2350.116725][T29952] ath9k_htc: Failed to initialize the device [ 2350.129898][T15829] usb 2-1: ath9k_htc: USB layer deinitialized [ 2350.131320][ T531] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2350.143881][ T531] ath9k_htc: Failed to initialize the device [ 2350.151217][T15538] usb 4-1: ath9k_htc: USB layer deinitialized [ 2350.151511][T29315] usb 3-1: ath9k_htc: USB layer deinitialized 08:41:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:37 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x0, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:37 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x29, 0x6, 0x6, 0x8, 0x78, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7800, 0x8000, 0x6}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) [ 2350.289654][ T404] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2350.297331][ T404] ath9k_htc: Failed to initialize the device [ 2350.351085][T29173] usb 5-1: ath9k_htc: USB layer deinitialized 08:41:37 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x0, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:37 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:37 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x0, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2350.692351][ T613] usb 4-1: new high-speed USB device number 77 using dummy_hcd 08:41:37 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2350.826103][T29315] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2350.834430][T15829] usb 2-1: new high-speed USB device number 12 using dummy_hcd 08:41:37 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x0, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2350.884902][T29173] usb 5-1: new high-speed USB device number 97 using dummy_hcd 08:41:38 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x0, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2351.283409][ T613] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2351.293379][ T613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.306469][ T613] usb 4-1: Product: syz [ 2351.310813][ T613] usb 4-1: Manufacturer: syz [ 2351.316347][ T613] usb 4-1: SerialNumber: syz [ 2351.407690][ T613] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2351.474481][T29315] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2351.484471][T29315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.492794][T29315] usb 3-1: Product: syz [ 2351.497137][T29315] usb 3-1: Manufacturer: syz [ 2351.506996][T29315] usb 3-1: SerialNumber: syz [ 2351.513847][T15829] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2351.523175][T15829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.531365][T15829] usb 2-1: Product: syz [ 2351.535812][T15829] usb 2-1: Manufacturer: syz [ 2351.540600][T15829] usb 2-1: SerialNumber: syz [ 2351.546954][T29173] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2351.556321][T29173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.564644][T29173] usb 5-1: Product: syz [ 2351.568979][T29173] usb 5-1: Manufacturer: syz [ 2351.573816][T29173] usb 5-1: SerialNumber: syz [ 2351.635090][T15829] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2351.652023][T29173] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2351.669004][T29315] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2352.182717][T15914] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2352.353169][T15829] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2352.373638][T29315] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2352.394577][ T613] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2352.611537][ T531] usb 4-1: USB disconnect, device number 77 [ 2352.800827][ T404] usb 2-1: USB disconnect, device number 12 [ 2352.822461][T29952] usb 5-1: USB disconnect, device number 97 [ 2352.932040][T29173] usb 3-1: USB disconnect, device number 124 [ 2353.222072][T15914] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2353.229542][T15914] ath9k_htc: Failed to initialize the device [ 2353.237565][ T531] usb 4-1: ath9k_htc: USB layer deinitialized 08:41:40 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:40 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(0x0, 0x80) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r7 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r6, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r8 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x20) 08:41:40 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x0, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:40 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:40 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) [ 2353.385096][T15829] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2353.393210][T15829] ath9k_htc: Failed to initialize the device [ 2353.412963][ T404] usb 2-1: ath9k_htc: USB layer deinitialized [ 2353.462605][ T613] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2353.470121][ T613] ath9k_htc: Failed to initialize the device [ 2353.477610][T29315] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2353.485140][T29315] ath9k_htc: Failed to initialize the device [ 2353.495507][T29173] usb 3-1: ath9k_htc: USB layer deinitialized [ 2353.531992][T29952] usb 5-1: ath9k_htc: USB layer deinitialized 08:41:40 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(0x0, 0x80) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r7 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r6, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r8 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x20) 08:41:40 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:40 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(0x0, 0x80) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r7 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r6, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r8 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x20) 08:41:40 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2353.882320][ T531] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2353.964749][T29952] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2353.982596][ T404] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2353.998563][T29173] usb 3-1: new high-speed USB device number 125 using dummy_hcd 08:41:41 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:41 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2354.412990][ T531] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2354.422745][ T531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.430945][ T531] usb 4-1: Product: syz [ 2354.435412][ T531] usb 4-1: Manufacturer: syz [ 2354.440197][ T531] usb 4-1: SerialNumber: syz [ 2354.523070][T29952] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2354.532436][T29952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.540592][T29952] usb 5-1: Product: syz [ 2354.545007][T29952] usb 5-1: Manufacturer: syz [ 2354.549785][T29952] usb 5-1: SerialNumber: syz [ 2354.563419][ T531] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2354.563793][ T404] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2354.585575][ T404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.594516][ T404] usb 2-1: Product: syz [ 2354.598852][ T404] usb 2-1: Manufacturer: syz [ 2354.603682][ T404] usb 2-1: SerialNumber: syz [ 2354.614258][T29173] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2354.623772][T29173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.632107][T29173] usb 3-1: Product: syz [ 2354.636708][T29173] usb 3-1: Manufacturer: syz [ 2354.641472][T29173] usb 3-1: SerialNumber: syz [ 2354.666481][T29952] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2354.704673][T29173] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2354.773545][ T404] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2355.172702][T31825] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2355.293974][ T531] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2355.522326][T29173] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2355.544424][T15829] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2355.609189][ T404] usb 4-1: USB disconnect, device number 78 [ 2355.781116][T15538] usb 5-1: USB disconnect, device number 98 [ 2355.962496][T29952] usb 3-1: USB disconnect, device number 125 [ 2356.026266][ T516] usb 2-1: USB disconnect, device number 13 08:41:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40), 0x80) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:43 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:43 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2356.262032][T31825] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2356.269745][T31825] ath9k_htc: Failed to initialize the device [ 2356.277465][ T404] usb 4-1: ath9k_htc: USB layer deinitialized [ 2356.342608][ T531] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2356.350188][ T531] ath9k_htc: Failed to initialize the device [ 2356.358589][T15538] usb 5-1: ath9k_htc: USB layer deinitialized 08:41:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:43 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:43 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:43 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2356.582050][T15829] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2356.589538][T15829] ath9k_htc: Failed to initialize the device [ 2356.597452][T29173] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2356.599672][ T516] usb 2-1: ath9k_htc: USB layer deinitialized [ 2356.604942][T29173] ath9k_htc: Failed to initialize the device [ 2356.713858][T29952] usb 3-1: ath9k_htc: USB layer deinitialized 08:41:43 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:44 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, 0x0, 0x0) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2356.922005][T15538] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2357.012656][ T404] usb 4-1: new high-speed USB device number 79 using dummy_hcd 08:41:44 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, 0x0, 0x0) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:44 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x0, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2357.213759][T29952] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2357.243163][T31825] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2357.453779][T15538] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2357.463777][T15538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.472103][T15538] usb 5-1: Product: syz [ 2357.476454][T15538] usb 5-1: Manufacturer: syz [ 2357.481254][T15538] usb 5-1: SerialNumber: syz [ 2357.527240][T15538] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2357.588798][ T404] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2357.598247][ T404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.606685][ T404] usb 4-1: Product: syz [ 2357.611032][ T404] usb 4-1: Manufacturer: syz [ 2357.616095][ T404] usb 4-1: SerialNumber: syz [ 2357.674402][ T404] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2357.766921][T29952] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2357.776415][T29952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.785080][T29952] usb 3-1: Product: syz [ 2357.789424][T29952] usb 3-1: Manufacturer: syz [ 2357.794357][T29952] usb 3-1: SerialNumber: syz [ 2357.800686][T31825] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2357.810107][T31825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.818412][T31825] usb 2-1: Product: syz [ 2357.822916][T31825] usb 2-1: Manufacturer: syz [ 2357.827687][T31825] usb 2-1: SerialNumber: syz [ 2357.884417][T31825] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2357.902084][T29952] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2358.192785][ T531] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2358.352301][ T613] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2358.492508][T29952] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2358.514426][T15538] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2358.609771][T29173] usb 5-1: USB disconnect, device number 99 [ 2358.796963][ T404] usb 4-1: USB disconnect, device number 79 [ 2358.920616][T31825] usb 3-1: USB disconnect, device number 126 [ 2358.944459][T15829] usb 2-1: USB disconnect, device number 14 08:41:46 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:46 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, 0x0, 0x0) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:46 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x0, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2359.222297][ T531] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2359.229866][ T531] ath9k_htc: Failed to initialize the device [ 2359.237894][T29173] usb 5-1: ath9k_htc: USB layer deinitialized 08:41:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) [ 2359.382788][ T613] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2359.390295][ T613] ath9k_htc: Failed to initialize the device [ 2359.402468][ T404] usb 4-1: ath9k_htc: USB layer deinitialized 08:41:46 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x0, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:46 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:46 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x0, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2359.549471][T15538] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2359.557193][T15538] ath9k_htc: Failed to initialize the device [ 2359.564727][T29952] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2359.572919][T29952] ath9k_htc: Failed to initialize the device [ 2359.580232][T31825] usb 3-1: ath9k_htc: USB layer deinitialized [ 2359.622550][T15829] usb 2-1: ath9k_htc: USB layer deinitialized [ 2359.722046][T29173] usb 5-1: new high-speed USB device number 100 using dummy_hcd 08:41:46 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:47 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x0, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2359.993342][ T516] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2360.113207][T31825] usb 3-1: new high-speed USB device number 127 using dummy_hcd 08:41:47 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2360.187882][T15829] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2360.242766][T29173] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2360.252174][T29173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2360.260379][T29173] usb 5-1: Product: syz [ 2360.265390][T29173] usb 5-1: Manufacturer: syz [ 2360.270163][T29173] usb 5-1: SerialNumber: syz [ 2360.344852][T29173] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2360.523386][ T516] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2360.532729][ T516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2360.540869][ T516] usb 4-1: Product: syz [ 2360.545357][ T516] usb 4-1: Manufacturer: syz [ 2360.550141][ T516] usb 4-1: SerialNumber: syz [ 2360.605122][ T516] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2360.673867][T31825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2360.683546][T31825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2360.692020][T31825] usb 3-1: Product: syz [ 2360.696379][T31825] usb 3-1: Manufacturer: syz [ 2360.701169][T31825] usb 3-1: SerialNumber: syz [ 2360.738540][T15829] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2360.747976][T15829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2360.756797][T15829] usb 2-1: Product: syz [ 2360.761147][T15829] usb 2-1: Manufacturer: syz [ 2360.766563][T15829] usb 2-1: SerialNumber: syz [ 2360.779693][T31825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2360.814966][T15829] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2360.992783][ T404] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2361.233182][ T724] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2361.343210][ T516] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2361.409794][T15829] usb 5-1: USB disconnect, device number 100 [ 2361.588985][T29173] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2361.681176][T31825] usb 4-1: USB disconnect, device number 80 [ 2361.793319][T29952] usb 3-1: USB disconnect, device number 127 08:41:48 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:48 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x0, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:48 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, 0x0, 0x0, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2362.022180][ T404] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2362.029681][ T404] ath9k_htc: Failed to initialize the device [ 2362.038078][T15829] usb 5-1: ath9k_htc: USB layer deinitialized [ 2362.147727][ T613] usb 2-1: USB disconnect, device number 15 [ 2362.264101][ T724] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2362.272113][ T724] ath9k_htc: Failed to initialize the device [ 2362.280083][T31825] usb 4-1: ath9k_htc: USB layer deinitialized 08:41:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40), 0x80) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:49 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x0, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2362.433900][ T516] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2362.441418][ T516] ath9k_htc: Failed to initialize the device [ 2362.450443][T29952] usb 3-1: ath9k_htc: USB layer deinitialized [ 2362.542486][T15829] usb 5-1: new high-speed USB device number 101 using dummy_hcd 08:41:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:41:49 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, 0x0, 0x0, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40), 0x80) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:49 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x0, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2362.662111][T29173] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2362.674575][T29173] ath9k_htc: Failed to initialize the device [ 2362.719484][ T613] usb 2-1: ath9k_htc: USB layer deinitialized 08:41:49 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x0, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:49 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, 0x0, 0x0, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2362.952603][T29952] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2363.002543][ T724] usb 4-1: new high-speed USB device number 81 using dummy_hcd 08:41:50 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2363.092862][T15829] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2363.102452][T15829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2363.110643][T15829] usb 5-1: Product: syz [ 2363.115104][T15829] usb 5-1: Manufacturer: syz [ 2363.119875][T15829] usb 5-1: SerialNumber: syz [ 2363.192076][T15829] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2363.292060][ T613] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2363.492738][T29952] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2363.502251][T29952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2363.510424][T29952] usb 3-1: Product: syz [ 2363.514896][T29952] usb 3-1: Manufacturer: syz [ 2363.519644][T29952] usb 3-1: SerialNumber: syz [ 2363.562483][ T724] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2363.572215][ T724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2363.580421][ T724] usb 4-1: Product: syz [ 2363.585291][ T724] usb 4-1: Manufacturer: syz [ 2363.590061][ T724] usb 4-1: SerialNumber: syz [ 2363.603617][T29952] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2363.694835][ T724] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2363.822867][ T404] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2363.882458][ T613] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2363.892353][ T613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2363.900591][ T613] usb 2-1: Product: syz [ 2363.905098][ T613] usb 2-1: Manufacturer: syz [ 2363.909939][ T613] usb 2-1: SerialNumber: syz [ 2363.964878][ T613] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2364.192763][ T516] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2364.253073][ T724] usb 5-1: USB disconnect, device number 101 [ 2364.292288][T29952] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2364.602337][T29173] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2364.634879][T31825] usb 3-1: USB disconnect, device number 2 08:41:51 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) [ 2364.738915][ T613] usb 4-1: USB disconnect, device number 81 08:41:51 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:51 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2364.836475][T15829] usb 2-1: USB disconnect, device number 16 [ 2364.905835][ T404] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2364.913410][ T404] ath9k_htc: Failed to initialize the device [ 2364.924579][ T724] usb 5-1: ath9k_htc: USB layer deinitialized 08:41:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:52 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2365.222797][ T516] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2365.230305][ T516] ath9k_htc: Failed to initialize the device [ 2365.242499][T31825] usb 3-1: ath9k_htc: USB layer deinitialized [ 2365.382916][T29952] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2365.390465][T29952] ath9k_htc: Failed to initialize the device [ 2365.398511][ T613] usb 4-1: ath9k_htc: USB layer deinitialized 08:41:52 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:41:52 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:52 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2365.468518][ T724] usb 5-1: new high-speed USB device number 102 using dummy_hcd 08:41:52 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, 0x0, 0x0, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:52 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2365.702544][T29173] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2365.710032][T29173] ath9k_htc: Failed to initialize the device [ 2365.765529][T15829] usb 2-1: ath9k_htc: USB layer deinitialized [ 2365.772662][T31825] usb 3-1: new high-speed USB device number 3 using dummy_hcd 08:41:52 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, 0x0, 0x0, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2365.982714][ T613] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2366.013085][ T724] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2366.022677][ T724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.030876][ T724] usb 5-1: Product: syz [ 2366.035355][ T724] usb 5-1: Manufacturer: syz [ 2366.040130][ T724] usb 5-1: SerialNumber: syz [ 2366.105283][ T724] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2366.163048][T15829] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2366.322378][T31825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2366.332119][T31825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.340312][T31825] usb 3-1: Product: syz [ 2366.344751][T31825] usb 3-1: Manufacturer: syz [ 2366.349498][T31825] usb 3-1: SerialNumber: syz [ 2366.395944][T31825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2366.572731][ T613] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2366.582216][ T613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.590389][ T613] usb 4-1: Product: syz [ 2366.595019][ T613] usb 4-1: Manufacturer: syz [ 2366.599800][ T613] usb 4-1: SerialNumber: syz [ 2366.664812][ T613] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2366.713571][T15538] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2366.764839][T15829] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2366.774837][T15829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.783157][T15829] usb 2-1: Product: syz [ 2366.787488][T15829] usb 2-1: Manufacturer: syz [ 2366.792342][T15829] usb 2-1: SerialNumber: syz [ 2366.844944][T15829] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2366.994904][ T724] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2367.128710][T15829] usb 5-1: USB disconnect, device number 102 [ 2367.312737][T29315] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2367.413228][ T613] usb 3-1: USB disconnect, device number 3 [ 2367.492566][T29173] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:41:54 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:54 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:54 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, 0x0, 0x0, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2367.703126][T29952] usb 2-1: USB disconnect, device number 17 [ 2367.768393][T31825] usb 4-1: USB disconnect, device number 82 [ 2367.788333][T15538] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2367.796265][T15538] ath9k_htc: Failed to initialize the device [ 2367.810630][T15829] usb 5-1: ath9k_htc: USB layer deinitialized 08:41:55 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:55 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2368.022131][ T724] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2368.029697][ T724] ath9k_htc: Failed to initialize the device [ 2368.038113][ T613] usb 3-1: ath9k_htc: USB layer deinitialized 08:41:55 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 08:41:55 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}], 0x1, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:55 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:55 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0x0, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2368.342071][T29315] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2368.349581][T29315] ath9k_htc: Failed to initialize the device [ 2368.358315][T31825] usb 4-1: ath9k_htc: USB layer deinitialized 08:41:55 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) [ 2368.432915][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 2368.439499][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 2368.571976][ T613] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2368.582400][T29173] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2368.589984][T29173] ath9k_htc: Failed to initialize the device 08:41:55 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}], 0x1, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:55 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0x0, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2368.639186][T29952] usb 2-1: ath9k_htc: USB layer deinitialized 08:41:55 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}], 0x1, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:55 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0x0, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2368.973401][T31825] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2369.031992][T29952] usb 2-1: new high-speed USB device number 18 using dummy_hcd 08:41:56 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x0, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2369.113253][ T613] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2369.127379][ T613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2369.136249][ T613] usb 3-1: Product: syz [ 2369.140592][ T613] usb 3-1: Manufacturer: syz [ 2369.145446][ T613] usb 3-1: SerialNumber: syz [ 2369.225375][ T613] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2369.513594][T31825] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2369.523067][T31825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2369.533738][T31825] usb 4-1: Product: syz [ 2369.538077][T31825] usb 4-1: Manufacturer: syz [ 2369.543237][T31825] usb 4-1: SerialNumber: syz [ 2369.582752][T29952] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2369.592133][T29952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2369.600331][T29952] usb 2-1: Product: syz [ 2369.604845][T29952] usb 2-1: Manufacturer: syz [ 2369.609609][T29952] usb 2-1: SerialNumber: syz [ 2369.687203][T31825] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2369.714333][T29952] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2369.872870][T15829] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2370.272326][ T724] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2370.291004][T29173] usb 3-1: USB disconnect, device number 4 [ 2370.314353][ T516] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2370.510891][T29315] usb 2-1: USB disconnect, device number 18 [ 2370.705595][ T613] usb 4-1: USB disconnect, device number 83 08:41:57 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:57 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {0x0}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2370.916126][T15829] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2370.923756][T15829] ath9k_htc: Failed to initialize the device [ 2370.937226][T29173] usb 3-1: ath9k_htc: USB layer deinitialized 08:41:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:58 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:58 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:58 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x0, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:41:58 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {0x0}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2371.302008][ T724] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2371.309675][ T724] ath9k_htc: Failed to initialize the device [ 2371.317218][ T613] usb 4-1: ath9k_htc: USB layer deinitialized [ 2371.374041][T29173] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2371.382078][ T516] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2371.389897][ T516] ath9k_htc: Failed to initialize the device 08:41:58 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x0, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2371.439520][T29315] usb 2-1: ath9k_htc: USB layer deinitialized 08:41:58 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {0x0}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:41:58 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:41:58 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x0, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2371.753344][ T613] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2371.933895][T29173] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2371.943262][T29173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2371.951466][T29173] usb 3-1: Product: syz [ 2371.955912][T29173] usb 3-1: Manufacturer: syz [ 2371.960683][T29173] usb 3-1: SerialNumber: syz [ 2372.015287][T29173] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2372.117442][T29315] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2372.302813][ T613] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2372.312384][ T613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.320577][ T613] usb 4-1: Product: syz [ 2372.325061][ T613] usb 4-1: Manufacturer: syz [ 2372.329829][ T613] usb 4-1: SerialNumber: syz [ 2372.385796][ T613] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2372.692909][T15829] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2372.719349][T29315] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2372.729007][T29315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.737372][T29315] usb 5-1: Product: syz [ 2372.741711][T29315] usb 5-1: Manufacturer: syz [ 2372.747215][T29315] usb 5-1: SerialNumber: syz [ 2372.808916][T29315] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2373.092815][T29173] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2373.124169][ T724] usb 3-1: USB disconnect, device number 5 [ 2373.502535][ T613] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2373.523732][ T516] usb 4-1: USB disconnect, device number 84 08:42:00 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:00 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000640)=""/144, 0x90}], 0x1, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:00 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x0, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) [ 2373.715346][ T531] usb 5-1: USB disconnect, device number 103 [ 2373.782381][T15829] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2373.790099][T15829] ath9k_htc: Failed to initialize the device [ 2373.797912][ T724] usb 3-1: ath9k_htc: USB layer deinitialized 08:42:01 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:01 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000640)=""/144, 0x90}], 0x1, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:01 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x0, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:01 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2374.182420][T29173] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2374.190033][T29173] ath9k_htc: Failed to initialize the device [ 2374.197512][ T516] usb 4-1: ath9k_htc: USB layer deinitialized 08:42:01 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:01 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000640)=""/144, 0x90}], 0x1, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:01 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:01 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2374.592392][ T613] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2374.600063][ T613] ath9k_htc: Failed to initialize the device [ 2374.623920][ T531] usb 5-1: ath9k_htc: USB layer deinitialized 08:42:01 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:01 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:01 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:02 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2374.931935][ T516] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2375.032050][ T531] usb 5-1: new high-speed USB device number 104 using dummy_hcd 08:42:02 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:02 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:02 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2375.453840][ T516] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2375.463502][ T516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2375.471704][ T516] usb 2-1: Product: syz [ 2375.476193][ T516] usb 2-1: Manufacturer: syz [ 2375.480960][ T516] usb 2-1: SerialNumber: syz [ 2375.544762][ T516] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2375.583758][ T531] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2375.593333][ T531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2375.601529][ T531] usb 5-1: Product: syz [ 2375.606205][ T531] usb 5-1: Manufacturer: syz [ 2375.610979][ T531] usb 5-1: SerialNumber: syz [ 2375.665100][ T531] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2376.142490][ T724] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2376.242174][ T516] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2376.449457][ T531] usb 5-1: USB disconnect, device number 104 [ 2376.573035][ T613] usb 2-1: USB disconnect, device number 19 08:42:04 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:04 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:04 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:04 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, 0x0, 0x0, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:04 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:04 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x8, &(0x7f0000000180)=[{0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2377.222087][ T724] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2377.229582][ T724] ath9k_htc: Failed to initialize the device [ 2377.237732][ T613] usb 2-1: ath9k_htc: USB layer deinitialized [ 2377.302190][ T516] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2377.313191][ T516] ath9k_htc: Failed to initialize the device [ 2377.329243][ T531] usb 5-1: ath9k_htc: USB layer deinitialized 08:42:04 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, 0x0, 0x0, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:04 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x0, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2377.502301][T29173] usb 3-1: new high-speed USB device number 6 using dummy_hcd 08:42:04 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, 0x0, 0x0, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:04 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x0, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2377.724575][ T531] usb 5-1: new high-speed USB device number 105 using dummy_hcd 08:42:04 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) [ 2377.834455][ T613] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2378.043767][T29173] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2378.053143][T29173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.061392][T29173] usb 3-1: Product: syz [ 2378.065902][T29173] usb 3-1: Manufacturer: syz [ 2378.070731][T29173] usb 3-1: SerialNumber: syz [ 2378.133455][T29173] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2378.243388][T15829] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2378.253063][ T531] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2378.262748][ T531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.270934][ T531] usb 5-1: Product: syz [ 2378.275816][ T531] usb 5-1: Manufacturer: syz [ 2378.280594][ T531] usb 5-1: SerialNumber: syz [ 2378.336634][ T531] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2378.445033][ T613] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2378.454502][ T613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.463041][ T613] usb 2-1: Product: syz [ 2378.467377][ T613] usb 2-1: Manufacturer: syz [ 2378.472247][ T613] usb 2-1: SerialNumber: syz [ 2378.514339][ T613] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2378.802778][T29173] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2378.862856][T15829] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2378.872317][T15829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.880567][T15829] usb 4-1: Product: syz [ 2378.885553][T15829] usb 4-1: Manufacturer: syz [ 2378.890341][T15829] usb 4-1: SerialNumber: syz [ 2378.922302][T29952] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2378.964364][T15829] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2379.033008][ T724] usb 3-1: USB disconnect, device number 6 [ 2379.135334][T15829] usb 5-1: USB disconnect, device number 105 [ 2379.258545][T29315] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2379.666725][ T613] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:42:06 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 08:42:06 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}], 0xb8, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2379.710424][ T404] usb 2-1: USB disconnect, device number 20 [ 2379.863065][T29173] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2379.870607][T29173] ath9k_htc: Failed to initialize the device [ 2379.878616][ T724] usb 3-1: ath9k_htc: USB layer deinitialized [ 2379.912759][ T531] usb 4-1: USB disconnect, device number 85 [ 2380.032280][T29952] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2380.039679][T29952] ath9k_htc: Failed to initialize the device [ 2380.047718][T15829] usb 5-1: ath9k_htc: USB layer deinitialized 08:42:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r1, &(0x7f0000004cc0)={0x18}, 0x18) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:07 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x0, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:07 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:07 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}], 0xb8, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2380.342614][T29315] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2380.350206][T29315] ath9k_htc: Failed to initialize the device [ 2380.358663][ T404] usb 2-1: ath9k_htc: USB layer deinitialized 08:42:07 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}], 0xb8, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2380.433798][T15829] usb 5-1: new high-speed USB device number 106 using dummy_hcd 08:42:07 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x0, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:07 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) [ 2380.562950][T29173] usb 3-1: new high-speed USB device number 7 using dummy_hcd 08:42:07 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x0, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2380.742141][ T613] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2380.749922][ T613] ath9k_htc: Failed to initialize the device 08:42:07 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0x50, 0x0, 0x0, ""/57}], 0x50, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2380.795952][ T404] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2380.817419][ T531] usb 4-1: ath9k_htc: USB layer deinitialized 08:42:08 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0x50, 0x0, 0x0, ""/57}], 0x50, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2380.972934][T15829] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2380.982827][T15829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2380.991063][T15829] usb 5-1: Product: syz [ 2381.000283][T15829] usb 5-1: Manufacturer: syz [ 2381.005576][T15829] usb 5-1: SerialNumber: syz [ 2381.100812][T29173] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2381.110594][T29173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2381.119141][T29173] usb 3-1: Product: syz [ 2381.123554][T29173] usb 3-1: Manufacturer: syz [ 2381.128334][T29173] usb 3-1: SerialNumber: syz [ 2381.142848][T15829] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2381.264402][T29173] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2381.266477][ T531] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2381.374315][ T404] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2381.384511][ T404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2381.392879][ T404] usb 2-1: Product: syz [ 2381.397239][ T404] usb 2-1: Manufacturer: syz [ 2381.402114][ T404] usb 2-1: SerialNumber: syz [ 2381.465443][ T404] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2381.802750][T15914] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2381.872600][ T531] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2381.882130][ T531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2381.890327][ T531] usb 4-1: Product: syz [ 2381.894834][ T531] usb 4-1: Manufacturer: syz [ 2381.899605][ T531] usb 4-1: SerialNumber: syz [ 2381.903268][T15829] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2381.947777][ T531] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2382.062541][T29315] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2382.152571][ T531] usb 3-1: USB disconnect, device number 7 [ 2382.230290][ T613] usb 5-1: USB disconnect, device number 106 [ 2382.505398][ T724] usb 2-1: USB disconnect, device number 21 [ 2382.662366][T29952] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:42:09 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 08:42:09 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x0, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2382.887635][ T516] usb 4-1: USB disconnect, device number 86 [ 2382.902073][T15914] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2382.902671][T15914] ath9k_htc: Failed to initialize the device [ 2382.903960][ T613] usb 5-1: ath9k_htc: USB layer deinitialized [ 2382.983960][T15829] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2382.991451][T15829] ath9k_htc: Failed to initialize the device [ 2382.999207][ T531] usb 3-1: ath9k_htc: USB layer deinitialized 08:42:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000002c40), 0x80) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:10 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0x50, 0x0, 0x0, ""/57}], 0x50, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:10 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:10 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x0, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2383.142750][T29315] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2383.155185][T29315] ath9k_htc: Failed to initialize the device [ 2383.164411][ T724] usb 2-1: ath9k_htc: USB layer deinitialized 08:42:10 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x0, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:10 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2383.322907][ T613] usb 5-1: new high-speed USB device number 107 using dummy_hcd 08:42:10 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:10 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x0, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:10 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2383.562190][ T531] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2383.684333][ T724] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2383.712750][T29952] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2383.720307][T29952] ath9k_htc: Failed to initialize the device [ 2383.750241][ T516] usb 4-1: ath9k_htc: USB layer deinitialized 08:42:10 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2383.842376][ T613] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2383.852569][ T613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2383.860803][ T613] usb 5-1: Product: syz [ 2383.865267][ T613] usb 5-1: Manufacturer: syz [ 2383.870048][ T613] usb 5-1: SerialNumber: syz [ 2383.954610][ T613] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2384.166841][ T531] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2384.179203][ T531] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.188004][ T531] usb 3-1: Product: syz [ 2384.192466][ T531] usb 3-1: Manufacturer: syz [ 2384.197244][ T531] usb 3-1: SerialNumber: syz [ 2384.204284][ T516] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2384.265692][ T531] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2384.286326][ T724] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2384.295754][ T724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.304052][ T724] usb 2-1: Product: syz [ 2384.308395][ T724] usb 2-1: Manufacturer: syz [ 2384.313334][ T724] usb 2-1: SerialNumber: syz [ 2384.394450][ T724] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2384.562440][T15914] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2384.852752][ T516] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2384.862166][ T516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.870382][ T516] usb 4-1: Product: syz [ 2384.875255][ T516] usb 4-1: Manufacturer: syz [ 2384.880034][ T516] usb 4-1: SerialNumber: syz [ 2384.941539][ T516] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2384.997831][T15538] usb 5-1: USB disconnect, device number 107 [ 2385.014258][T31825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2385.104005][ T531] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2385.276195][ T516] usb 3-1: USB disconnect, device number 8 08:42:12 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 08:42:12 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2385.564504][T29315] usb 2-1: USB disconnect, device number 22 [ 2385.622694][T15914] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2385.630177][T15914] ath9k_htc: Failed to initialize the device [ 2385.638704][T15538] usb 5-1: ath9k_htc: USB layer deinitialized [ 2385.682560][T29952] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2385.891646][ T724] usb 4-1: USB disconnect, device number 87 08:42:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:13 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:13 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:13 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) [ 2386.102594][T31825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2386.110093][T31825] ath9k_htc: Failed to initialize the device [ 2386.124262][ T516] usb 3-1: ath9k_htc: USB layer deinitialized [ 2386.182298][ T531] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2386.189793][ T531] ath9k_htc: Failed to initialize the device [ 2386.197952][T29315] usb 2-1: ath9k_htc: USB layer deinitialized [ 2386.213315][T15538] usb 5-1: new high-speed USB device number 108 using dummy_hcd 08:42:13 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:13 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:13 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 08:42:13 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(0x0, 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2386.593543][ T516] usb 3-1: new high-speed USB device number 9 using dummy_hcd 08:42:13 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2386.712459][T29315] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2386.742400][T29952] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2386.749986][T29952] ath9k_htc: Failed to initialize the device [ 2386.784745][ T724] usb 4-1: ath9k_htc: USB layer deinitialized [ 2386.815531][T15538] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2386.825427][T15538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:42:13 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(0x0, 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2386.836076][T15538] usb 5-1: Product: syz [ 2386.840435][T15538] usb 5-1: Manufacturer: syz [ 2386.845621][T15538] usb 5-1: SerialNumber: syz [ 2386.979254][T15538] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2387.232598][T29315] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2387.233748][ T516] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2387.246800][T29315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2387.253771][ T516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2387.253883][ T516] usb 3-1: Product: syz [ 2387.261920][T29315] usb 2-1: Product: syz [ 2387.269914][ T516] usb 3-1: Manufacturer: syz [ 2387.274169][T29315] usb 2-1: Manufacturer: syz [ 2387.278340][ T516] usb 3-1: SerialNumber: syz [ 2387.283033][T29315] usb 2-1: SerialNumber: syz [ 2387.290783][ T724] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2387.349714][T29315] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2387.415522][ T516] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2387.703190][ T1027] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2387.889470][ T724] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2387.898898][ T724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2387.907688][ T724] usb 4-1: Product: syz [ 2387.912087][ T724] usb 4-1: Manufacturer: syz [ 2387.916867][ T724] usb 4-1: SerialNumber: syz [ 2387.932526][T15914] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2387.984991][ T724] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2388.093220][ T531] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2388.148620][ T724] usb 5-1: USB disconnect, device number 108 [ 2388.434639][T29315] usb 2-1: USB disconnect, device number 23 [ 2388.525044][ T516] usb 3-1: USB disconnect, device number 9 08:42:15 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r5, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r5, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r7 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r6, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r8 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x20) 08:42:15 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x260, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}]}) [ 2388.712264][T29952] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2388.746914][ T1027] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2388.754537][ T1027] ath9k_htc: Failed to initialize the device [ 2388.763256][ T724] usb 5-1: ath9k_htc: USB layer deinitialized 08:42:16 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:16 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(0x0, 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:16 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r5, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r5, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r7 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r6, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r8 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x20) [ 2388.992018][T15914] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2388.999523][T15914] ath9k_htc: Failed to initialize the device [ 2389.008417][T29315] usb 2-1: ath9k_htc: USB layer deinitialized 08:42:16 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 08:42:16 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r5, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r5, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r7 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r6, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r8 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x20) [ 2389.158923][T15829] usb 4-1: USB disconnect, device number 88 [ 2389.169214][ T531] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2389.176742][ T531] ath9k_htc: Failed to initialize the device 08:42:16 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2389.218374][ T516] usb 3-1: ath9k_htc: USB layer deinitialized [ 2389.293420][ T724] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2389.552737][T31825] usb 2-1: new high-speed USB device number 24 using dummy_hcd 08:42:16 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 08:42:16 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:16 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2389.782485][T29952] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2389.789972][T29952] ath9k_htc: Failed to initialize the device [ 2389.847339][T15829] usb 4-1: ath9k_htc: USB layer deinitialized [ 2389.880855][ T516] usb 3-1: new high-speed USB device number 10 using dummy_hcd 08:42:17 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2389.890450][ T724] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2389.899823][ T724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2389.908070][ T724] usb 5-1: Product: syz [ 2389.912466][ T724] usb 5-1: Manufacturer: syz [ 2389.917235][ T724] usb 5-1: SerialNumber: syz 08:42:17 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2390.085865][ T724] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2390.123199][T31825] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2390.133033][T31825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.141242][T31825] usb 2-1: Product: syz [ 2390.145719][T31825] usb 2-1: Manufacturer: syz [ 2390.150516][T31825] usb 2-1: SerialNumber: syz [ 2390.252742][T15829] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2390.285039][T31825] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2390.478939][ T516] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2390.488389][ T516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.496873][ T516] usb 3-1: Product: syz [ 2390.501222][ T516] usb 3-1: Manufacturer: syz [ 2390.506451][ T516] usb 3-1: SerialNumber: syz [ 2390.569788][ T516] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2390.762915][T15538] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2390.772907][T15829] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2390.782367][T15829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.790560][T15829] usb 4-1: Product: syz [ 2390.795023][T15829] usb 4-1: Manufacturer: syz [ 2390.799796][T15829] usb 4-1: SerialNumber: syz [ 2390.855277][T15829] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2391.003056][ T1027] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2391.191184][T15829] usb 5-1: USB disconnect, device number 109 [ 2391.272325][T31825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2391.422324][T29315] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2391.442041][T29952] usb 2-1: USB disconnect, device number 24 08:42:18 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2391.720915][ T516] usb 3-1: USB disconnect, device number 10 [ 2391.860895][ T531] usb 4-1: USB disconnect, device number 89 [ 2391.876453][T15538] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2391.884006][T15538] ath9k_htc: Failed to initialize the device [ 2391.891595][T15829] usb 5-1: ath9k_htc: USB layer deinitialized 08:42:19 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:19 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x21c, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}]}) 08:42:19 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2392.102028][ T1027] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2392.109527][ T1027] ath9k_htc: Failed to initialize the device [ 2392.117507][T29952] usb 2-1: ath9k_htc: USB layer deinitialized 08:42:19 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 08:42:19 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:19 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2392.342228][T31825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2392.349849][T31825] ath9k_htc: Failed to initialize the device [ 2392.358808][ T516] usb 3-1: ath9k_htc: USB layer deinitialized 08:42:19 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) [ 2392.472981][T15829] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2392.502830][T29315] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2392.513805][T29315] ath9k_htc: Failed to initialize the device 08:42:19 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:19 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2392.587931][ T531] usb 4-1: ath9k_htc: USB layer deinitialized [ 2392.623007][T29952] usb 2-1: new high-speed USB device number 25 using dummy_hcd 08:42:19 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:19 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2392.874840][ T516] usb 3-1: new high-speed USB device number 11 using dummy_hcd 08:42:20 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2393.012664][T15829] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2393.022345][T15829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2393.030541][T15829] usb 5-1: Product: syz [ 2393.035021][T15829] usb 5-1: Manufacturer: syz [ 2393.039805][T15829] usb 5-1: SerialNumber: syz [ 2393.082098][ T531] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2393.125486][T15829] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2393.208426][T29952] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2393.217774][T29952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2393.226076][T29952] usb 2-1: Product: syz [ 2393.230417][T29952] usb 2-1: Manufacturer: syz [ 2393.235245][T29952] usb 2-1: SerialNumber: syz [ 2393.346077][T29952] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2393.455008][ T516] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2393.464947][ T516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2393.473566][ T516] usb 3-1: Product: syz [ 2393.477897][ T516] usb 3-1: Manufacturer: syz [ 2393.482734][ T516] usb 3-1: SerialNumber: syz [ 2393.536296][ T516] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2393.695506][ T531] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2393.705018][ T531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2393.713670][ T531] usb 4-1: Product: syz [ 2393.718006][ T531] usb 4-1: Manufacturer: syz [ 2393.722866][ T531] usb 4-1: SerialNumber: syz [ 2393.742942][T15914] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2393.785569][ T531] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2394.072796][ T1027] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2394.183057][ T531] usb 5-1: USB disconnect, device number 110 [ 2394.243067][T15538] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2394.492859][ T516] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2394.534212][T31825] usb 2-1: USB disconnect, device number 25 [ 2394.658391][T29952] usb 3-1: USB disconnect, device number 11 [ 2394.832064][T15914] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2394.839552][T15914] ath9k_htc: Failed to initialize the device [ 2394.848315][ T531] usb 5-1: ath9k_htc: USB layer deinitialized [ 2394.924516][ T724] usb 4-1: USB disconnect, device number 90 08:42:22 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:22 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:22 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2395.152128][ T1027] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2395.159629][ T1027] ath9k_htc: Failed to initialize the device [ 2395.167225][T31825] usb 2-1: ath9k_htc: USB layer deinitialized 08:42:22 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x260, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}]}) 08:42:22 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1f4, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}]}) 08:42:22 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2395.312453][T15538] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2395.319946][T15538] ath9k_htc: Failed to initialize the device [ 2395.328020][T29952] usb 3-1: ath9k_htc: USB layer deinitialized 08:42:22 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x260, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}]}) 08:42:22 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2395.541962][ T516] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2395.549454][ T516] ath9k_htc: Failed to initialize the device [ 2395.591176][ T724] usb 4-1: ath9k_htc: USB layer deinitialized [ 2395.602888][ T531] usb 5-1: new high-speed USB device number 111 using dummy_hcd 08:42:22 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:22 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={0x0, 0x2}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:22 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) [ 2395.812724][T29952] usb 3-1: new high-speed USB device number 12 using dummy_hcd 08:42:22 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:23 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:23 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={0x0, 0x2}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2396.072306][ T724] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2396.133294][ T531] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2396.142895][ T531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.153597][ T531] usb 5-1: Product: syz [ 2396.157956][ T531] usb 5-1: Manufacturer: syz [ 2396.163099][ T531] usb 5-1: SerialNumber: syz [ 2396.257637][ T531] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:42:23 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={0x0, 0x2}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2396.384322][T29952] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2396.393807][T29952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.402548][T29952] usb 3-1: Product: syz [ 2396.406912][T29952] usb 3-1: Manufacturer: syz [ 2396.411691][T29952] usb 3-1: SerialNumber: syz [ 2396.534844][T29952] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2396.654823][ T724] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2396.666904][ T724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.675431][ T724] usb 4-1: Product: syz [ 2396.679774][ T724] usb 4-1: Manufacturer: syz [ 2396.684605][ T724] usb 4-1: SerialNumber: syz [ 2396.775334][ T724] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2396.923432][T31825] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2397.222803][ T531] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2397.339563][ T724] usb 5-1: USB disconnect, device number 111 [ 2397.423008][T29952] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2397.674547][T15914] usb 3-1: USB disconnect, device number 12 [ 2397.836954][ T516] usb 4-1: USB disconnect, device number 91 [ 2398.022081][T31825] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2398.029668][T31825] ath9k_htc: Failed to initialize the device [ 2398.037221][ T724] usb 5-1: ath9k_htc: USB layer deinitialized 08:42:25 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x21c, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}]}) 08:42:25 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:25 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) [ 2398.269146][ T531] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2398.276833][ T531] ath9k_htc: Failed to initialize the device [ 2398.285236][T15914] usb 3-1: ath9k_htc: USB layer deinitialized 08:42:25 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x21c, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}]}) 08:42:25 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={0x0, 0x2}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:25 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x130, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}]}) 08:42:25 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2398.508675][T29952] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2398.516477][T29952] ath9k_htc: Failed to initialize the device 08:42:25 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={0x0, 0x2}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2398.558015][ T516] usb 4-1: ath9k_htc: USB layer deinitialized 08:42:25 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2398.732024][T15914] usb 3-1: new high-speed USB device number 13 using dummy_hcd 08:42:25 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) 08:42:25 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={0x0, 0x2}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2398.772853][T31825] usb 5-1: new high-speed USB device number 112 using dummy_hcd 08:42:26 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2398.962755][ T516] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2399.272890][T29315] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2399.292655][T31825] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2399.302472][T31825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.310654][T31825] usb 5-1: Product: syz [ 2399.315143][T31825] usb 5-1: Manufacturer: syz [ 2399.319916][T31825] usb 5-1: SerialNumber: syz [ 2399.328477][T15914] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2399.338301][T15914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.346619][T15914] usb 3-1: Product: syz [ 2399.350964][T15914] usb 3-1: Manufacturer: syz [ 2399.355808][T15914] usb 3-1: SerialNumber: syz [ 2399.394802][T31825] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2399.414821][T15914] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2399.483572][ T516] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2399.493762][ T516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.502517][ T516] usb 4-1: Product: syz [ 2399.506861][ T516] usb 4-1: Manufacturer: syz [ 2399.511643][ T516] usb 4-1: SerialNumber: syz [ 2399.575914][ T516] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2399.892710][T29315] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2399.902198][T29315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.910375][T29315] usb 2-1: Product: syz [ 2399.915074][T29315] usb 2-1: Manufacturer: syz [ 2399.919852][T29315] usb 2-1: SerialNumber: syz [ 2399.965251][T29315] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2399.992537][ T724] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2400.045361][T15829] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2400.172266][T31825] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2400.408277][T29315] usb 5-1: USB disconnect, device number 112 [ 2400.487805][ T613] usb 3-1: USB disconnect, device number 13 [ 2400.589213][ T404] usb 4-1: USB disconnect, device number 92 [ 2400.632702][T15914] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2400.875593][T29173] usb 2-1: USB disconnect, device number 26 08:42:28 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1f4, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}]}) 08:42:28 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x0, &(0x7f0000000280)}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={0x0, 0x2}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:28 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2401.062830][ T724] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2401.070421][ T724] ath9k_htc: Failed to initialize the device [ 2401.078792][T29315] usb 5-1: ath9k_htc: USB layer deinitialized [ 2401.142705][T15829] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2401.150263][T15829] ath9k_htc: Failed to initialize the device [ 2401.158356][ T613] usb 3-1: ath9k_htc: USB layer deinitialized 08:42:28 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1f4, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}]}) 08:42:28 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xe4, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}]}) [ 2401.222755][T31825] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2401.230255][T31825] ath9k_htc: Failed to initialize the device [ 2401.237773][ T404] usb 4-1: ath9k_htc: USB layer deinitialized 08:42:28 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:28 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x0, &(0x7f0000000280)}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={0x0, 0x2}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:28 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) [ 2401.592492][ T613] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2401.653094][T29315] usb 5-1: new high-speed USB device number 113 using dummy_hcd 08:42:28 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x0, &(0x7f0000000280)}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={0x0, 0x2}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:28 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2401.703716][T15914] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2401.711216][T15914] ath9k_htc: Failed to initialize the device [ 2401.726463][T29173] usb 2-1: ath9k_htc: USB layer deinitialized 08:42:28 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2401.854653][ T404] usb 4-1: new high-speed USB device number 93 using dummy_hcd 08:42:29 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000300)={r1, 0x2}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2402.155333][T29173] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2402.184536][ T613] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2402.193940][ T613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.202230][ T613] usb 3-1: Product: syz [ 2402.206559][ T613] usb 3-1: Manufacturer: syz [ 2402.211334][ T613] usb 3-1: SerialNumber: syz [ 2402.273444][T29315] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2402.283454][T29315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.291648][T29315] usb 5-1: Product: syz [ 2402.301028][T29315] usb 5-1: Manufacturer: syz [ 2402.306396][T29315] usb 5-1: SerialNumber: syz [ 2402.315306][ T613] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2402.415158][T29315] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2402.522979][ T404] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2402.532387][ T404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.540549][ T404] usb 4-1: Product: syz [ 2402.545735][ T404] usb 4-1: Manufacturer: syz [ 2402.550505][ T404] usb 4-1: SerialNumber: syz [ 2402.609216][ T404] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2402.840550][T29173] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2402.849919][T29173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.858654][T29173] usb 2-1: Product: syz [ 2402.863054][T29173] usb 2-1: Manufacturer: syz [ 2402.867830][T29173] usb 2-1: SerialNumber: syz [ 2402.916681][T29173] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2403.003236][T15829] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2403.123683][ T435] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2403.292951][T29315] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2403.426510][T31825] usb 3-1: USB disconnect, device number 14 [ 2403.549172][ T516] usb 5-1: USB disconnect, device number 113 [ 2403.632727][T15914] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2403.720940][ T724] usb 4-1: USB disconnect, device number 93 [ 2403.864112][T29173] usb 2-1: USB disconnect, device number 27 08:42:31 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x130, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}]}) 08:42:31 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:31 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000300)={r1, 0x2}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2404.102064][T15829] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2404.109641][T15829] ath9k_htc: Failed to initialize the device [ 2404.117542][T31825] usb 3-1: ath9k_htc: USB layer deinitialized [ 2404.182002][ T435] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2404.189617][ T435] ath9k_htc: Failed to initialize the device [ 2404.197313][ T516] usb 5-1: ath9k_htc: USB layer deinitialized 08:42:31 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x130, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}]}) 08:42:31 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0x0, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:31 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}]}) 08:42:31 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000300)={r1, 0x2}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2404.347004][T29315] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2404.354619][T29315] ath9k_htc: Failed to initialize the device [ 2404.362803][ T724] usb 4-1: ath9k_htc: USB layer deinitialized 08:42:31 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x304, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {0xbe, 0x4e00, "51bbc714266f6ca079a198da412fc3c197f6880733b9da8858e74a9b98054b6614e82d9ad6e90b2f55de5649660644aec2cae331602753a9ebe5f893d4ec038f2650783e5d74084028a69bcf0293fc02cb0c171cc25cf4423143a5b7c613c29faa90315e07fee4dadf1f004aeecf1e698a85e2fe125bc114f5f2af75a09d45ad1a3344bbf4b8a5f87c7b366bb08d9cedcee864304403ff0ce3161db520e828b4a356233102e2e104017fae778f3bc9d8bb9d18b68099b8ec90189522b243"}, {0x22, 0x4e00, "a60d34a768f6986c5b47ee5ba44701c103572801c0fb86e4bdfaabdc96aea6a2927b"}, {0x3e, 0x4e00, "925886ce4c4ef099941138d90a3c1f0106c9dff2d3e3acf30b5d6d51077c124d5621856b7d356de9f776383e21a6422186986ab9ec1c252a851d89c465de"}, {0x9f, 0x4e00, "4c7b5f872aaff595630c545165c6bce8e1d071fb8bfd5ee6327fb0370ed00aa0b63d94fc5e7c2078fcdd266067e991777480a4932c3f1821b5f0261af68a60b08a45a444c40184230af9996fee5459fd6d9cbaa346ed21c4b00bd96dd4adaf6e9830c495ded91cb5270a4739634805872c7ce2494d47236f66e9843db1cfd912e603c1725f7ff55105962edf3bf03ccc9d87f6d34f1c41077319f031bb373e"}]}) [ 2404.554216][T31825] usb 3-1: new high-speed USB device number 15 using dummy_hcd 08:42:31 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2404.662674][T15914] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2404.670253][T15914] ath9k_htc: Failed to initialize the device [ 2404.725403][T29173] usb 2-1: ath9k_htc: USB layer deinitialized [ 2404.813093][ T516] usb 5-1: new high-speed USB device number 114 using dummy_hcd 08:42:31 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0x0, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2404.951982][T29952] usb 4-1: new high-speed USB device number 94 using dummy_hcd 08:42:32 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2405.083928][T31825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2405.093608][T31825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2405.102303][T31825] usb 3-1: Product: syz [ 2405.106643][T31825] usb 3-1: Manufacturer: syz [ 2405.111418][T31825] usb 3-1: SerialNumber: syz [ 2405.132848][T29173] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2405.245134][T31825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 08:42:32 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2405.353130][ T516] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2405.363401][ T516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2405.374077][ T516] usb 5-1: Product: syz [ 2405.378786][ T516] usb 5-1: Manufacturer: syz [ 2405.383700][ T516] usb 5-1: SerialNumber: syz [ 2405.535723][ T516] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2405.592971][T29952] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2405.603023][T29952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2405.611227][T29952] usb 4-1: Product: syz [ 2405.615712][T29952] usb 4-1: Manufacturer: syz [ 2405.620490][T29952] usb 4-1: SerialNumber: syz [ 2405.694368][T29952] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2405.732927][T29173] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2405.742409][T29173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2405.750607][T29173] usb 2-1: Product: syz [ 2405.755150][T29173] usb 2-1: Manufacturer: syz [ 2405.759951][T29173] usb 2-1: SerialNumber: syz [ 2405.824261][T29173] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2405.910084][ T724] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2406.213049][ T531] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2406.292667][T31825] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2406.349071][T29173] usb 3-1: USB disconnect, device number 15 [ 2406.522364][T15914] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2406.638968][ T435] usb 5-1: USB disconnect, device number 114 [ 2406.733223][T15829] usb 4-1: USB disconnect, device number 94 [ 2406.741370][T29952] usb 2-1: USB disconnect, device number 28 08:42:33 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0x0, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:33 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={0x0, 0x2}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:33 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xe4, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}]}) [ 2406.982059][ T724] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2406.989720][ T724] ath9k_htc: Failed to initialize the device [ 2406.998271][T29173] usb 3-1: ath9k_htc: USB layer deinitialized 08:42:34 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x130, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}]}) 08:42:34 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={0x0, 0x2}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:34 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000400)) 08:42:34 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x0, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2407.302528][ T531] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2407.312892][ T531] ath9k_htc: Failed to initialize the device [ 2407.322855][ T435] usb 5-1: ath9k_htc: USB layer deinitialized [ 2407.382229][T31825] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2407.389721][T31825] ath9k_htc: Failed to initialize the device [ 2407.398286][T15829] usb 4-1: ath9k_htc: USB layer deinitialized 08:42:34 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) [ 2407.467004][T29173] usb 3-1: new high-speed USB device number 16 using dummy_hcd 08:42:34 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={0x0, 0x2}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:34 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x0, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2407.623770][T15914] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2407.631370][T15914] ath9k_htc: Failed to initialize the device [ 2407.653018][T29952] usb 2-1: ath9k_htc: USB layer deinitialized [ 2407.835985][ T435] usb 5-1: new high-speed USB device number 115 using dummy_hcd 08:42:35 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:35 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x0, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2407.945083][T15829] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2408.012944][T29173] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2408.022872][T29173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.031080][T29173] usb 3-1: Product: syz [ 2408.035521][T29173] usb 3-1: Manufacturer: syz [ 2408.040301][T29173] usb 3-1: SerialNumber: syz [ 2408.069156][T29952] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2408.114950][T29173] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2408.423650][ T435] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2408.433022][ T435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.445991][ T435] usb 5-1: Product: syz [ 2408.450331][ T435] usb 5-1: Manufacturer: syz [ 2408.456237][ T435] usb 5-1: SerialNumber: syz [ 2408.515103][ T435] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2408.546055][T15829] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2408.555423][T15829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.563992][T15829] usb 4-1: Product: syz [ 2408.568327][T15829] usb 4-1: Manufacturer: syz [ 2408.573278][T15829] usb 4-1: SerialNumber: syz [ 2408.593211][T29952] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2408.602711][T29952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.610899][T29952] usb 2-1: Product: syz [ 2408.615709][T29952] usb 2-1: Manufacturer: syz [ 2408.620488][T29952] usb 2-1: SerialNumber: syz [ 2408.664631][T15829] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2408.685053][T29952] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2408.814664][T29315] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2409.238258][T15914] usb 3-1: USB disconnect, device number 16 [ 2409.252523][ T531] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2409.322600][T29173] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2409.392841][ T435] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2409.706933][T29952] usb 2-1: USB disconnect, device number 29 08:42:36 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}]}) 08:42:36 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:36 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) [ 2409.794841][T15829] usb 5-1: USB disconnect, device number 115 [ 2409.877988][T29315] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2409.890662][T29315] ath9k_htc: Failed to initialize the device [ 2409.901980][T15914] usb 3-1: ath9k_htc: USB layer deinitialized [ 2409.926281][ T404] usb 4-1: USB disconnect, device number 95 [ 2410.343394][ T531] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2410.350887][ T531] ath9k_htc: Failed to initialize the device [ 2410.359173][T29952] usb 2-1: ath9k_htc: USB layer deinitialized 08:42:37 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x130, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}]}) 08:42:37 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:37 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:37 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 08:42:37 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000400)) [ 2410.422270][ T435] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2410.430589][ T435] ath9k_htc: Failed to initialize the device [ 2410.441896][T29173] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2410.450068][T29173] ath9k_htc: Failed to initialize the device [ 2410.457691][ T404] usb 4-1: ath9k_htc: USB layer deinitialized [ 2410.474933][T15829] usb 5-1: ath9k_htc: USB layer deinitialized [ 2410.491949][T15914] usb 3-1: new high-speed USB device number 17 using dummy_hcd 08:42:37 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:37 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = socket(0xf, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r9 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r10, 0x20) 08:42:37 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r8 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x20) 08:42:38 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2410.942153][T29952] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2410.945652][T15829] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2411.027079][ T404] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2411.043404][T15914] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2411.053071][T15914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.061274][T15914] usb 3-1: Product: syz [ 2411.065943][T15914] usb 3-1: Manufacturer: syz [ 2411.070722][T15914] usb 3-1: SerialNumber: syz [ 2411.191087][T15914] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2411.462526][T29952] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2411.472039][T29952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.480251][T29952] usb 2-1: Product: syz [ 2411.484777][T29952] usb 2-1: Manufacturer: syz [ 2411.489518][T29952] usb 2-1: SerialNumber: syz [ 2411.545012][T29952] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2411.563352][T15829] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2411.572771][T15829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.580973][T15829] usb 5-1: Product: syz [ 2411.585446][T15829] usb 5-1: Manufacturer: syz [ 2411.590228][T15829] usb 5-1: SerialNumber: syz [ 2411.636766][T15829] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2411.724622][ T404] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2411.734190][ T404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.742800][ T404] usb 4-1: Product: syz [ 2411.747142][ T404] usb 4-1: Manufacturer: syz [ 2411.751986][ T404] usb 4-1: SerialNumber: syz [ 2411.805313][ T404] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2411.982789][T29315] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2412.142331][T31825] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2412.372684][ T613] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2412.409677][T29952] usb 3-1: USB disconnect, device number 17 [ 2412.552500][ T435] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2412.567240][ T531] usb 2-1: USB disconnect, device number 30 [ 2412.829833][ T724] usb 5-1: USB disconnect, device number 116 08:42:39 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000400)) 08:42:39 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:39 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r8 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x20) [ 2413.061963][T29315] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2413.069779][T29315] ath9k_htc: Failed to initialize the device [ 2413.087261][T29952] usb 3-1: ath9k_htc: USB layer deinitialized [ 2413.121044][ T404] usb 4-1: USB disconnect, device number 96 [ 2413.223064][T31825] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2413.230685][T31825] ath9k_htc: Failed to initialize the device [ 2413.239966][ T531] usb 2-1: ath9k_htc: USB layer deinitialized [ 2413.462005][ T613] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2413.469646][ T613] ath9k_htc: Failed to initialize the device [ 2413.477176][ T724] usb 5-1: ath9k_htc: USB layer deinitialized 08:42:40 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x134, &(0x7f0000000400)={[{0x7f, 0x4e00, "90e819aaf35f0e3fbd85dd6da8b5913b806908395cd7c341ff36222f8beb167286e5ed931ef4bf54996e82475081cf407d533386ac4eaac8cc0e95bbbe6c0e02c3651c0a4f6b232a8c9a1e69d3c9e42a06b269a9f3b52ed242708729a355cba839fb39f7a0c401f1adb6bfbd73539bde34507645b7874de6a96b8414f14b1a"}, {0x59, 0x4e00, "fc89b467e27ca07d5d9781b30e0284e605499505dcc4a07c24e74a2f461405edef3188eab990cc94b1df8d42ec278ce9222cb235834651a991fe84ad1fd4ea89a34ae02b3ea39960ee89a0eb2636d7bd143f67671b6a48433d"}, {0x46, 0x4e00, "03cf8ad8941f521dd3f6380caee49cd0e10057b42b549aa55276d3a310c5906f0400463a50568e65c160c901a3c5981e6a365fa3dc8e2645930c69f1fc97040f153478e56260"}, {}]}) 08:42:40 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:40 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002ebd7000ffdbdf250700000008000c0006000000140020002001000000000000000000000000000008001700", @ANYRES32=r7, @ANYBLOB="7e230cf2d707931b94c54206e1262ac43ef6fadaf9ae55346740cc19f90f879c03e9d84294c1d5d8a532ec5f50afb7dccac04099e106051ec74f20df0000000000000062569539a2a1879acd1fd63bdb612590a2cf8815b81553b6d6843135cefbb6975aa46bb62e0db7a1edf5813f828bb6a5164c3b30777fc0bad5ce18bc3484e4a1ee075c9b48d0462a9d974a8c3ac36405c43dfd39df6d8c29d162c854f1507e1b398402e377bfda00000000cc7b169bf97031ea8513dfe32d0af4725a3df8081cba44"], 0x38}}, 0x8c0) r8 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x20) 08:42:40 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 08:42:40 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000400)) [ 2413.572002][T29952] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2413.625023][ T435] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2413.632608][ T435] ath9k_htc: Failed to initialize the device [ 2413.667349][ T404] usb 4-1: ath9k_htc: USB layer deinitialized 08:42:40 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:41 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r7 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, 0x0, 0x8c0) r8 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x20) [ 2413.974306][ T724] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2413.983035][ T531] usb 2-1: new high-speed USB device number 31 using dummy_hcd 08:42:41 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) 08:42:41 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r7 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, 0x0, 0x8c0) r8 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x20) [ 2414.102921][T29952] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2414.112378][T29952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2414.120577][T29952] usb 3-1: Product: syz [ 2414.125066][T29952] usb 3-1: Manufacturer: syz [ 2414.129843][T29952] usb 3-1: SerialNumber: syz [ 2414.204891][T29952] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2414.232704][ T404] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2414.542804][ T724] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2414.553023][ T724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2414.561212][ T724] usb 5-1: Product: syz [ 2414.565730][ T724] usb 5-1: Manufacturer: syz [ 2414.570497][ T724] usb 5-1: SerialNumber: syz [ 2414.577056][ T531] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2414.588816][ T531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2414.597349][ T531] usb 2-1: Product: syz [ 2414.601691][ T531] usb 2-1: Manufacturer: syz [ 2414.606570][ T531] usb 2-1: SerialNumber: syz [ 2414.664383][ T724] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2414.681952][ T531] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2414.773934][ T404] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2414.783342][ T404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2414.796239][ T404] usb 4-1: Product: syz [ 2414.800582][ T404] usb 4-1: Manufacturer: syz [ 2414.806270][ T404] usb 4-1: SerialNumber: syz [ 2414.831873][T31825] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2414.895480][ T404] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2415.240148][ T516] usb 3-1: USB disconnect, device number 18 [ 2415.313254][T29952] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2415.340437][ T724] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2415.572537][ T435] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 08:42:42 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000400)) 08:42:42 executing program 0: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000440)=""/167, 0xa7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="100025bd7000fedb0400000000000000100001000000000000000500120000000000ce5a48440d8a1f8dc467"], 0x28}}, 0x50000) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1948a15d, 0x402381) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000a40)={0x0, 0x1}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9e07}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020800}, 0x20) pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_POLL(r6, &(0x7f0000004cc0)={0x18}, 0x18) recvmsg$qrtr(r6, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, &(0x7f0000000740)=[{0xb8, 0x0, 0x0, ""/162}, {0x50, 0x0, 0x0, ""/57}], 0x108, 0x2020}, 0x38, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x3, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) r7 = socket(0xf, 0x2, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, 0x0, 0x8c0) r8 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x20) 08:42:42 executing program 5: pipe2$watch_queue(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x634, 0x2, 0x3, 0x9, &(0x7f0000000180)=[{0x8001, 0x9, 0x101, 0xfff}, {0xfff, 0x40, 0x400, 0xff}, {0x7f, 0x1, 0x1, 0x2}, {0xfffc, 0x1, 0x3, 0x4}, {0xc9, 0x6, 0x80, 0x8}, {0xff, 0x40, 0x3, 0xa9d}, {0x7, 0x0, 0x1ff, 0x8}, {0x1, 0x7ff, 0x90, 0x4}, {0x20, 0x9, 0x8001, 0x7}]}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x400, 0x20400) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000300)={r2, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x7f, 0x10001, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x80, 0x2, 0x4}}) [ 2415.761961][ T404] usb 5-1: USB disconnect, device number 117 [ 2415.872932][ C1] ===================================================== [ 2415.874481][T31825] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2415.880078][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x544/0x980 [ 2415.887340][T31825] ath9k_htc: Failed to initialize the device [ 2415.893998][ C1] ath9k_htc_rx_msg+0x544/0x980 [ 2415.894100][ C1] ath9k_hif_usb_rx_cb+0x196a/0x1f10 [ 2415.902583][ T516] usb 3-1: ath9k_htc: USB layer deinitialized [ 2415.904980][ C1] __usb_hcd_giveback_urb+0x522/0x740 [ 2415.922094][ C1] usb_hcd_giveback_urb+0x150/0x620 [ 2415.927439][ C1] dummy_timer+0xd3f/0x4f20 [ 2415.932099][ C1] call_timer_fn+0x43/0x480 [ 2415.936751][ C1] expire_timers+0x272/0x610 [ 2415.941477][ C1] __run_timers+0x5bc/0x8c0 [ 2415.942144][ T531] usb 2-1: USB disconnect, device number 31 [ 2415.946066][ C1] run_timer_softirq+0x64/0xe0 [ 2415.946160][ C1] __do_softirq+0x1cc/0x7fb [ 2415.946243][ C1] invoke_softirq+0x8f/0x100 [ 2415.966159][ C1] irq_exit_rcu+0x5a/0x110 [ 2415.970703][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 2415.976483][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2415.982649][ C1] kmsan_get_metadata+0x0/0x230 [ 2415.987646][ C1] __msan_metadata_ptr_for_load_4+0x20/0x30 [ 2415.993688][ C1] arch_stack_walk+0x1c7/0x280 [ 2415.998645][ C1] stack_trace_save+0xb2/0x100 [ 2416.003561][ C1] kmsan_internal_poison_memory+0x45/0x90 [ 2416.009430][ C1] kmsan_slab_free+0xcd/0x130 [ 2416.014243][ C1] slab_free_freelist_hook+0x1b8/0x650 [ 2416.019875][ C1] kfree+0x207/0x9c0 [ 2416.023915][ C1] __vunmap+0x12c7/0x1410 [ 2416.028392][ C1] vfree+0xda/0x120 [ 2416.032316][ C1] do_ipt_get_ctl+0x1612/0x2110 [ 2416.037344][ C1] nf_getsockopt+0x41d/0x480 [ 2416.042105][ C1] ip_getsockopt+0x1bfe/0x2190 [ 2416.047017][ C1] tcp_getsockopt+0xc4/0x100 [ 2416.051768][ C1] sock_common_getsockopt+0x99/0xd0 [ 2416.057131][ C1] __sys_getsockopt+0x5ea/0xb00 [ 2416.062116][ C1] __x64_sys_getsockopt+0xe1/0x160 [ 2416.067370][ C1] do_syscall_64+0x3d/0xb0 [ 2416.071921][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2416.078001][ C1] [ 2416.080389][ C1] Uninit was created at: [ 2416.084820][ C1] __kmalloc_node_track_caller+0x86c/0x1230 [ 2416.090888][ C1] __alloc_skb+0x34a/0xd70 [ 2416.095487][ C1] __netdev_alloc_skb+0x126/0x780 [ 2416.100686][ C1] ath9k_hif_usb_rx_cb+0xe7b/0x1f10 [ 2416.106035][ C1] __usb_hcd_giveback_urb+0x522/0x740 [ 2416.111562][ C1] usb_hcd_giveback_urb+0x150/0x620 [ 2416.116907][ C1] dummy_timer+0xd3f/0x4f20 [ 2416.121556][ C1] call_timer_fn+0x43/0x480 [ 2416.126195][ C1] expire_timers+0x272/0x610 [ 2416.130920][ C1] __run_timers+0x5bc/0x8c0 [ 2416.135562][ C1] run_timer_softirq+0x64/0xe0 [ 2416.140461][ C1] __do_softirq+0x1cc/0x7fb [ 2416.145092][ C1] [ 2416.147490][ C1] CPU: 1 PID: 3515 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2416.157690][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2416.167843][ C1] ===================================================== [ 2416.174836][ C1] Disabling lock debugging due to kernel taint [ 2416.181051][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 2416.187537][ C1] CPU: 1 PID: 3515 Comm: syz-executor.2 Tainted: G B 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 2416.199121][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2416.209271][ C1] Call Trace: [ 2416.212615][ C1] [ 2416.215521][ C1] dump_stack_lvl+0x1c8/0x256 [ 2416.220367][ C1] dump_stack+0x1a/0x1c [ 2416.224672][ C1] panic+0x4d3/0xc69 [ 2416.228722][ C1] kmsan_report+0x2cc/0x2d0 [ 2416.233359][ C1] ? should_fail+0x3f/0x810 [ 2416.237997][ C1] ? __msan_warning+0x92/0x110 [ 2416.242880][ C1] ? ath9k_htc_rx_msg+0x544/0x980 [ 2416.248033][ C1] ? ath9k_hif_usb_rx_cb+0x196a/0x1f10 [ 2416.253631][ C1] ? __usb_hcd_giveback_urb+0x522/0x740 [ 2416.259313][ C1] ? usb_hcd_giveback_urb+0x150/0x620 [ 2416.264814][ C1] ? dummy_timer+0xd3f/0x4f20 [ 2416.269624][ C1] ? call_timer_fn+0x43/0x480 [ 2416.274421][ C1] ? expire_timers+0x272/0x610 [ 2416.279305][ C1] ? __run_timers+0x5bc/0x8c0 [ 2416.284101][ C1] ? run_timer_softirq+0x64/0xe0 [ 2416.289179][ C1] ? __do_softirq+0x1cc/0x7fb [ 2416.293980][ C1] ? invoke_softirq+0x8f/0x100 [ 2416.298867][ C1] ? irq_exit_rcu+0x5a/0x110 [ 2416.303567][ C1] ? sysvec_apic_timer_interrupt+0x9a/0xc0 [ 2416.309512][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2416.315913][ C1] ? kmsan_get_shadow_origin_ptr+0xa0/0xa0 [ 2416.321855][ C1] ? __msan_metadata_ptr_for_load_4+0x20/0x30 [ 2416.328058][ C1] ? arch_stack_walk+0x1c7/0x280 [ 2416.333149][ C1] ? stack_trace_save+0xb2/0x100 [ 2416.338226][ C1] ? kmsan_internal_poison_memory+0x45/0x90 [ 2416.344245][ C1] ? kmsan_slab_free+0xcd/0x130 [ 2416.349210][ C1] ? slab_free_freelist_hook+0x1b8/0x650 [ 2416.354998][ C1] ? kfree+0x207/0x9c0 [ 2416.359199][ C1] ? __vunmap+0x12c7/0x1410 [ 2416.363810][ C1] ? vfree+0xda/0x120 [ 2416.367893][ C1] ? do_ipt_get_ctl+0x1612/0x2110 [ 2416.373026][ C1] ? nf_getsockopt+0x41d/0x480 [ 2416.377922][ C1] ? ip_getsockopt+0x1bfe/0x2190 [ 2416.382983][ C1] ? tcp_getsockopt+0xc4/0x100 [ 2416.387895][ C1] ? sock_common_getsockopt+0x99/0xd0 [ 2416.393409][ C1] ? __sys_getsockopt+0x5ea/0xb00 [ 2416.398545][ C1] ? __x64_sys_getsockopt+0xe1/0x160 [ 2416.403946][ C1] ? do_syscall_64+0x3d/0xb0 [ 2416.408689][ C1] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2416.415003][ C1] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2416.421400][ C1] ? raise_softirq_irqoff+0x42/0x160 [ 2416.426816][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2416.432775][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2416.438722][ C1] __msan_warning+0x92/0x110 [ 2416.443430][ C1] ath9k_htc_rx_msg+0x544/0x980 [ 2416.448423][ C1] ath9k_hif_usb_rx_cb+0x196a/0x1f10 [ 2416.453887][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2416.459829][ C1] ? ath9k_hif_usb_alloc_urbs+0x1700/0x1700 [ 2416.465864][ C1] __usb_hcd_giveback_urb+0x522/0x740 [ 2416.471390][ C1] usb_hcd_giveback_urb+0x150/0x620 [ 2416.476734][ C1] dummy_timer+0xd3f/0x4f20 [ 2416.481414][ C1] ? _raw_spin_unlock_irqrestore+0x34/0x50 [ 2416.487366][ C1] ? __mod_timer+0x167f/0x1b90 [ 2416.492295][ C1] ? dummy_free_streams+0x690/0x690 [ 2416.497631][ C1] ? dummy_free_streams+0x690/0x690 [ 2416.502966][ C1] call_timer_fn+0x43/0x480 [ 2416.507595][ C1] ? dummy_free_streams+0x690/0x690 [ 2416.512930][ C1] expire_timers+0x272/0x610 [ 2416.517657][ C1] __run_timers+0x5bc/0x8c0 [ 2416.522300][ C1] ? migrate_timer_list+0x5d0/0x5d0 [ 2416.527623][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2416.533566][ C1] ? migrate_timer_list+0x5d0/0x5d0 [ 2416.538888][ C1] run_timer_softirq+0x64/0xe0 [ 2416.543775][ C1] __do_softirq+0x1cc/0x7fb [ 2416.548394][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2416.554351][ C1] invoke_softirq+0x8f/0x100 [ 2416.559066][ C1] irq_exit_rcu+0x5a/0x110 [ 2416.563603][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 2416.569374][ C1] [ 2416.572365][ C1] [ 2416.575356][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2416.581496][ C1] RIP: 0010:kmsan_get_metadata+0x0/0x230 [ 2416.587263][ C1] Code: 89 da 48 89 d8 5b 41 5e 41 5f 5d c3 0f 0b c6 05 5a ed 66 0d 00 83 3d 56 ed 66 0d 00 74 96 0f 0b 0f 0b 0f 1f 84 00 00 00 00 00 <55> 48 89 e5 48 89 fa 48 83 e2 fc 85 f6 48 0f 44 d7 40 f6 c7 03 48 [ 2416.607008][ C1] RSP: 0018:ffff88803359f310 EFLAGS: 00000286 [ 2416.613187][ C1] RAX: ffff888032d9f378 RBX: ffff888032d9f378 RCX: 00000000000fe41b [ 2416.621258][ C1] RDX: 0000000000000378 RSI: 0000000000000001 RDI: ffff88803359f378 [ 2416.629323][ C1] RBP: ffff88803359f330 R08: 0000160000000000 R09: ffffea000000000f [ 2416.637399][ C1] R10: 0000000000000060 R11: ffff8880b359f378 R12: ffff88803359f378 [ 2416.645471][ C1] R13: ffff888033620b40 R14: 0000000000000000 R15: ffff88803359f378 [ 2416.653568][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2416.659516][ C1] __msan_metadata_ptr_for_load_4+0x20/0x30 [ 2416.665559][ C1] arch_stack_walk+0x1c7/0x280 [ 2416.670468][ C1] ? stack_trace_save+0x100/0x100 [ 2416.675639][ C1] ? kfree+0x207/0x9c0 [ 2416.679849][ C1] stack_trace_save+0xb2/0x100 [ 2416.684759][ C1] kmsan_internal_poison_memory+0x45/0x90 [ 2416.690607][ C1] ? slab_free_freelist_hook+0x1b8/0x650 [ 2416.696390][ C1] ? kmsan_internal_poison_memory+0x45/0x90 [ 2416.702410][ C1] ? kmsan_slab_free+0xcd/0x130 [ 2416.707465][ C1] ? slab_free_freelist_hook+0x1b8/0x650 [ 2416.713252][ C1] ? do_ipt_get_ctl+0x1612/0x2110 [ 2416.718386][ C1] ? nf_getsockopt+0x41d/0x480 [ 2416.723281][ C1] ? ip_getsockopt+0x1bfe/0x2190 [ 2416.728343][ C1] ? tcp_getsockopt+0xc4/0x100 [ 2416.733250][ C1] ? sock_common_getsockopt+0x99/0xd0 [ 2416.738764][ C1] ? __sys_getsockopt+0x5ea/0xb00 [ 2416.743907][ C1] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 2416.750299][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 2416.756008][ C1] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2416.761971][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2416.768294][ C1] ? kfree+0x26f/0x9c0 [ 2416.772489][ C1] ? kvfree+0x65/0x70 [ 2416.776607][ C1] ? kfree+0x1b1/0x9c0 [ 2416.780803][ C1] ? __vunmap+0x12c7/0x1410 [ 2416.785415][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2416.791356][ C1] ? kfree+0x1b1/0x9c0 [ 2416.795557][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2416.801504][ C1] kmsan_slab_free+0xcd/0x130 [ 2416.806298][ C1] slab_free_freelist_hook+0x1b8/0x650 [ 2416.811930][ C1] kfree+0x207/0x9c0 [ 2416.815951][ C1] ? __vunmap+0x12c7/0x1410 [ 2416.820585][ C1] __vunmap+0x12c7/0x1410 [ 2416.825053][ C1] vfree+0xda/0x120 [ 2416.828970][ C1] do_ipt_get_ctl+0x1612/0x2110 [ 2416.833957][ C1] ? ip_getsockopt+0x1b3b/0x2190 [ 2416.839041][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2416.844988][ C1] ? do_ipt_set_ctl+0x5830/0x5830 [ 2416.850132][ C1] nf_getsockopt+0x41d/0x480 [ 2416.854869][ C1] ip_getsockopt+0x1bfe/0x2190 [ 2416.859764][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2416.865729][ C1] ? aa_sk_perm+0x83f/0xd70 [ 2416.870428][ C1] ? ip_setsockopt+0x4820/0x4820 [ 2416.875500][ C1] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 2416.881444][ C1] ? ip_setsockopt+0x4820/0x4820 [ 2416.886587][ C1] tcp_getsockopt+0xc4/0x100 [ 2416.891323][ C1] ? tcp_bpf_bypass_getsockopt+0x80/0x80 [ 2416.897184][ C1] sock_common_getsockopt+0x99/0xd0 [ 2416.902570][ C1] ? sock_recv_errqueue+0x8f0/0x8f0 [ 2416.907943][ C1] __sys_getsockopt+0x5ea/0xb00 [ 2416.912930][ C1] __x64_sys_getsockopt+0xe1/0x160 [ 2416.918170][ C1] do_syscall_64+0x3d/0xb0 [ 2416.922702][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2416.928752][ C1] RIP: 0033:0x7fcecdc8a89a [ 2416.933266][ C1] Code: 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2416.953041][ C1] RSP: 002b:00007fcece2cf688 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 2416.961576][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcecdc8a89a [ 2416.969657][ C1] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 2416.977718][ C1] RBP: 00007fcece2cf6b0 R08: 00007fcece2cf6ac R09: fefefefeff646b66 [ 2416.985879][ C1] R10: 00007fcece2cf710 R11: 0000000000000212 R12: 00007fcece2cf710 [ 2416.993967][ C1] R13: 0000000000000003 R14: 00007fcece2cf6ac R15: 00007fcecdd6eaa0 [ 2417.002055][ C1] [ 2417.005296][ C1] Kernel Offset: disabled [ 2417.009667][ C1] Rebooting in 86400 seconds..