[T25435] usb 1-1: Product: syz [ 1276.588003][T25435] usb 1-1: Manufacturer: syz [ 1276.592601][T25435] usb 1-1: SerialNumber: syz [ 1276.624165][ T7624] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1276.633243][ T7624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.641657][ T7624] usb 6-1: Product: syz [ 1276.650395][ T7624] usb 6-1: Manufacturer: syz [ 1276.656314][ T7624] usb 6-1: SerialNumber: syz [ 1276.883929][T25435] cdc_ncm 1-1:1.0: bind() failure [ 1276.896280][T25435] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1276.903193][T25435] cdc_ncm 1-1:1.1: bind() failure [ 1276.921147][T25435] usb 1-1: USB disconnect, device number 8 [ 1276.927227][ T7624] cdc_ncm 6-1:1.0: bind() failure [ 1276.941931][ T7624] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1276.949217][ T7624] cdc_ncm 6-1:1.1: bind() failure [ 1276.963787][ T7624] usb 6-1: USB disconnect, device number 47 17:44:32 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$rfkill(r0, &(0x7f0000000000), 0x8) creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) 17:44:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x320) 17:44:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1a9) 17:44:32 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f00000000c0)) 17:44:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="178519b906e2", @local, @val={@val={0x9100, 0x1}, {0x8100, 0x0, 0x0, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @broadcast, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast2}}}}, &(0x7f0000000080)={0x1, 0x2, [0xbef, 0x6ab, 0x7f5, 0xdc4]}) 17:44:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000650400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x320) 17:44:33 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) 17:44:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1aa) 17:44:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="178519b906e2", @local, @val={@val={0x9100, 0x1}, {0x8100, 0x0, 0x0, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @broadcast, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast2}}}}, &(0x7f0000000080)={0x1, 0x2, [0xbef, 0x6ab, 0x7f5, 0xdc4]}) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="178519b906e2", @local, @val={@val={0x9100, 0x1}, {0x8100, 0x0, 0x0, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @broadcast, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast2}}}}, &(0x7f0000000080)={0x1, 0x2, [0xbef, 0x6ab, 0x7f5, 0xdc4]}) (async) [ 1277.449539][T25316] validate_nla: 12 callbacks suppressed [ 1277.449559][T25316] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14}, 0x14}}, 0x0) 17:44:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x320) 17:44:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1ab) 17:44:33 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0xe, 0x0, 0x0) 17:44:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001650400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="178519b906e2", @local, @val={@val={0x9100, 0x1}, {0x8100, 0x0, 0x0, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @broadcast, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast2}}}}, &(0x7f0000000080)={0x1, 0x2, [0xbef, 0x6ab, 0x7f5, 0xdc4]}) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="178519b906e2", @local, @val={@val={0x9100, 0x1}, {0x8100, 0x0, 0x0, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @broadcast, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast2}}}}, &(0x7f0000000080)={0x1, 0x2, [0xbef, 0x6ab, 0x7f5, 0xdc4]}) (async) 17:44:33 executing program 5: socketpair(0x20, 0x0, 0x0, &(0x7f0000000100)) 17:44:33 executing program 0: keyctl$read(0x7, 0x0, 0x0, 0x0) 17:44:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1ac) 17:44:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x320) 17:44:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xb0ed, 0x2, [0xf, 0xfffa]}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={r1, 0xa3}, &(0x7f0000000240)=0x8) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c100000907800003067352d475cd729f1475af63fde6b3f4fc0dd2abdaa49a55545948f8e3e62910eb3c3b64ecd017f61c73b41f9ebd82653a1959f605ae72f22820b25b93a24e0bfad9990fc82a771113aeafbab65e22a6d5923fa9ce7ce27860c73641810af48cc5c83228ada915741dbdd6c289cbec64693ccbdab384d5b20ef3e50a7560783fdf561f96380b8705ba6dd31d0e62faa7b1fce59c0c67b848af3a637733721753935ca0aad849a263de659e53cf651c6f59ff3c5628c2a62b5e988377d0ae0d0c5b52635dc2f20493ed67b832a27c53e88145aecaf33f130a99efee86f53"], 0x0) [ 1277.724222][T25344] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1ad) 17:44:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x13, 0x0, 0x0) 17:44:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2}, [@RTA_PREFSRC={0x8, 0x7, @local}]}, 0x24}}, 0x0) 17:44:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x1900}]}, 0x320) 17:44:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002650400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xb0ed, 0x2, [0xf, 0xfffa]}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={r1, 0xa3}, &(0x7f0000000240)=0x8) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c100000907800003067352d475cd729f1475af63fde6b3f4fc0dd2abdaa49a55545948f8e3e62910eb3c3b64ecd017f61c73b41f9ebd82653a1959f605ae72f22820b25b93a24e0bfad9990fc82a771113aeafbab65e22a6d5923fa9ce7ce27860c73641810af48cc5c83228ada915741dbdd6c289cbec64693ccbdab384d5b20ef3e50a7560783fdf561f96380b8705ba6dd31d0e62faa7b1fce59c0c67b848af3a637733721753935ca0aad849a263de659e53cf651c6f59ff3c5628c2a62b5e988377d0ae0d0c5b52635dc2f20493ed67b832a27c53e88145aecaf33f130a99efee86f53"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xb0ed, 0x2, [0xf, 0xfffa]}, &(0x7f00000001c0)=0xc) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={r1, 0xa3}, &(0x7f0000000240)=0x8) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c100000907800003067352d475cd729f1475af63fde6b3f4fc0dd2abdaa49a55545948f8e3e62910eb3c3b64ecd017f61c73b41f9ebd82653a1959f605ae72f22820b25b93a24e0bfad9990fc82a771113aeafbab65e22a6d5923fa9ce7ce27860c73641810af48cc5c83228ada915741dbdd6c289cbec64693ccbdab384d5b20ef3e50a7560783fdf561f96380b8705ba6dd31d0e62faa7b1fce59c0c67b848af3a637733721753935ca0aad849a263de659e53cf651c6f59ff3c5628c2a62b5e988377d0ae0d0c5b52635dc2f20493ed67b832a27c53e88145aecaf33f130a99efee86f53"], 0x0) (async) 17:44:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x19, 0x0, 0x0) 17:44:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1ae) [ 1277.867123][T25366] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1277.898051][T25370] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:33 executing program 0: add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 17:44:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x320) 17:44:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x19, 0x0, &(0x7f0000000100)) 17:44:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xb0ed, 0x2, [0xf, 0xfffa]}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={r1, 0xa3}, &(0x7f0000000240)=0x8) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c100000907800003067352d475cd729f1475af63fde6b3f4fc0dd2abdaa49a55545948f8e3e62910eb3c3b64ecd017f61c73b41f9ebd82653a1959f605ae72f22820b25b93a24e0bfad9990fc82a771113aeafbab65e22a6d5923fa9ce7ce27860c73641810af48cc5c83228ada915741dbdd6c289cbec64693ccbdab384d5b20ef3e50a7560783fdf561f96380b8705ba6dd31d0e62faa7b1fce59c0c67b848af3a637733721753935ca0aad849a263de659e53cf651c6f59ff3c5628c2a62b5e988377d0ae0d0c5b52635dc2f20493ed67b832a27c53e88145aecaf33f130a99efee86f53"], 0x0) (rerun: 32) 17:44:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003650400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:33 executing program 0: add_key(&(0x7f0000000000)='keyring\x00', 0x0, &(0x7f0000000080)="e6", 0x1, 0xfffffffffffffffc) 17:44:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1af) 17:44:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x320) 17:44:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x17, &(0x7f0000000140)='u', 0x1) [ 1278.087069][T25390] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2, 0xe345, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10, 0x0, @perf_config_ext={0x80000000, 0x6}, 0x40000, 0x8, 0x5, 0x0, 0x80e0, 0x5, 0xfe01, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004a000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bc1000009078000077ba0a22b6060000004776ee5ee403e7745ca5e82531b2af90075e97d4afe7fe0fea7661135ec803dff3735456d51a65b0bc7b67aa9025ecc5bcacdc8130bb75dac1d209cb525b7db8d20b1577f4b861"], 0x0) 17:44:33 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000003680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x597}}]}}}]}}]}}, 0x0) 17:44:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1b0) 17:44:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000660400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x2003}]}, 0x320) 17:44:33 executing program 5: add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000000061"], 0x48, 0xfffffffffffffffd) [ 1278.232001][T25408] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2, 0xe345, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10, 0x0, @perf_config_ext={0x80000000, 0x6}, 0x40000, 0x8, 0x5, 0x0, 0x80e0, 0x5, 0xfe01, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x2) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004a000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bc1000009078000077ba0a22b6060000004776ee5ee403e7745ca5e82531b2af90075e97d4afe7fe0fea7661135ec803dff3735456d51a65b0bc7b67aa9025ecc5bcacdc8130bb75dac1d209cb525b7db8d20b1577f4b861"], 0x0) 17:44:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1b1) 17:44:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x320) 17:44:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001660400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:33 executing program 5: syz_clone(0x46229482ff42b192, 0x0, 0x0, 0x0, 0x0, 0x0) 17:44:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2, 0xe345, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10, 0x0, @perf_config_ext={0x80000000, 0x6}, 0x40000, 0x8, 0x5, 0x0, 0x80e0, 0x5, 0xfe01, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x2) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async, rerun: 64) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async, rerun: 64) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81004a000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bc1000009078000077ba0a22b6060000004776ee5ee403e7745ca5e82531b2af90075e97d4afe7fe0fea7661135ec803dff3735456d51a65b0bc7b67aa9025ecc5bcacdc8130bb75dac1d209cb525b7db8d20b1577f4b861"], 0x0) 17:44:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x320) [ 1278.379774][T25424] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1278.484003][T23140] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1278.743806][T23140] usb 1-1: Using ep0 maxpacket: 8 [ 1278.874010][T23140] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1279.065181][T23140] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1279.074645][T23140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.082654][T23140] usb 1-1: Product: syz [ 1279.087422][T23140] usb 1-1: Manufacturer: syz [ 1279.092032][T23140] usb 1-1: SerialNumber: syz [ 1279.113926][T25405] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1279.134856][T23140] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1279.345063][T23140] usb 1-1: USB disconnect, device number 9 17:44:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @random="ecd47038d9a0"}, 0x48, {0x2, 0x0, @broadcast}, 'wg0\x00'}) 17:44:35 executing program 1: ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040)=0x800, 0x4) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280068000000069078ac1414bbac1414aa00004e22eccbf6f1b2f49ef3cf9cf06d9cb63bb17bd3a2f4a75426166712488a9212d99dc303e7934377474b9185412f4936fb3a7c03d6ad423b7252222734d456820ea1f0e941360fc33a07af0f0e2daee1566191f569dbe2e10fc9d44732d1f2e98047650ba19d233fed719032fd3369d6b974828cd2fc27", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB=' \x00\x00\x00\x00\x00\x00 '], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0x20, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) connect(r0, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80) 17:44:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1b2) 17:44:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, 0x4}) 17:44:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002660400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xe803}]}, 0x320) 17:44:35 executing program 5: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000300)='asymmetric\x00', 0x0, 0x0, 0x0, r0) 17:44:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x320) 17:44:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1b3) 17:44:35 executing program 1: ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async, rerun: 32) listen(0xffffffffffffffff, 0x0) (rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040)=0x800, 0x4) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280068000000069078ac1414bbac1414aa00004e22eccbf6f1b2f49ef3cf9cf06d9cb63bb17bd3a2f4a75426166712488a9212d99dc303e7934377474b9185412f4936fb3a7c03d6ad423b7252222734d456820ea1f0e941360fc33a07af0f0e2daee1566191f569dbe2e10fc9d44732d1f2e98047650ba19d233fed719032fd3369d6b974828cd2fc27", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB=' \x00\x00\x00\x00\x00\x00 '], 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0x20, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) connect(r0, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80) [ 1279.914414][T25448] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @random="ecd47038d9a0"}, 0x48, {0x2, 0x0, @broadcast}, 'wg0\x00'}) 17:44:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="02075f0002"], 0x10}}, 0x0) 17:44:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003660400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1b4) 17:44:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x320) 17:44:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @random="ecd47038d9a0"}, 0x48, {0x2, 0x0, @broadcast}, 'wg0\x00'}) [ 1280.097003][T25466] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:35 executing program 1: ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040)=0x800, 0x4) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280068000000069078ac1414bbac1414aa00004e22eccbf6f1b2f49ef3cf9cf06d9cb63bb17bd3a2f4a75426166712488a9212d99dc303e7934377474b9185412f4936fb3a7c03d6ad423b7252222734d456820ea1f0e941360fc33a07af0f0e2daee1566191f569dbe2e10fc9d44732d1f2e98047650ba19d233fed719032fd3369d6b974828cd2fc27", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB=' \x00\x00\x00\x00\x00\x00 '], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0x20, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) connect(r0, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(0xffffffffffffffff, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040)=0x800, 0x4) (async) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280068000000069078ac1414bbac1414aa00004e22eccbf6f1b2f49ef3cf9cf06d9cb63bb17bd3a2f4a75426166712488a9212d99dc303e7934377474b9185412f4936fb3a7c03d6ad423b7252222734d456820ea1f0e941360fc33a07af0f0e2daee1566191f569dbe2e10fc9d44732d1f2e98047650ba19d233fed719032fd3369d6b974828cd2fc27", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB=' \x00\x00\x00\x00\x00\x00 '], 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0x20, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) (async) connect(r0, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80) (async) 17:44:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000670400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x320) 17:44:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1b5) 17:44:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @random="ecd47038d9a0"}, 0x48, {0x2, 0x0, @broadcast}, 'wg0\x00'}) 17:44:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x3000000}]}, 0x320) [ 1280.286252][T25491] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1b6) 17:44:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000140)='u', 0x1) 17:44:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x1c, 0x22, 0x103}, 0x1c}}, 0x0) 17:44:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001670400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x5000000}]}, 0x320) 17:44:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1b7) [ 1280.789045][T25516] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x6000000}]}, 0x320) 17:44:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1b8) 17:44:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 17:44:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x10, 0x1, 0x0, 0x0, {}, [@RTA_PREFSRC={0x8, 0x7, @local}]}, 0x24}}, 0x0) 17:44:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002670400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x320) 17:44:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x4, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) [ 1280.957153][T25531] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:44:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1b9) 17:44:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000080)={@multicast2, @empty, @private}, 0xc) 17:44:36 executing program 0: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={r0}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'sha3-256-generic\x00'}}, 0x0, 0x0) 17:44:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003670400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1ba) 17:44:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x8000000}]}, 0x320) 17:44:36 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000640)=0x3) 17:44:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1bb) 17:44:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x1c, 0x26, 0x103}, 0x1c}}, 0x0) 17:44:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000680400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000540)=0xfffffffffffffdaa) 17:44:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x9000000}]}, 0x320) 17:44:36 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000580), &(0x7f00000005c0)={0x0, "a67ce620cd2a628f696da7fb10cd9f578312710fff0d5802df66f49c86ca79c0d66824eea6b2e8d19c31eb37085fe77b65674b7aea7648f80b7dcadbd47c8a69"}, 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 17:44:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000180)={0x0, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @dev}}}, 0x108) 17:44:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1bc) 17:44:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xa000000}]}, 0x320) 17:44:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001680400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:36 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0xb, 0x0, 0x64}}) 17:44:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1bd) 17:44:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x0, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @local}}}, 0x108) 17:44:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xc000000}]}, 0x320) 17:44:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002680400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:37 executing program 0: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="e9", 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) 17:44:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x9, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast1}}]}, 0x28}}, 0x0) 17:44:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xd000000}]}, 0x320) 17:44:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1be) 17:44:37 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x712e7ddca08d2915, r0, 0x0) 17:44:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 17:44:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003680400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xe000000}]}, 0x320) 17:44:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1bf) 17:44:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newnexthop={0x28, 0x6c, 0x407, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_ID={0x8}]}, 0x28}}, 0x0) 17:44:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREFSRC={0x8, 0xf, @local}]}, 0x24}}, 0x0) 17:44:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xf000000}]}, 0x320) 17:44:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1c0) 17:44:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="ff", 0x1}], 0x2}, 0x0) 17:44:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newnexthop={0x2c, 0x6c, 0x407, 0x0, 0x0, {}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8}]}]}, 0x2c}}, 0x0) 17:44:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000690400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1c1) 17:44:37 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000003, 0x13, r0, 0x0) 17:44:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x18000000}]}, 0x320) 17:44:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, 0x0, 0x0) 17:44:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001690400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1c2) 17:44:37 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000030c0), 0x0, 0x0) fstat(r0, &(0x7f0000003600)) 17:44:37 executing program 0: syz_clone(0x42a0c080, 0x0, 0x0, 0x0, 0x0, 0x0) 17:44:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x19000000}]}, 0x320) 17:44:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1c3) 17:44:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002690400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:37 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) getrusage(0x1, &(0x7f0000000480)) 17:44:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x1a000000}]}, 0x320) 17:44:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000200), 0x7, 0x8) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r1, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x8, "21a46dd78c10"}, @exp_fastopen={0xfe, 0x13, 0xf989, "e0cffe7890cd59491b01d1a84a9596"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xc, 0xf989, "825d64015449fe33"}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r2, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x8, "21a46dd78c10"}, @exp_fastopen={0xfe, 0x13, 0xf989, "e0cffe7890cd59491b01d1a84a9596"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xc, 0xf989, "825d64015449fe33"}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) syz_emit_ethernet(0x308, &(0x7f00000003c0)={@multicast, @multicast, @void, {@mpls_uc={0x8847, {[{0x4, 0x0, 0x1}, {0x6}], @ipv6=@tcp={0x3, 0x6, "a8b964", 0x2ca, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x1d}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}, @hopopts={0x4, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x7, 0x8, [0x0]}}, @pad1, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x40, {0x0, 0xe, 0x3f, 0xfff8, [0xffff, 0x101, 0x6, 0x6, 0x4, 0x0, 0x8c2b61e]}}]}, @fragment={0x6, 0x0, 0xd0, 0x0, 0x0, 0x3, 0x68}, @dstopts={0x73, 0x3, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x8}]}, @routing={0x3c, 0xe, 0x0, 0xff, 0x0, [@empty, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x7d, 0xa, 0x2, 0x2, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, @private0, @private0, @rand_addr=' \x01\x00']}, @srh={0x4, 0x6, 0x4, 0x3, 0xc2, 0x60, 0x4, [@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0]}, @routing={0x29, 0x2, 0x2, 0x86, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x62, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x1, [0x0]}]}, @srh={0xc2, 0xa, 0x4, 0x5, 0xc2, 0x123cda45d1753c46, 0x3, [@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @loopback, @mcast1]}], {{0x4e21, 0x4e22, r1, r2, 0x0, 0x0, 0xc, 0xc2, 0x2926, 0x0, 0x0, {[@generic={0x22, 0xd, "bdea776b72557690e5eb3a"}, @nop, @generic={0x1a, 0xd, "839046fd8d6b16485e7343"}]}}, {"703649f8c0a6baf078f8a403ecc582613d9b858569a6a3be845c9fba18962b7aff69e95666b2389bfdd015f191116f2883ffbee1e6ab715a206a7960ef85b6e66a7b72397fd102eb9c29a2a1dcf4175b6e4b"}}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x13, 0xd2, [@broadcast, @private=0xa010101, @remote, @broadcast]}, @generic={0x83, 0x11, "1cc61d06b762e82fbf89f3d3430950"}]}}, {{0x0, 0x4e22, 0x41424344, r3, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x4, 0x4) 17:44:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1c4) 17:44:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x1b000000}]}, 0x320) 17:44:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1c5) 17:44:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003690400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) listen(r0, 0x0) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) (async, rerun: 64) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000200), 0x7, 0x8) (async) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r1, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x8, "21a46dd78c10"}, @exp_fastopen={0xfe, 0x13, 0xf989, "e0cffe7890cd59491b01d1a84a9596"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xc, 0xf989, "825d64015449fe33"}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r2, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x8, "21a46dd78c10"}, @exp_fastopen={0xfe, 0x13, 0xf989, "e0cffe7890cd59491b01d1a84a9596"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xc, 0xf989, "825d64015449fe33"}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x308, &(0x7f00000003c0)={@multicast, @multicast, @void, {@mpls_uc={0x8847, {[{0x4, 0x0, 0x1}, {0x6}], @ipv6=@tcp={0x3, 0x6, "a8b964", 0x2ca, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x1d}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}, @hopopts={0x4, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x7, 0x8, [0x0]}}, @pad1, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x40, {0x0, 0xe, 0x3f, 0xfff8, [0xffff, 0x101, 0x6, 0x6, 0x4, 0x0, 0x8c2b61e]}}]}, @fragment={0x6, 0x0, 0xd0, 0x0, 0x0, 0x3, 0x68}, @dstopts={0x73, 0x3, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x8}]}, @routing={0x3c, 0xe, 0x0, 0xff, 0x0, [@empty, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x7d, 0xa, 0x2, 0x2, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, @private0, @private0, @rand_addr=' \x01\x00']}, @srh={0x4, 0x6, 0x4, 0x3, 0xc2, 0x60, 0x4, [@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0]}, @routing={0x29, 0x2, 0x2, 0x86, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x62, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x1, [0x0]}]}, @srh={0xc2, 0xa, 0x4, 0x5, 0xc2, 0x123cda45d1753c46, 0x3, [@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @loopback, @mcast1]}], {{0x4e21, 0x4e22, r1, r2, 0x0, 0x0, 0xc, 0xc2, 0x2926, 0x0, 0x0, {[@generic={0x22, 0xd, "bdea776b72557690e5eb3a"}, @nop, @generic={0x1a, 0xd, "839046fd8d6b16485e7343"}]}}, {"703649f8c0a6baf078f8a403ecc582613d9b858569a6a3be845c9fba18962b7aff69e95666b2389bfdd015f191116f2883ffbee1e6ab715a206a7960ef85b6e66a7b72397fd102eb9c29a2a1dcf4175b6e4b"}}}}}}}}, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x13, 0xd2, [@broadcast, @private=0xa010101, @remote, @broadcast]}, @generic={0x83, 0x11, "1cc61d06b762e82fbf89f3d3430950"}]}}, {{0x0, 0x4e22, 0x41424344, r3, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x4, 0x4) 17:44:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newnexthop={0x28, 0x1a, 0x407, 0x0, 0x0, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc}}]}, 0x28}}, 0x0) 17:44:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x20030000}]}, 0x320) 17:44:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1c6) 17:44:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900006a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1282.554959][T25664] validate_nla: 10 callbacks suppressed [ 1282.554980][T25664] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1282.586980][T25666] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 17:44:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x7, 0x0, 0x0, 0x0) 17:44:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async, rerun: 32) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async, rerun: 32) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) (async) listen(r0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000200), 0x7, 0x8) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r1, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x8, "21a46dd78c10"}, @exp_fastopen={0xfe, 0x13, 0xf989, "e0cffe7890cd59491b01d1a84a9596"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xc, 0xf989, "825d64015449fe33"}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r2, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x8, "21a46dd78c10"}, @exp_fastopen={0xfe, 0x13, 0xf989, "e0cffe7890cd59491b01d1a84a9596"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xc, 0xf989, "825d64015449fe33"}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x308, &(0x7f00000003c0)={@multicast, @multicast, @void, {@mpls_uc={0x8847, {[{0x4, 0x0, 0x1}, {0x6}], @ipv6=@tcp={0x3, 0x6, "a8b964", 0x2ca, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x1d}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}, @hopopts={0x4, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x7, 0x8, [0x0]}}, @pad1, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x40, {0x0, 0xe, 0x3f, 0xfff8, [0xffff, 0x101, 0x6, 0x6, 0x4, 0x0, 0x8c2b61e]}}]}, @fragment={0x6, 0x0, 0xd0, 0x0, 0x0, 0x3, 0x68}, @dstopts={0x73, 0x3, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x8}]}, @routing={0x3c, 0xe, 0x0, 0xff, 0x0, [@empty, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x7d, 0xa, 0x2, 0x2, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, @private0, @private0, @rand_addr=' \x01\x00']}, @srh={0x4, 0x6, 0x4, 0x3, 0xc2, 0x60, 0x4, [@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0]}, @routing={0x29, 0x2, 0x2, 0x86, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x62, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x1, [0x0]}]}, @srh={0xc2, 0xa, 0x4, 0x5, 0xc2, 0x123cda45d1753c46, 0x3, [@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @loopback, @mcast1]}], {{0x4e21, 0x4e22, r1, r2, 0x0, 0x0, 0xc, 0xc2, 0x2926, 0x0, 0x0, {[@generic={0x22, 0xd, "bdea776b72557690e5eb3a"}, @nop, @generic={0x1a, 0xd, "839046fd8d6b16485e7343"}]}}, {"703649f8c0a6baf078f8a403ecc582613d9b858569a6a3be845c9fba18962b7aff69e95666b2389bfdd015f191116f2883ffbee1e6ab715a206a7960ef85b6e66a7b72397fd102eb9c29a2a1dcf4175b6e4b"}}}}}}}}, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x13, 0xd2, [@broadcast, @private=0xa010101, @remote, @broadcast]}, @generic={0x83, 0x11, "1cc61d06b762e82fbf89f3d3430950"}]}}, {{0x0, 0x4e22, 0x41424344, r3, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x4, 0x4) 17:44:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x7f000000}]}, 0x320) 17:44:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1c7) 17:44:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000280)=""/152, &(0x7f0000000140)=0x98) 17:44:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900016a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:38 executing program 0: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0x0) 17:44:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1c8) 17:44:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1e6acb4e000080aa1053f6"], 0x0) 17:44:38 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x4400, 0x0) 17:44:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, 0x320) [ 1282.808418][T25680] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:38 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x96, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902840002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000029052415080008241c0900070600072414020004000c241b01000600800305090108241cff000701040905810300020000000904010000020d00000904010102020d0000090582020002000009090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:44:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900026a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x9b000000}]}, 0x320) 17:44:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1c9) 17:44:38 executing program 5: syz_emit_ethernet(0x86, &(0x7f0000000180)={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "57cc74", 0x4c, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[@hopopts={0x3b}]}}}}}, 0x0) 17:44:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1e6acb4e000080aa1053f6"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1e6acb4e000080aa1053f6"], 0x0) (async) [ 1283.007089][T25695] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1ca) 17:44:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 17:44:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xe8030000}]}, 0x320) 17:44:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1e6acb4e000080aa1053f6"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1e6acb4e000080aa1053f6"], 0x0) (async) 17:44:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900036a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:38 executing program 5: setrlimit(0x7, &(0x7f0000000100)={0xfff, 0xda4}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x90102, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000380)=""/111) [ 1283.217578][T25723] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1283.263802][ T20] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1283.624008][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.794093][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1283.807804][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.823825][ T20] usb 1-1: Product: syz [ 1283.832537][ T20] usb 1-1: Manufacturer: syz [ 1283.842927][ T20] usb 1-1: SerialNumber: syz [ 1285.003916][ T20] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1285.010394][ T20] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1285.018271][ T20] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1285.223769][ T20] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1285.252197][ T20] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1285.277868][ T20] usb 1-1: USB disconnect, device number 10 [ 1285.286145][ T20] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 17:44:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xffffff80}]}, 0x320) 17:44:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1cb) 17:44:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000040)="0b24bcacbd620a66a2b502a8a577051a94c0bfa28fee9ff17c41429387d4b5a334bc6d6ebd7f71487cb9316ab74e6602f716d4df123f8998047256b625fc1897a006da4cdea3c5cc6be3e0d111d79cf2ed780e5abbe6f86011da6fa6865f658ab0e12817518394f4212dceca826e02c710659de93609bf227b5d63ecbff6a918cc713a945dbc91e85f66869ffb7a8c4ae6ec0ac5e164b40538b051a7917ae07cfaa2e834cf63b5650e275d9d62dddc2627397a7e237f3cc299b13cb19f2e0760141828418efdd7e22f05291961efa5bdfbe8619a1b2f8595ff93bad139d01fdaab796ae84ea41bcadda8b0dda2a54762f0ab8e", 0xf3}, {&(0x7f0000000200)="a3a892aa15b87c89a6a4d04e9485e287a39ca4e586afb7d8d08ddfd23f37c9ef30f30f659548fe1186a3e4d2e5e8799e11551584429404c8cca10543279596973314022c7ae26d4b4ff323f450415a444812ed7b525aee3fc658e71dbd9737550f3821e274c6bd4c91de3ecf0bb061355857934e8765ed7ba47bf309d0b9", 0x7e}, {&(0x7f0000000280)="2b78b173cb58ed844a2684a9f83ba740091a3b041ddc37ef4d1cb836bdf59b57176ec90d295e7fd62b05fe823540e1ce9e5b9e638a438f4af56d8bb4585d53627447f4d2cef88348568716bf30648efaaefc19833e9c3b57a901f10c3f9cfc49b3bceab6322f8c57f5949e217ec05025067c62758dad2048e9c7b95141", 0x7d}, {&(0x7f00000003c0)="b902ca3222312b9165ff9e89e303a3a7f1b7dab70392549a3f125ec068a34d52f147e24a8634429cd675b6368deb0da82473ba76e93f403724cddb432109b48c7f7b67999d05c27d0f58b288d0be30124e04d563f201873a7cb8fe48102aef48353c695199b6a533d27da4ca7bfa41bcb2ed238b193ec267259ffe719a9f0026d599d5e10e3aa21fd93760788e38be7df9e4aa1c2b1abff07c61fb64bc38c53f447c71f22919f4ce8f54f7051461bb67c2fa4f9a1e01fa71c3a413593e1c3942df78cb45eae9a819fbd796a306dbf14884a115bf553dfa4a58bc25fff63a24b1760c5f0542354554231a3c856afb2de5a91a4389b2acbbd73de19e6303e375565db6ce0a07088d9c438bb0ee20a5d00511e05f6895000e51b89f7a1cad63406641a3f38b573199b5af573a9f4f657a2f82f770fbab76d90097bfd75052bd71a3a8b72d8cafba5f1be29d37c392c6257e69282c443c424c256ebae686434e62d8a5f8198ddf7ba82c0bcb4c832b98cd8ced1ac3180872863213a5bcdc946a2a34cc18836c8a2bc4654bf884e7eb38b0553c5adb6ae5d70744241c5ff60f256cd380255f8d8a766ab21371b13dbe0180d72cbfcecce169e04db6ad128f3c6a70f488a56f15576a92d9b092afc3ba747490d52d003132658e230c05a84ff03b591cc03515e11842c24571dd661e3b9d7b2eccb2107ce179249370dc51fa7b0652455372276ce83182e7dc3c64d4a3e4b113b2fb1a584d9653830acf40084b7407454c06b32e60184864d9ce5eaa803c5eef625a263228938943b7a0647a3c4bae2eeb6caea32a37cdce9435e15511a2e2771f0a2dbb39cf0248e39cee79df32c9de81345b4e7667d3b2240c44ca8ae7f6539080b01d1f3415e73e6a8cb52778eabfd3cf64494c4b0e5da8c9db4ac7a2134ea7868e6dacca62e933263ba6f09fc52fd1a3f3786fa854169cd6a42fb43f38bad75589518f11b1e76b11b9c267ae4ab51495116882869db2cb5a788d897d2723e1ac3089541ad2b778af044962ba9a4a29ab0f0e6bd484675b6d7e3688afb852016b5240fcd7333ea76d41225600dcbfaa3da53a96d648b4e768e1665b376e1540a20d456de3a3468bef95a2f0dc26918c7d400442f6b04e5aa07246e43cbc8be661c6086c5b63a121fece54e5a5eed5fbc25f68686de7ad5df326ce75693058482ef6604fe60f0aaf3299e43986f8402eed1435c4c76c45d4938a0f1eaf37dbbfe09cf04e84b98c529e28f22dca4d38f7830c074eb9e9c53f790adb1aa2a86db644ca0fbf264ba51d7f1a2d083945bb06d5123d270be545866beace6c161e2f58fee830babccdc3d0835de87e1718deb2f0e368cc373dbcb2b895e45a343a37d0d7ad1ada09b8b05887360cf7b3b2f33b6519bab418801daffd96ef821310d7a50415f4e57319a984bb648d5cf482387861f9dcb7668a47af58aaff23d7d8087f790986a37724ff61f9f71ed0cc2bf7baafb864b000bd54d83bb35017656dfbbf8caf726ad01abd5302f063813d597dc1fc43de4b2ea0d47e871c09f260d3bb870c3f41e28c005889afeea2d5c8af84ca6f9bdf92d2cdeb4713063dc9eb9aab3c494562cc174a7614149cd68326f483e2730ffc0897e9925ab149a92e8cbab0921db6349ad7fca065a3f34627c9d094da65e7f5478df5e0dbffd52bd0eab165c634914c0d2954c8e275e5c90036f59f63b34c5e978e6ff2d0144de7cf756ba85e620d039de21f7c273e6dbc5d45f30e063421fa66e967617a33d2feaf0b025a7ac9d2c5841702b344eba3878f4842e17b987c859d3a89b68028eb19cc94af598e01b288ee694df559681b11ae6e8ded9e91e28c0c402aef5ad986809bf7f00da4ea380c7f82b83503dd85150bb1b096a7ce9a1b47ef38762ad13878123a905be9143d3fb57e6c4741bfa9730ace207ef92d46d5172b41e8c06b154ad943ddef27d7b509c2361859daddb6f719ef7d26287c4d88587c65a517875b811240b1dbe5a87b7b576b380a9128062e4e1d61b672f2851fa282845a948c7169b0572119c3d1c637db5698a41274e40fb2c92be052da6955147a6f285c6d8503793712b580ffa49be3511ac191f9067bb21dad622c6a6a5cbc86a75ef53119885f05b2aa52d143e120b28e85e09461da37f4c6082f8c07fad06a5c891f2eb90f9dad779bdf63c937426afe5939dd116a30e472624a726a7fc02c26ffaeee4d7545e8a55dc54cabbc96c5f1827791e67e334deb2b72bda4ed25ffa067339acc08281b89559abdc3808e6199bc318f5e946d947308bde2f0f5a53fc61ba0ebbfcd4ae2d79ff703b3ea4d3c2aa2e1b789e517043a979fdf3c66097f8bf1948d2dcd5c87eb3cb2d8efb8597239b9a707eadcbf6cbd73d72886c7a9f840b691ae32f88f22d8e8c2b23368aca2da0e09822f47315fdcec895eb0580aa941dfb819b1adfa4c746729983d356c5ff0843df94309296ebbf4288ffcad33cce47572daa235076ccd407fe29f0434b9260d01e977405230998d0f3ac68b6e16926984b6bf32c5e9598c3cc0d9152324323efe04f8b946934dda4e2cc261c5b15dce6e87c5e0df9b8dd1c458750762dfa84d3e1babaaba39f6ac91e64711a5fd266bb5498f958935a765f54582290428b2e453d6215c506bfd05ee164260bb171719e41da82b291dee010a6f6adf5ef3351f84bbfc6d3cd7d07631d98fc02b772b847c683825dd0712de81d8ecbbe9c1b58fce1aa3387f0c1d920b4df337a791e9648ae080fd174fc8a68714673c46154082763b223cc7afa0d11609884b93ed8b9b791ecd088a0e4f03c43f68738f22021cbc6f11cb9c77729de4772095b1d204080b987a5649db49a09da40a53196bd7759e7809f1526823403205014187b913bb9a7352289874495c5ed571a2e206baa5de69c572fcf0c9ac67a615ed8f934d8eab840871f15848cddaf3c8a5b2df73eec7750277fe8dfdb93b2eb4328e093d9d7e58a40ab06de3497dd5c868c3348307ff1723c78a503ed7f2fc3f539360b1d2120de6bf0ac707dd68b74d85cbb97151f7f687d8109c7f387374ef2a0b84f3e30dd2314256e13495c2dc9626861cf9a21563e66b72c933859c26c512ba8929e8299b22cb530962b74fcecd8198414d1af3e975ee928a578588780a0c7b0c31e06d36096c1f9e4f98d4c9f4d587be906d530304e40dc5a5eee300a572f21a1497a9e93d6e5288b42575d42f7908ea8bac0ff67539c3074e21c8246bb34c59226924d07198132b51e5f2666eaee461c71c3ec9ba83877460d2bb0f2e7b4b24e673bf8f16c0be7057f245a5db824c80178a88ef8d31dfac4d705cd6a0fb719654e6c869ab0ae4cbce7d9cdb33e8ebb5173e86f699f63a49fbf3834460367e559e07bebf4ae8b0e4dc7b97cb116378c69fb0d60ac62c5257a2550a2b1813362887e0d8bdd667749d6d4490e97c510ab3d231ffb97dec7b4d8ec67c09ee3c23ac88aeeca5f970a11a2e28ca1f50c93a6d6e7dbe4af77237510e50ce922e8899b05b32379b159f0b808b61f5f3576800b12bb69c6aa44544ef148071648a1f4cb2430dd58b28e2ec20a327c6cfbb8f34a8a9e3b14c22bd7a6f1abf72690bd70bf14f168c90f48c888baed5363060b1c98cdb99a5460d3847b4fd67ef7ab1019b6ffd413b0bd24591d67724112382be9e4e40a3e3d05ab337310e3c6a653a8d54518823230245d70d294cea15672ab967490cf25ed25bfe72070c01839e1cbaa1fe70b2b2d81e316a84a659c9f5e6433d39fb7c71833246d97a904421adb9a1f7c6554b34de7cb8849a257c49d2d0cbf2aa164e56db35d5f57256a973451b0a5b47515089a3c42d5a5f960b9b4471b170a7b488c60f6c83c0dff220240a73e32aec3f808aa409013a3e2e77071c17fa420b015228bf74253b8bb9ffd6e41e62edf3943989ceacfa277985d75c088a103c45555970bcf79bab1fa53f4e8be276195e91d27ed31876c6dc276a8d40eaa418580c42ff027e8616e011374d403ddcbefb6d49cfaeb32cd6974cd131e44f38c02bdc514440efe00a37c45b25b79675d8b3e5ea8c203ead3beb56841099df4378dffd9819983b08de5b4b150e801b761289b231c3cf6a6e29c4edff67f14c001c691bae7b6c5ba6a6cb566269f870326724acba0c8743f0b7306dd5e9fd3006210e51dd3ac1105b64d10b8252e9ce42624790dfb801e519a1c3eff284a62e07c07386d847239aff7755531950fc7bef070fae724810f81d689d5b8aec366eebaaca9c158b51d05b59dc9438a2202f4e22c9ebda10ff26e8c2a8cf49e853362816bf2494f206ba2848b53f01e14a44aebdc4f441fe692c99b6da47705f9e551de387db4f1d764650c7d42df5fdbcc98455738b44dd15a18a06a242072aa5a93d8de9b20ab374f4f71ceb17be36bb039beb0338b1dc6d22dc00ae5f8b2ae147ca1e82969736afdeb91c56abc8ed1b71eb35c7f68a280e25c4948c3181456f32e503ee225777d008b222262bdd7918f3e76f1aaa57ba4eb1ed7d1ef06886ecb60f80a7c7908a673b7b21c56cd73b248b8458a93174df80981d85b1bb20e97ca2358b6e3aefb113ff5821adc47390a061cf05302538b0655405831dae1c0e3740b928028c20f67a56d197f9e27d37a6d765b2ff15d0f4070955f67e58dd0b73eb22f8381841b545d41b5b1951428f045e916f670fae38b7331488dec1db4553fcb555714dba506bedec79a8fa6c7ad2827f09230865f42678808ff54c341114b60b8f57c6b404523adc15c0a218ec4908963022233bd8606f1c71a1c374c6c1cc40e0405ca96ed408cefba5eead160d576028af55156b4f25a49643c03809d7c08a444209f68ca7943ba4a5c47ec2824cf0e07037f2062bfdde4a6ff85dc1c950b3124c6bef97aa2ebc25417915201c618fc2669154b1c914766778497d711b68036455414b0d1b887779d0c6caa104f3b5be3ea0febf1c82291c0fac2b64dca17e3921dfa1a50c0cfbd0da7f18147f69a7ddd5bd98a73a6a0e0204cfcc7a67acf87403dc509204636d260101abc7d9b54d698917d0439b5f76df4a0cd6e9bd0b1e04f63f57d1d2b6aa69dbf811d8c04304c404e495cb4989558ad432e6a2e9bd2c4aa53994b7c582d15c232dee554163d8d47b31d6b32a3bfd84e40a8b6b22711e5554b616419289b7d1b1a3a4be0a6f8905d4815b139b6dbfa842154d4c6b2b3be804ff738bb2a0ec79c339bdf4d25c16fecf87e70b2d319bdee6adee246bbfdada937beb66fb2319ca612d2f18c5653bb74bfe485db9862f6a84cda4f667e77f1159fec8038f8231cc12403699e2069eca5adf6a5932e01c04aa520b39d3e9f6a4e19618cec7cfa55048ed264458c41099e47899ef56fa891ac0420504cb8fea4fa46648ffe3b68cd36fdc0af105ec04a2a578bcd02b22e81ee222ea28690e41bca478c9e442f48023a3be9c764b8d114f2a2ef0bd26d73ac818f80649187a6c075024da0f221a214e6c516a8d7a4f702b5f762d9cc01b7950b501386140635b11edbde71c88469616d626998fc9b3e1866503eecd74a71195938de8f7bbc0c5fb528fd2c60087e667a3af901fcfeb355ef16af39a03322fe1c5f84bd2aaddeb6dc5848b39450a475b81ff99372c01f0fcfece534cd51794bb8ed5f3f0e506457c14f46c1c668881d55832e3b24dc8102f676e6918283419748d4b490e596c4be0d4506c11ed6e84c2c829148e86c4ca67dcd39d43cba6191449a5afef940cd75d04d40f431e121fcb93d563", 0x1000}, {&(0x7f0000000300)="5150e1f8171114591e041dec4d265909505ae3f185d759a29bb9e5acc3ef1b1fcd805ca237e5676c1090d0cf237917c9c6322ecbd3fdc922a81448300d86b2c05741c4e9cc157a301d261d38ccd23972c37308b00832ff2e417a", 0x5a}], 0x5, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:44:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900006b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:41 executing program 5: shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) 17:44:41 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x96, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902840002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000029052415080008241c0900070600072414020004000c241b01000600800305090108241cff000701040905810300020000000904010000020d00000904010102020d0000090582020002000009090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:44:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000040)="0b24bcacbd620a66a2b502a8a577051a94c0bfa28fee9ff17c41429387d4b5a334bc6d6ebd7f71487cb9316ab74e6602f716d4df123f8998047256b625fc1897a006da4cdea3c5cc6be3e0d111d79cf2ed780e5abbe6f86011da6fa6865f658ab0e12817518394f4212dceca826e02c710659de93609bf227b5d63ecbff6a918cc713a945dbc91e85f66869ffb7a8c4ae6ec0ac5e164b40538b051a7917ae07cfaa2e834cf63b5650e275d9d62dddc2627397a7e237f3cc299b13cb19f2e0760141828418efdd7e22f05291961efa5bdfbe8619a1b2f8595ff93bad139d01fdaab796ae84ea41bcadda8b0dda2a54762f0ab8e", 0xf3}, {&(0x7f0000000200)="a3a892aa15b87c89a6a4d04e9485e287a39ca4e586afb7d8d08ddfd23f37c9ef30f30f659548fe1186a3e4d2e5e8799e11551584429404c8cca10543279596973314022c7ae26d4b4ff323f450415a444812ed7b525aee3fc658e71dbd9737550f3821e274c6bd4c91de3ecf0bb061355857934e8765ed7ba47bf309d0b9", 0x7e}, {&(0x7f0000000280)="2b78b173cb58ed844a2684a9f83ba740091a3b041ddc37ef4d1cb836bdf59b57176ec90d295e7fd62b05fe823540e1ce9e5b9e638a438f4af56d8bb4585d53627447f4d2cef88348568716bf30648efaaefc19833e9c3b57a901f10c3f9cfc49b3bceab6322f8c57f5949e217ec05025067c62758dad2048e9c7b95141", 0x7d}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000300)="5150e1f8171114591e041dec4d265909505ae3f185d759a29bb9e5acc3ef1b1fcd805ca237e5676c1090d0cf237917c9c6322ecbd3fdc922a81448300d86b2c05741c4e9cc157a301d261d38ccd23972c37308b00832ff2e417a", 0x5a}], 0x5, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) (async) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000040)="0b24bcacbd620a66a2b502a8a577051a94c0bfa28fee9ff17c41429387d4b5a334bc6d6ebd7f71487cb9316ab74e6602f716d4df123f8998047256b625fc1897a006da4cdea3c5cc6be3e0d111d79cf2ed780e5abbe6f86011da6fa6865f658ab0e12817518394f4212dceca826e02c710659de93609bf227b5d63ecbff6a918cc713a945dbc91e85f66869ffb7a8c4ae6ec0ac5e164b40538b051a7917ae07cfaa2e834cf63b5650e275d9d62dddc2627397a7e237f3cc299b13cb19f2e0760141828418efdd7e22f05291961efa5bdfbe8619a1b2f8595ff93bad139d01fdaab796ae84ea41bcadda8b0dda2a54762f0ab8e", 0xf3}, {&(0x7f0000000200)="a3a892aa15b87c89a6a4d04e9485e287a39ca4e586afb7d8d08ddfd23f37c9ef30f30f659548fe1186a3e4d2e5e8799e11551584429404c8cca10543279596973314022c7ae26d4b4ff323f450415a444812ed7b525aee3fc658e71dbd9737550f3821e274c6bd4c91de3ecf0bb061355857934e8765ed7ba47bf309d0b9", 0x7e}, {&(0x7f0000000280)="2b78b173cb58ed844a2684a9f83ba740091a3b041ddc37ef4d1cb836bdf59b57176ec90d295e7fd62b05fe823540e1ce9e5b9e638a438f4af56d8bb4585d53627447f4d2cef88348568716bf30648efaaefc19833e9c3b57a901f10c3f9cfc49b3bceab6322f8c57f5949e217ec05025067c62758dad2048e9c7b95141", 0x7d}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000300)="5150e1f8171114591e041dec4d265909505ae3f185d759a29bb9e5acc3ef1b1fcd805ca237e5676c1090d0cf237917c9c6322ecbd3fdc922a81448300d86b2c05741c4e9cc157a301d261d38ccd23972c37308b00832ff2e417a", 0x5a}], 0x5, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (async) 17:44:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x320) [ 1285.783907][T25755] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:41 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x58}}, 0x0) 17:44:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1cc) 17:44:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900016b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:41 executing program 5: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x21) 17:44:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1cd) 17:44:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x180000000000000}]}, 0x320) 17:44:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000040)="0b24bcacbd620a66a2b502a8a577051a94c0bfa28fee9ff17c41429387d4b5a334bc6d6ebd7f71487cb9316ab74e6602f716d4df123f8998047256b625fc1897a006da4cdea3c5cc6be3e0d111d79cf2ed780e5abbe6f86011da6fa6865f658ab0e12817518394f4212dceca826e02c710659de93609bf227b5d63ecbff6a918cc713a945dbc91e85f66869ffb7a8c4ae6ec0ac5e164b40538b051a7917ae07cfaa2e834cf63b5650e275d9d62dddc2627397a7e237f3cc299b13cb19f2e0760141828418efdd7e22f05291961efa5bdfbe8619a1b2f8595ff93bad139d01fdaab796ae84ea41bcadda8b0dda2a54762f0ab8e", 0xf3}, {&(0x7f0000000200)="a3a892aa15b87c89a6a4d04e9485e287a39ca4e586afb7d8d08ddfd23f37c9ef30f30f659548fe1186a3e4d2e5e8799e11551584429404c8cca10543279596973314022c7ae26d4b4ff323f450415a444812ed7b525aee3fc658e71dbd9737550f3821e274c6bd4c91de3ecf0bb061355857934e8765ed7ba47bf309d0b9", 0x7e}, {&(0x7f0000000280)="2b78b173cb58ed844a2684a9f83ba740091a3b041ddc37ef4d1cb836bdf59b57176ec90d295e7fd62b05fe823540e1ce9e5b9e638a438f4af56d8bb4585d53627447f4d2cef88348568716bf30648efaaefc19833e9c3b57a901f10c3f9cfc49b3bceab6322f8c57f5949e217ec05025067c62758dad2048e9c7b95141", 0x7d}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000300)="5150e1f8171114591e041dec4d265909505ae3f185d759a29bb9e5acc3ef1b1fcd805ca237e5676c1090d0cf237917c9c6322ecbd3fdc922a81448300d86b2c05741c4e9cc157a301d261d38ccd23972c37308b00832ff2e417a", 0x5a}], 0x5, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1285.972797][T25773] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:41 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000001c0)={@broadcast}, 0x8) 17:44:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1ce) [ 1286.103636][T25435] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1286.523893][T25435] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.693774][T25435] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1286.702962][T25435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.711571][T25435] usb 1-1: Product: syz [ 1286.716193][T25435] usb 1-1: Manufacturer: syz [ 1286.720971][T25435] usb 1-1: SerialNumber: syz [ 1287.853907][T25435] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1287.860380][T25435] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1287.868081][T25435] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1288.073856][T25435] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1288.100960][T25435] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1288.135799][T25435] usb 1-1: USB disconnect, device number 11 [ 1288.149913][T25435] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 17:44:44 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x96, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902840002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000029052415080008241c0900070600072414020004000c241b01000600800305090108241cff000701040905810300020000000904010000020d00000904010102020d0000090582020002000009090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:44:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x320) 17:44:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900026b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x5, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/85, &(0x7f0000000080)=0x55) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x5, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r1) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_1\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xad}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x1c, 0x17, {0x9, 0x2, @l2={'eth', 0x3a, 'syzkaller1\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20008041}, 0x880) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa8bb080045100028000000040006a27864010100ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7c10000090780000"], 0x0) 17:44:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @local, 0x4}, 0x80, 0x0}, 0x0) 17:44:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1cf) 17:44:44 executing program 5: capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00') 17:44:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900036b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1288.674246][T25836] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1d0) 17:44:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x5, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/85, &(0x7f0000000080)=0x55) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x5, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r1) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_1\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xad}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x1c, 0x17, {0x9, 0x2, @l2={'eth', 0x3a, 'syzkaller1\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20008041}, 0x880) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa8bb080045100028000000040006a27864010100ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7c10000090780000"], 0x0) 17:44:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x300000000000000}]}, 0x320) 17:44:44 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) [ 1288.799168][T25845] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1288.973938][ T20] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1289.384079][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.587234][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1289.596383][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.604567][ T20] usb 1-1: Product: syz [ 1289.608741][ T20] usb 1-1: Manufacturer: syz [ 1289.613340][ T20] usb 1-1: SerialNumber: syz [ 1290.743768][ T20] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1290.750234][ T20] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1290.757960][ T20] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1290.953742][ T20] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1290.980867][ T20] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1290.996922][ T20] usb 1-1: USB disconnect, device number 12 [ 1291.010215][ T20] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 17:44:47 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x96, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902840002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000029052415080008241c0900070600072414020004000c241b01000600800305090108241cff000701040905810300020000000904010000020d00000904010102020d0000090582020002000009090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:44:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x500000000000000}]}, 0x320) 17:44:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1d1) 17:44:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x5, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/85, &(0x7f0000000080)=0x55) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x5, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r1) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_1\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xad}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x1c, 0x17, {0x9, 0x2, @l2={'eth', 0x3a, 'syzkaller1\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20008041}, 0x880) (async) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa8bb080045100028000000040006a27864010100ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7c10000090780000"], 0x0) 17:44:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900006c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @local, [], [], 'veth1_vlan\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@remote, @mcast1, [], [], '\x00', 'netpci0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, "05eac1f7ffd614336a3fe3aae8c213d4aeaf58a707ab87c5d73fb008357ee30aa23714e78be1aa54a8f76a4325d6b00d0156cdbcfff8871fe92f81b8bbdeb93c"}}}, {{@ipv6={@dev, @private0, [], [], 'bridge_slave_1\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 17:44:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x600000000000000}]}, 0x320) 17:44:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @mcast2, [], [], 'ip6_vti0\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@private2, @private0, [], [], 'wg2\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) [ 1291.518710][T25880] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1291.532144][T25881] x_tables: duplicate underflow at hook 2 17:44:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1d2) 17:44:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x5, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x14, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x39, 0x9, 0x0, "404fdf85005bda8edb4d690e2d9601e4b5c3f8524cc277029afd2b9339c5dfaddcb765d9fcd16d7889a8725c0e376ec8cd81938c95ab"}]}}}}}}}, 0x0) 17:44:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x320) 17:44:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900016c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1291.644368][T25895] x_tables: duplicate underflow at hook 3 [ 1291.693138][T25902] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1291.813660][T25435] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1292.193929][T25435] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.406339][T25435] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1292.415514][T25435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.424200][T25435] usb 1-1: Product: syz [ 1292.428389][T25435] usb 1-1: Manufacturer: syz [ 1292.433080][T25435] usb 1-1: SerialNumber: syz [ 1293.573726][T25435] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1293.580294][T25435] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1293.588601][T25435] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1293.793916][T25435] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1293.829949][T25435] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1293.870045][T25435] usb 1-1: USB disconnect, device number 13 [ 1293.906677][T25435] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 17:44:49 executing program 5: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 17:44:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1d3) 17:44:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x320) 17:44:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x5, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) (async) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x14, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x39, 0x9, 0x0, "404fdf85005bda8edb4d690e2d9601e4b5c3f8524cc277029afd2b9339c5dfaddcb765d9fcd16d7889a8725c0e376ec8cd81938c95ab"}]}}}}}}}, 0x0) 17:44:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900026c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1294.370534][T25928] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:49 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) 17:44:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1d4) 17:44:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x320) 17:44:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x45, &(0x7f0000000040), 0x0) 17:44:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900036c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x5, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x14, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x39, 0x9, 0x0, "404fdf85005bda8edb4d690e2d9601e4b5c3f8524cc277029afd2b9339c5dfaddcb765d9fcd16d7889a8725c0e376ec8cd81938c95ab"}]}}}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x5, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x14, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x39, 0x9, 0x0, "404fdf85005bda8edb4d690e2d9601e4b5c3f8524cc277029afd2b9339c5dfaddcb765d9fcd16d7889a8725c0e376ec8cd81938c95ab"}]}}}}}}}, 0x0) (async) 17:44:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) 17:44:50 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x4}]}}, &(0x7f00000000c0)=""/226, 0x26, 0xe2, 0x1}, 0x20) 17:44:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1d5) 17:44:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x320) [ 1294.587829][T25947] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:50 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@alu={0x4, 0x0, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:44:50 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x1d, 0x0, &(0x7f00000094c0)) 17:44:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1d6) 17:44:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:44:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x320) 17:44:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900006d0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000240)) 17:44:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x4, &(0x7f0000000000)={@in6={{0xa, 0x4e21, 0x0, @private1}}, 0x0, 0x0, 0x0, 0x0, "54b345d417fd46692f878255d34ab98f08000000000000006205c67848b5429cd5b1e7a2ab1f6737e2c4e8fb43778e8984c7d966384e78ba20db21a53792cb8b92a52d12ab6f205c4f1aaae3e414d09a"}, 0xd8) 17:44:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:44:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1d7) 17:44:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x320) [ 1294.838306][T25980] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r0, 0x0, 0x18, 0x0, &(0x7f0000000040)) 17:44:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) 17:44:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1d8) 17:44:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900016d0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (async) 17:44:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1d9) 17:44:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x320) 17:44:50 executing program 5: socket(0x0, 0x8080e, 0x0) 17:44:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) [ 1295.045536][T26002] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1da) 17:44:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x17b, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x2a, 0x4, 0x0, 0x0, 0x16d, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@generic={0x89, 0xe, "0dcdfbbb4922ae35b2a93a56"}, @lsrr={0x83, 0x17, 0x68, [@local, @local, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x44}]}, @timestamp={0x44, 0x24, 0x93, 0x0, 0x4, [0x6, 0x1, 0x1, 0x0, 0x697, 0x2, 0x3f, 0x8]}, @noop, @end, @timestamp={0x44, 0x14, 0xf8, 0x0, 0x1, [0x1ff, 0x0, 0x7fffffff, 0x0]}, @timestamp_prespec={0x44, 0xc, 0x56, 0x3, 0x4, [{@multicast1, 0x3}]}, @timestamp_prespec={0x44, 0xc, 0xa7, 0x3, 0xe, [{@multicast1, 0x20}]}, @timestamp_prespec={0x44, 0x1c, 0xc7, 0x3, 0x9, [{@multicast1, 0x1}, {@multicast2, 0x80000000}, {@loopback, 0x4}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}, {"514b7b3bbbade90b8fc1df001109b6c3059ec4a28e9d15d8d644ba387c2b6bf99a7061500e7a61a644f874461f4ac8eac2a80db64cd0479b4f3d372101e6257fc3ab9364a7dbaccf9a61c027748564fec21bcfffd259542f2d201386ea5be1d39d8b3fbcab0adedb1791855301807dd5e36d0886d7116cb9c82d19493f2cceefe743a90b9d767d8098849b20850be4a0ac594e968b73358fca446a68caf85b0f1d47aec59711b314566d007580c381d6c0"}}}}}}, 0x0) 17:44:50 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x10811, r0, 0x0) 17:44:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast1, @private2}}) 17:44:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x320) 17:44:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900026d0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x101c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe5}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_SCAN_SUPP_RATES={0xfec, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x53, 0x0, "eb8e670a3a4f3c63ece17ed6a377ca3e61ea33a9d99753e82358afc59f847bb3e98a0533ec8021ffcd0a03c4976b43df32b4773c1af4ec93a7e000f049f34031e5ab82405c7011f1f1725f766df2f3"}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0xf64, 0x2, "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"}, @NL80211_BAND_6GHZ={0x1d, 0x3, "2454d13d71970c4e83d9863ef27532dae882e8820640ed1e00"}, @NL80211_BAND_2GHZ={0x4}]}]}, 0x101c}}, 0x0) 17:44:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1db) 17:44:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) (async) syz_emit_ethernet(0x17b, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x2a, 0x4, 0x0, 0x0, 0x16d, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@generic={0x89, 0xe, "0dcdfbbb4922ae35b2a93a56"}, @lsrr={0x83, 0x17, 0x68, [@local, @local, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x44}]}, @timestamp={0x44, 0x24, 0x93, 0x0, 0x4, [0x6, 0x1, 0x1, 0x0, 0x697, 0x2, 0x3f, 0x8]}, @noop, @end, @timestamp={0x44, 0x14, 0xf8, 0x0, 0x1, [0x1ff, 0x0, 0x7fffffff, 0x0]}, @timestamp_prespec={0x44, 0xc, 0x56, 0x3, 0x4, [{@multicast1, 0x3}]}, @timestamp_prespec={0x44, 0xc, 0xa7, 0x3, 0xe, [{@multicast1, 0x20}]}, @timestamp_prespec={0x44, 0x1c, 0xc7, 0x3, 0x9, [{@multicast1, 0x1}, {@multicast2, 0x80000000}, {@loopback, 0x4}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}, {"514b7b3bbbade90b8fc1df001109b6c3059ec4a28e9d15d8d644ba387c2b6bf99a7061500e7a61a644f874461f4ac8eac2a80db64cd0479b4f3d372101e6257fc3ab9364a7dbaccf9a61c027748564fec21bcfffd259542f2d201386ea5be1d39d8b3fbcab0adedb1791855301807dd5e36d0886d7116cb9c82d19493f2cceefe743a90b9d767d8098849b20850be4a0ac594e968b73358fca446a68caf85b0f1d47aec59711b314566d007580c381d6c0"}}}}}}, 0x0) 17:44:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x320) 17:44:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x48) [ 1295.305122][T26031] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900036d0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:50 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 17:44:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1dc) 17:44:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x17b, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x2a, 0x4, 0x0, 0x0, 0x16d, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@generic={0x89, 0xe, "0dcdfbbb4922ae35b2a93a56"}, @lsrr={0x83, 0x17, 0x68, [@local, @local, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x44}]}, @timestamp={0x44, 0x24, 0x93, 0x0, 0x4, [0x6, 0x1, 0x1, 0x0, 0x697, 0x2, 0x3f, 0x8]}, @noop, @end, @timestamp={0x44, 0x14, 0xf8, 0x0, 0x1, [0x1ff, 0x0, 0x7fffffff, 0x0]}, @timestamp_prespec={0x44, 0xc, 0x56, 0x3, 0x4, [{@multicast1, 0x3}]}, @timestamp_prespec={0x44, 0xc, 0xa7, 0x3, 0xe, [{@multicast1, 0x20}]}, @timestamp_prespec={0x44, 0x1c, 0xc7, 0x3, 0x9, [{@multicast1, 0x1}, {@multicast2, 0x80000000}, {@loopback, 0x4}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}, {"514b7b3bbbade90b8fc1df001109b6c3059ec4a28e9d15d8d644ba387c2b6bf99a7061500e7a61a644f874461f4ac8eac2a80db64cd0479b4f3d372101e6257fc3ab9364a7dbaccf9a61c027748564fec21bcfffd259542f2d201386ea5be1d39d8b3fbcab0adedb1791855301807dd5e36d0886d7116cb9c82d19493f2cceefe743a90b9d767d8098849b20850be4a0ac594e968b73358fca446a68caf85b0f1d47aec59711b314566d007580c381d6c0"}}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x17b, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x2a, 0x4, 0x0, 0x0, 0x16d, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@generic={0x89, 0xe, "0dcdfbbb4922ae35b2a93a56"}, @lsrr={0x83, 0x17, 0x68, [@local, @local, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x44}]}, @timestamp={0x44, 0x24, 0x93, 0x0, 0x4, [0x6, 0x1, 0x1, 0x0, 0x697, 0x2, 0x3f, 0x8]}, @noop, @end, @timestamp={0x44, 0x14, 0xf8, 0x0, 0x1, [0x1ff, 0x0, 0x7fffffff, 0x0]}, @timestamp_prespec={0x44, 0xc, 0x56, 0x3, 0x4, [{@multicast1, 0x3}]}, @timestamp_prespec={0x44, 0xc, 0xa7, 0x3, 0xe, [{@multicast1, 0x20}]}, @timestamp_prespec={0x44, 0x1c, 0xc7, 0x3, 0x9, [{@multicast1, 0x1}, {@multicast2, 0x80000000}, {@loopback, 0x4}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}, {"514b7b3bbbade90b8fc1df001109b6c3059ec4a28e9d15d8d644ba387c2b6bf99a7061500e7a61a644f874461f4ac8eac2a80db64cd0479b4f3d372101e6257fc3ab9364a7dbaccf9a61c027748564fec21bcfffd259542f2d201386ea5be1d39d8b3fbcab0adedb1791855301807dd5e36d0886d7116cb9c82d19493f2cceefe743a90b9d767d8098849b20850be4a0ac594e968b73358fca446a68caf85b0f1d47aec59711b314566d007580c381d6c0"}}}}}}, 0x0) (async) 17:44:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x1900000000000000}]}, 0x320) 17:44:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000020000503d25a80768c4f940d0124fc6010003566000002070800f00037153e370600080000000000d1bd", 0x2e}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000c35fff)=""/1, 0x0) 17:44:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) [ 1295.491461][T26050] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000180)=0xc) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'vlan1\x00', {0x4}}) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280100000000069078ac1414bbac7d0d6e37004e224d111f4a50074534a6b9e158a39a8855fc5dda196a3ca6ba5937cd4de603484fd6d0025425bddb06f8858036d0bb242c26869568cd14ddc3bc1aefe0cb7876ed7d210deea5283ac037581730162086d7d8ed1c85646ce20e469d8d609f3121132c0ec82abd52c7e273b5cd40c594c33a9ceaa38ccbb9", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) sendto$inet(r1, &(0x7f00000003c0)="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", 0x1000, 0x44, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) 17:44:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1dd) 17:44:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x320) 17:44:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900006e0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f00000002c0)) 17:44:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000180)=0xc) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'vlan1\x00', {0x4}}) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280100000000069078ac1414bbac7d0d6e37004e224d111f4a50074534a6b9e158a39a8855fc5dda196a3ca6ba5937cd4de603484fd6d0025425bddb06f8858036d0bb242c26869568cd14ddc3bc1aefe0cb7876ed7d210deea5283ac037581730162086d7d8ed1c85646ce20e469d8d609f3121132c0ec82abd52c7e273b5cd40c594c33a9ceaa38ccbb9", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) (async) sendto$inet(r1, &(0x7f00000003c0)="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", 0x1000, 0x44, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) 17:44:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1de) 17:44:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r0, 0x11, 0x67, 0x0, &(0x7f0000000040)) 17:44:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x320) [ 1295.717098][T26075] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:51 executing program 0: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000180)) 17:44:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1df) 17:44:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000180)=0xc) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'vlan1\x00', {0x4}}) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280100000000069078ac1414bbac7d0d6e37004e224d111f4a50074534a6b9e158a39a8855fc5dda196a3ca6ba5937cd4de603484fd6d0025425bddb06f8858036d0bb242c26869568cd14ddc3bc1aefe0cb7876ed7d210deea5283ac037581730162086d7d8ed1c85646ce20e469d8d609f3121132c0ec82abd52c7e273b5cd40c594c33a9ceaa38ccbb9", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) (async) sendto$inet(r1, &(0x7f00000003c0)="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", 0x1000, 0x44, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) 17:44:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900016e0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x2003000000000000}]}, 0x320) 17:44:51 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8953, &(0x7f0000000080)={'wlan0\x00'}) 17:44:51 executing program 0: socketpair(0x10, 0x3, 0x3f, &(0x7f0000000080)) 17:44:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1e0) [ 1295.899424][T26093] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x320) 17:44:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000100)=0xc) syz_open_procfs(r1, 0x0) 17:44:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x4e) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:44:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900026e0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 17:44:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1e1) 17:44:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x4e) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async, rerun: 32) listen(r0, 0x0) (rerun: 32) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:44:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x320) [ 1296.111255][T26118] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 17:44:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000007c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) 17:44:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1e2) 17:44:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x320) 17:44:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900036e0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @remote}, &(0x7f0000000080)=0x8) 17:44:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) 17:44:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x4e) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1296.347452][T26141] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffc) 17:44:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f0000000080)) 17:44:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1e3) 17:44:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xe803000000000000}]}, 0x320) 17:44:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900006f0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0xcf22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:44:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "61d55db9717686ff", "5a5bb0950614be9ca6ae776e11230f3e", "6998ff95", "a67ee69bd28c3e17"}, 0x28) 17:44:52 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) 17:44:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}]}, 0x320) 17:44:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1e4) 17:44:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0xcf22}, 0x10) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:44:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900016f0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:52 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 17:44:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x320) 17:44:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f0000000040)) 17:44:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1e5) 17:44:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0xcf22}, 0x10) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:44:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x4040, 0x0) 17:44:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900026f0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:52 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x0, 0x0) 17:44:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x320) 17:44:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1e6) 17:44:52 executing program 5: mq_open(&(0x7f0000000540)='.-{!(\x00', 0x0, 0x0, 0x0) 17:44:52 executing program 0: r0 = epoll_create1(0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) 17:44:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:44:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900036f0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, 0x320) 17:44:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1e7) 17:44:52 executing program 0: clock_gettime(0x2, &(0x7f0000000200)) 17:44:52 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) 17:44:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:44:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}, 0x320) 17:44:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1e8) 17:44:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000700400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:52 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 17:44:52 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$sock(r0, 0x0, 0x11) 17:44:52 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4080) 17:44:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) (async) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:44:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1e9) 17:44:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x320) 17:44:52 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40) 17:44:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @can, @nfc={0x27, 0x0, 0x0, 0x5}, @vsock={0x28, 0x0, 0xffffffff, @host}, 0x4, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000000)='team_slave_1\x00', 0x0, 0x7, 0x40}) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4b76cd8e89519978fb00bbe8ff450001280000000000069078ac149eba65e5e07262f664f04175e14636b9a0d9e2396c85095fc7e2a8fd6863c20100000000000000a2040122f3cd9166c799db07149f5cc372125af4cc56cbe204962b276f6425fbccb686b19f4ad06aece21fb207411e58cf22ff8d3ca0f3d58f0ed2068d8925891aeebd85a66d7598fe00"/170, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) 17:44:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001700400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:52 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x4045, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) 17:44:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x320) 17:44:52 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getpeername(r0, 0x0, 0x0) 17:44:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1ea) 17:44:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @can, @nfc={0x27, 0x0, 0x0, 0x5}, @vsock={0x28, 0x0, 0xffffffff, @host}, 0x4, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000000)='team_slave_1\x00', 0x0, 0x7, 0x40}) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4b76cd8e89519978fb00bbe8ff450001280000000000069078ac149eba65e5e07262f664f04175e14636b9a0d9e2396c85095fc7e2a8fd6863c20100000000000000a2040122f3cd9166c799db07149f5cc372125af4cc56cbe204962b276f6425fbccb686b19f4ad06aece21fb207411e58cf22ff8d3ca0f3d58f0ed2068d8925891aeebd85a66d7598fe00"/170, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @can, @nfc={0x27, 0x0, 0x0, 0x5}, @vsock={0x28, 0x0, 0xffffffff, @host}, 0x4, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000000)='team_slave_1\x00', 0x0, 0x7, 0x40}) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4b76cd8e89519978fb00bbe8ff450001280000000000069078ac149eba65e5e07262f664f04175e14636b9a0d9e2396c85095fc7e2a8fd6863c20100000000000000a2040122f3cd9166c799db07149f5cc372125af4cc56cbe204962b276f6425fbccb686b19f4ad06aece21fb207411e58cf22ff8d3ca0f3d58f0ed2068d8925891aeebd85a66d7598fe00"/170, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) (async) 17:44:52 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x1, &(0x7f0000000600)=@l2, 0x80) 17:44:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002700400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x320) 17:44:52 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffecd}}], 0x1, 0x0) 17:44:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1eb) 17:44:52 executing program 5: pipe2$9p(&(0x7f0000000100), 0x0) 17:44:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) (async) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @can, @nfc={0x27, 0x0, 0x0, 0x5}, @vsock={0x28, 0x0, 0xffffffff, @host}, 0x4, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000000)='team_slave_1\x00', 0x0, 0x7, 0x40}) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4b76cd8e89519978fb00bbe8ff450001280000000000069078ac149eba65e5e07262f664f04175e14636b9a0d9e2396c85095fc7e2a8fd6863c20100000000000000a2040122f3cd9166c799db07149f5cc372125af4cc56cbe204962b276f6425fbccb686b19f4ad06aece21fb207411e58cf22ff8d3ca0f3d58f0ed2068d8925891aeebd85a66d7598fe00"/170, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) 17:44:53 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) recvmsg$unix(r0, 0x0, 0x0) 17:44:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x320) 17:44:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1ec) 17:44:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003700400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:53 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000020c0)='ns/pid\x00') 17:44:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa04000000aaaaaaaaaabb08004500002800000000206394af00067f9078ac17bfb91414bb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) 17:44:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x320) 17:44:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1ed) 17:44:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = getpgid(0x0) fcntl$setown(r0, 0x6, r1) 17:44:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000710400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa04000000aaaaaaaaaabb08004500002800000000206394af00067f9078ac17bfb91414bb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) 17:44:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x320) 17:44:53 executing program 5: socket(0x23, 0x0, 0x9f) 17:44:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1ee) 17:44:53 executing program 0: munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 17:44:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001710400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x320) 17:44:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa04000000aaaaaaaaaabb08004500002800000000206394af00067f9078ac17bfb91414bb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa04000000aaaaaaaaaabb08004500002800000000206394af00067f9078ac17bfb91414bb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) (async) 17:44:53 executing program 5: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 17:44:53 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/54) 17:44:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1ef) 17:44:53 executing program 5: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000600)) 17:44:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8943, &(0x7f0000000000)={'vcan0\x00'}) 17:44:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x320) 17:44:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002710400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:53 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x800, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x20) 17:44:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1f0) 17:44:53 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_netdev_private(r0, 0x0, 0x0) 17:44:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x320) 17:44:53 executing program 1: r0 = socket(0x23, 0x2, 0x0) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:44:53 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="000302"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f00)={0x24, 0x0, &(0x7f0000000b40)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000c80), 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000e80)={0x24, 0x0, &(0x7f0000000d00)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "de3c1dc2e05b3f000d13adef6d7a0def7f33974f45b818a6d2db886431edcb3e543d1378dfdc6530c92b948a3124e22028bf162e96488ba0e18355ff7470bdf99dd66928dd1c8f25476bf059a23e2e05991504acef3524e5d4c42b74dedebd30e9defaa3b87ab47d946ee2022170acc9dc428a9e371bbde96b9ef3b2ce4b9337691c9ae7d8b27d8c24bf3182989cf69a6c32bac259c4949a913b9b2d503b5ac6611655668dd62de283420cb3f8518a1f7f07322257cd7bed59eee01f2c6c219ed6"}}, 0x0, 0x0}, 0x0) 17:44:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003710400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1f1) 17:44:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x19}]}, 0x320) 17:44:53 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:44:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x320) 17:44:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8930, &(0x7f0000000000)={'vcan0\x00'}) 17:44:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1f2) 17:44:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000720400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x320) 17:44:53 executing program 1: r0 = socket(0x1d, 0x3, 0x1) getsockname$l2tp6(r0, 0x0, &(0x7f0000000040)) 17:44:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1f3) [ 1298.383765][ T20] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1298.433739][T18144] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1298.753833][ T20] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1298.765003][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.776878][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.787441][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1298.800749][ T20] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1298.810689][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1298.819580][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.839511][ T20] usb 1-1: config 0 descriptor?? [ 1298.973731][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1298.993654][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.001673][T18144] usb 6-1: Product: syz [ 1299.007256][T18144] usb 6-1: Manufacturer: syz [ 1299.011877][T18144] usb 6-1: SerialNumber: syz [ 1299.064354][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1299.325792][ T20] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 1299.362703][ T20] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.0-1/input0 [ 1299.693772][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1299.873955][T26341] usb 1-1: language id specifier not provided by device, defaulting to English [ 1299.885798][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.892114][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.287004][ T7624] usb 1-1: USB disconnect, device number 14 [ 1300.507457][T25435] usb 6-1: USB disconnect, device number 48 17:44:56 executing program 0: r0 = socket(0x1d, 0x3, 0x1) bind$l2tp6(r0, 0x0, 0x0) 17:44:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000000)=@gettclass={0x24, 0x12, 0x1}, 0x24}}, 0x0) 17:44:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001720400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}]}, 0x320) [ 1300.830090][T26368] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1300.854484][T26371] validate_nla: 13 callbacks suppressed [ 1300.854501][T26371] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:56 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:44:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1f4) 17:44:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x320) 17:44:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000280)=[@in={0x2, 0x0, @loopback}], 0x10) 17:44:56 executing program 0: r0 = socket(0x28, 0x5, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 17:44:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002720400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:56 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a1, &(0x7f0000000000)) 17:44:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}]}, 0x320) 17:44:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1f5) [ 1301.055109][T26383] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003720400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x320}]}, 0x320) 17:44:56 executing program 0: r0 = socket(0x2, 0x805, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) [ 1301.206186][T26394] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1301.404229][T18144] usb 6-1: Service connection timeout for: 258 [ 1301.410524][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1301.421224][T18144] ath9k_htc: Failed to initialize the device [ 1301.429365][T25435] usb 6-1: ath9k_htc: USB layer deinitialized [ 1301.793784][T25435] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1302.154570][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1302.324253][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1302.333343][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.341894][T25435] usb 6-1: Product: syz [ 1302.346669][T25435] usb 6-1: Manufacturer: syz [ 1302.351281][T25435] usb 6-1: SerialNumber: syz [ 1302.404466][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1303.055644][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1303.891332][ T7624] usb 6-1: USB disconnect, device number 49 17:44:59 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:44:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}]}, 0x320) 17:44:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1f6) 17:44:59 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_int(r0, 0x1, 0x14, 0x0, &(0x7f00000000c0)) 17:44:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000730400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:44:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a1, &(0x7f0000000000)={'vcan0\x00'}) 17:45:00 executing program 0: r0 = socket(0xa, 0x805, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x7c, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 1304.431341][T26403] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x500}]}, 0x320) 17:45:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1f7) 17:45:00 executing program 1: r0 = socket(0x2, 0x1, 0x0) getsockname$l2tp6(r0, 0x0, &(0x7f0000000040)) 17:45:00 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) 17:45:00 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000b80), &(0x7f0000000bc0)={0x10000}, 0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80), 0x8}) [ 1304.763676][T25435] usb 6-1: Service connection timeout for: 258 [ 1304.769884][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1304.779384][T25435] ath9k_htc: Failed to initialize the device [ 1304.786631][ T7624] usb 6-1: ath9k_htc: USB layer deinitialized [ 1305.163678][ T7624] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1305.523694][ T7624] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1305.684075][ T7624] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1305.693160][ T7624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.701820][ T7624] usb 6-1: Product: syz [ 1305.706631][ T7624] usb 6-1: Manufacturer: syz [ 1305.711242][ T7624] usb 6-1: SerialNumber: syz [ 1305.765338][ T7624] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1306.343712][ T7624] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1307.181867][ T20] usb 6-1: USB disconnect, device number 50 17:45:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1f8) 17:45:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001730400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x600}]}, 0x320) 17:45:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 17:45:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 17:45:03 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002730400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1307.733723][T26432] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000000)) 17:45:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x320) 17:45:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1f9) 17:45:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 17:45:03 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), &(0x7f0000000300)=ANY=[], 0x39, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0) [ 1307.841191][T26438] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x320) 17:45:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1fa) 17:45:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 17:45:03 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback}}) 17:45:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003730400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1308.033989][ T7624] usb 6-1: Service connection timeout for: 258 [ 1308.040233][ T7624] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1308.055064][T26456] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1308.076186][ T7624] ath9k_htc: Failed to initialize the device [ 1308.082494][ T20] usb 6-1: ath9k_htc: USB layer deinitialized [ 1308.483716][ T20] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1308.843658][ T20] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1309.003877][ T20] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1309.012959][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.021577][ T20] usb 6-1: Product: syz [ 1309.026086][ T20] usb 6-1: Manufacturer: syz [ 1309.030689][ T20] usb 6-1: SerialNumber: syz [ 1309.087253][ T20] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1309.663670][ T20] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1310.512332][ T7624] usb 6-1: USB disconnect, device number 51 17:45:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1fb) 17:45:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e24, @private}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14}}], 0x18}, 0x40006) 17:45:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 17:45:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x320) 17:45:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000740400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:06 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) 17:45:06 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) 17:45:06 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x80000001}, 0x8) [ 1311.076145][T26462] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1fc) 17:45:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x320) 17:45:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001740400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:06 executing program 0: syz_open_dev$dri(&(0x7f0000000b40), 0x0, 0x10000) 17:45:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x320) 17:45:06 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x48a0, 0x0) [ 1311.233969][T26478] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1fd) 17:45:06 executing program 0: timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) 17:45:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x320) [ 1311.393792][ T20] usb 6-1: Service connection timeout for: 258 [ 1311.400604][ T20] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1311.420567][ T20] ath9k_htc: Failed to initialize the device [ 1311.427168][ T7624] usb 6-1: ath9k_htc: USB layer deinitialized [ 1311.793759][ T7624] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1312.153749][ T7624] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1312.313744][ T7624] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1312.322887][ T7624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.331661][ T7624] usb 6-1: Product: syz [ 1312.336330][ T7624] usb 6-1: Manufacturer: syz [ 1312.340944][ T7624] usb 6-1: SerialNumber: syz [ 1312.395489][ T7624] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1312.983987][ T7624] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1313.597149][T25435] usb 6-1: USB disconnect, device number 52 17:45:09 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) 17:45:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000040)="45060f98150f20d8663508a20000000022d8650f01f60f20e06635000010000f22e00f01d967660fc7b1120d000066b90902000066b80068000066ba000000000f30650f01c9b812000f00d8f3ad", 0xff58}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:45:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002740400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:09 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e6"], 0x4) 17:45:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x1fe) 17:45:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x320) 17:45:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x320) [ 1314.135195][T26493] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x201) 17:45:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000040)="45060f98150f20d8663508a20000000022d8650f01f60f20e06635000010000f22e00f01d967660fc7b1120d000066b90902000066b80068000066ba000000000f30650f01c9b812000f00d8f3ad", 0xff58}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:45:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003740400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x202) 17:45:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1900}]}, 0x320) [ 1314.332450][T26514] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1314.433772][ T7624] usb 6-1: Service connection timeout for: 257 [ 1314.447359][ T7624] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1314.461906][ T7624] ath9k_htc: Failed to initialize the device [ 1314.476114][T25435] usb 6-1: ath9k_htc: USB layer deinitialized [ 1314.853698][T25435] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1315.213761][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1315.373831][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1315.382911][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.403749][T25435] usb 6-1: Product: syz [ 1315.407931][T25435] usb 6-1: Manufacturer: syz [ 1315.412513][T25435] usb 6-1: SerialNumber: syz [ 1315.465175][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1316.033692][T12624] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1316.658952][ T20] usb 6-1: USB disconnect, device number 53 17:45:12 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) 17:45:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x3, &(0x7f0000000980)=@framed, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 17:45:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x320) 17:45:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x203) 17:45:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000750400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:12 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a80)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xa, &(0x7f0000000980)=@framed={{}, [@ldst={0xbc69e3e6b5b9a8fd, 0x0, 0x2, 0x6, 0xa, 0x100, 0x8}, @alu={0x7, 0x1, 0xa, 0x7, 0x7, 0xc}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x8536, 0x0, 0x0, 0x0, 0xffffffe0}, @alu={0x0, 0x0, 0xd, 0x7, 0x1, 0xc}, @ldst={0x2, 0x2, 0x5, 0x37ffd3d581ea380e, 0x0, 0x18, 0xffffffffffffffff}]}, &(0x7f0000000a00)='GPL\x00', 0xdf, 0x38, &(0x7f0000000a40)=""/56, 0x40f00, 0x1, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0x5, 0x6, 0xa2b}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 17:45:12 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x49, 0x0, 0x0) 17:45:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003900)=[{{&(0x7f0000000000)={0x2, 0xe22, @local}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x0, @private}, 0x10, 0x0}}], 0x2, 0x0) 17:45:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x204) 17:45:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x320) [ 1317.223751][T26527] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001750400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:12 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 1317.369282][T26539] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1317.473915][T12624] usb 6-1: Service connection timeout for: 257 [ 1317.480767][T12624] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1317.490292][T12624] ath9k_htc: Failed to initialize the device [ 1317.497127][ T20] usb 6-1: ath9k_htc: USB layer deinitialized [ 1317.863670][ T20] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1318.223738][ T20] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1318.383930][ T20] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1318.393001][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.401591][ T20] usb 6-1: Product: syz [ 1318.406257][ T20] usb 6-1: Manufacturer: syz [ 1318.410862][ T20] usb 6-1: SerialNumber: syz [ 1318.465270][ T20] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1319.053781][ T20] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1319.671254][T23140] usb 6-1: USB disconnect, device number 54 17:45:15 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:15 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$ptp(r0, 0x0, 0x0) 17:45:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x205) 17:45:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2003}]}, 0x320) 17:45:15 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8}) 17:45:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002750400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x6, 0x0, 0x0) 17:45:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x206) 17:45:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x320) [ 1320.215957][T26549] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) 17:45:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003750400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:15 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x102, &(0x7f0000000280), &(0x7f0000000380)=0x8) [ 1320.393918][T26563] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1320.513789][ T20] usb 6-1: Service connection timeout for: 257 [ 1320.519998][ T20] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1320.528425][ T20] ath9k_htc: Failed to initialize the device [ 1320.534829][T23140] usb 6-1: ath9k_htc: USB layer deinitialized [ 1320.943743][T23140] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1321.313776][T23140] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1321.473951][T23140] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1321.483040][T23140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.491807][T23140] usb 6-1: Product: syz [ 1321.496652][T23140] usb 6-1: Manufacturer: syz [ 1321.501266][T23140] usb 6-1: SerialNumber: syz [ 1321.566367][T23140] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1322.153894][T23140] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1322.774135][ T20] usb 6-1: USB disconnect, device number 55 17:45:18 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x320) 17:45:18 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0xb) 17:45:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x207) 17:45:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000760400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:18 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) [ 1323.317072][T26571] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 17:45:18 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$EVIOCGVERSION(r0, 0x4004667f, 0xffffffffffffffff) r1 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0x40, &(0x7f0000000080)='cubic\x00', 0x3) 17:45:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001760400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x208) 17:45:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe803}]}, 0x320) [ 1323.393685][T23140] usb 6-1: Service connection timeout for: 256 [ 1323.401149][T23140] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services 17:45:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x209) [ 1323.443987][T23140] ath9k_htc: Failed to initialize the device [ 1323.450272][ T20] usb 6-1: ath9k_htc: USB layer deinitialized [ 1323.482688][T26585] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1323.843666][ T20] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1324.223693][ T20] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1324.386409][ T20] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1324.395670][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.410034][ T20] usb 6-1: Product: syz [ 1324.414613][ T20] usb 6-1: Manufacturer: syz [ 1324.419234][ T20] usb 6-1: SerialNumber: syz [ 1324.475578][ T20] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1325.073824][ T20] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1325.696022][T23140] usb 6-1: USB disconnect, device number 56 17:45:21 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:21 executing program 0: clock_gettime(0x0, &(0x7f0000002380)) 17:45:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="37000000ffff81e82142"]}) 17:45:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x320) 17:45:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002760400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x20a) 17:45:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250200000034000180"], 0x7c}}, 0x0) 17:45:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000001c0)="f590c068b8249ba2c7c08f8a9a14949798eae8913aaa0fa13f665ae955c8b94735f6299f70323a163e8e3823cd992a4dd63aa4eb8adc521e3f332d16f17e841a1f29485d9f6392d6f0ebfe222f862ee3e4953094d24a78de6b62866b30491c47a4683ee11977e93855492e2e2f44a73171f686455d6dfc5b1deb6041c39ca882b2f17746a744665ab37cdad6dc10b6e3f4de00a151c69b6e2498bf17947b233049cad5a07ff260f99c06019e8809f1f9bc6d3c2f86", 0xb5}, {&(0x7f0000000280)="3e10ce1bb3e3fc07c75fe68eaf3959b15cc5799fb7009fc88fc6ea2bcb9d775129ba9e19a4757a6b8260a9b5104fd686dc611e5f8924386f2050329a", 0x3c}, {&(0x7f0000000500)="1a9dd9854f0483f780453f6b2e665dd3ecaf39b9320add15de2daf8b0d39248fcf1088caba1a14de8ee9233d331fbeb23f8d3f7ede77a2a7a9ef88bc73e3b69d43b7d1c9f544fb28573cd0bacdd4f6da5990a0cde2432bab3511c0dcea8d25a7cebba4ab9572f6bf36168d8fd58010f28e454422568c09eda8479372d68c090ea220bfeca721f3bc27e6f3ffa5b7817b0814b2a4b91ae72ebccf2132d663071fd883f2578cfffd49353c756d1b9f709d3bf1824cf7aca79c233853f45d9388a15d25c9a8d2652197c8bca0cd7f0163f40f4e31a7e153895b6d4eb291de23ef37d1aa0913e2092b8d9a8d6eeb6eedb151704bbd58941af6ed0815badfeaf54ef42f76089e60c85b5725b6338cc1c51dcab92e885fdf4ef83a5e1953da94dce4995c5080b8ddedded78087d314eee25962910bd1fb47179e4ad3b0a106bee4b406b3748a990fffeeb2f193c00a6074e874dfbc39ff625f73cb8e519deaa466e0d798556d008f3909e0a0c6d128940f29c86e8e4b2f45a9068d5820fe1eca7f8fb132f5a02e771f4550239e7133e209c7204d3059e3ba414b4193618bdf8a820a9fba3b41c896389f014de5177fd13af5de0fc3821587132ee02dca6c0a4066184e099e78ed7c41c9ee408c76340dd47cc1f6a654f8d8160d5209be42e62becfdbe11faae736a7dfb0c0e5fc6f938228a4aeb4e85dfeff2c00f81788d0f3c34891f76090ad5ed103e2736d3ea5b5edd5647903678a7266ab9541393f262132a0f5908cafda412c34aff02beffe189cd3595f521c91f6fde8da7664671fee08b5aaa8c4caaeba0bd920acc335957170ebb3be31492ea2233375dd242c65a19b7c50311b8428904e657f311cebccb50023acc87d10f9f0b6d4fe70e5051de61b99ef9d8f75905495a8795767b5e313d8931cf3f71737ea51ac6ef40ac5ae41799a60ad71efa4e27b56aa27e631c58b3805c64305a09230cc1e3d5120dc2020df6e1c399b36f17877dd364f7bb5a428b5058a6944dc1cf7a852f7136d4fe4dc117e31ee2b592fb19ccd33439fcbee89eac6706d3c49f688d51acb7db30919d5c404162cddda512dfed3bf64bf7e6a9aeadd2c510f856028194ac62608ac747eee77eb36c5adf4a0c48018110b4607163761f1ea73a71def79c1eb84db44fde0579050740ff35ab299b6b2734d431e0ec91dccbf649a43f0697ab9a1f8712444c6502eab1ecb3f2b27d8a5d1306ce882036817f319a1721d7fc21b50d64a850a8359b961c0789ec8de944cf6fe2643fc1ba1b2f04aaf2a01de7a45a4518821d16f28fe543c90b827e93ccb88201b6bb58ff0e86c7101e5cae9b81f8f41b4ec0bf9358f4b99d5b985d15a2849be336561136be4f52e4e2b5c18e0a2b85f5d925c21b028b9b357b39eebfd6530fa707e1568837304e3c994d3d650d6696c4db486aa84c2242158d35a02d53fa9df3b063d7521e50264ff32d260ece69c1b801260fc6fcdb6389e5d3444a83edeed7bed41c6aa87459c053b7601a9a0a3f539a8c5e6135311956addb5cf2a82d1714ad88008fc3f155c6df249ee9aaed9fc2e36e1576b052d5001f924f44bee16e09e27022a3ad93212993d95c6bd29ef00568e2b32f908a492e3e2ae422fb23730d45321eddcb90b7e627f9ca1b90ab16e0e144cb1b65a77caf95935eb0f2718e9f6f992bd12e73f9d6b32db6b6f09efa495bcf731e02203e099a2243058f92c7b0e79fc3f95fdfc6c93d6606acfdb1d5edc2970faf2f9747abea2b0f482381a7e32717aef4eb41fd0fb42153b5ae16ff6a8b1f7afd930e4f488ac003a7078bcab21d8fc9c70c7c7c4b3999f78402650860f5bd5ab815b80495677aaaf972c5241bfa8d77686d912925585f5974bcbac2ec2480ec00898b2aecbc6c84344ed407fd3c3838c66808f5b9be3b2d09aa845da9b10ac842f291cffad8bf12dadff6e4866c921be73bc04a2b03a026fca61e6b3551d057a0561aed0073a0215eede3535177cc58d24e38c5bb0d36c703db49d8c3eb4bab24e40b90ec9250943642c58048c0cdd6a8e75bf120ee9b2a094b11f9a0e4bcff2ebcdf5facc865ab411404a5c9d17c06f59d34bb562b711e64bb9cf670018fd45e8f7ce750b5cb504b7c6c933a2d84512bdf34423a4c0713b4a369992a003e0a3ed92e0a089232b41f6d3118b526e41e89835b1f6da5385c84a0fba71873dc2221bcc619d8e496af9a099d493eb606f41908689de74b2809b524f8bbfe41bda879f309c6a55e461f2fc7cc61cace7b092331d7c7c33afad1929be498e346a7e184e8aa1d82ee5f68800448770d0c895ce69319e0c228fecde043a0aee6ac7b5918c39e4a30fe47ebaaea95f52a0a6d3b0015b0db41b8d4babc682d36edddd52d8e03688e72976a287030f35d854becda6f153ad26f1130393f23e28864b6d64386fabc5c10b33ee0e9ebb91bdb11065facc1dd09f38625d17de005090dab84ac9780e762f9800f9419882fa93ca2206da0ef47630e4980e6e0f7924d747ff8a0b7d25be3d7cdaab70526320809c42c1038b1d305be3549e9a5be677b7385990321a9c265ba8fe83eeb1667ac8eb737d68201838f573eeb43ac4bde8a0cd5c6b523b04f1387135a712c37ccdbe316efb193bbf0197ac6b1fbce46c636ede948799d32802051843da1d91d6597b5720f6fed0164f6561ce6e36ae60ca86ccb6641729f97af483dd2f840a568bca97324e4c6a9ecc4a29057bba764ac821aaaf66ec48b409d97ad3c090890702a7326169b9597f9214caec473d3f48e9c0f90132ecd00e434aa2f230a19350869f4f6d2bd7f4745e85fb1d93a860756ee6dac68a6b6c6afde7d93a883bf60335781d90457facf45a2702f48126f6260f295874d4452ac7f34f55edeb629a677da0e4255a08712c47cd273f8b402171fd2ecc5c35acd18117fcd24e08afda963314cf08c8fa1566418902bad4dfa870dd7ad1d8c9566ffe8d344228f36c018de18b89027f19558f2895f8e270f1595d1f6dc21212e8ac2c6f9abad7bd168005e7c5dd208d1fcf952eec68ae0c141d5c57d0b9295302bb31b3cdbedcb80ec08304a5f73bf7f4ada3c7ffa7046881c386166fe661b9dd8d06f9222e8b0878273c6765095b4199f9c5203d7917fcea4ed2953701a079b8440b47b10ab1745781b6c9ca998ecfac1e6e1a75ca9fc044dbae4ef156f50ea801e9176e6a69c84241cfc81f8dae768bc66a1f096514e65ecec9720345707925a635db839da58b84262c0e63d8162bd5a8c7eef4626971dda0c2edc91e486db9b436ed42f1153e1a0bb33fae3f325701caa210406f3f65e6a03b370dcd19c230f88b95e99a0c0c7d529304979cd8a2d85ad63f61dc408702d53665398b030dec4f03cca570a462d35479edaba083259e05ec7842ef496218fd07bd201f7d52a7bbe5f0c7dafc9cbd8a881533542681831ae42727bc63178cccb933c202529e33099eec39354e172bfe914447dee18af59c9e9e959d4e47fce49aab45f980f514c1fbda488143358ec0984dfc68089f59ce8370b98f78f822c84c4d9670fd95f99599529e42fa13ca9b6768d623a5416936de233073e6144e8d19e172cee48acf4fc03399ed25a56f65c170a474bf39d295384aa67fe4e2cacd1ffcf7651af2fbd3fc1281e6930b053e27522d363a10522e12bcd85094bdae8f6a9a0a74c99db37cb899f98ae76b5be9e5a354ae02896f2542b298ee1b22f2a361bc5d0c712ddd904e25854fb7b3116a52d7495ed51b8f0896d0f3d50bf484554198ba07e62ff72f2dd95a90f7f94caf202c8c28e867680dfd7ef382bfcc353e5802e71c2d7ce18198287940bfcf291abe44bcd4717be3c23234e52ba64f60890e0f0669e1ca2711fc29596d4a54d7f2dc50786686a0c4b9e0e832e69d6742db1878f715cb0b5a8b72512f964787c8a5ccf234c278f243ad5d98f992ab8be750b1c75f47ed82ce703ff041bb7c6e4b8af48eeade008e8484600dbcb1da1ff441fb088254fe677dedecf95557e44c648196da867634b71159ee61ed21a6d7e6a37d18b92234d2223b4571273228d70f6e578a27b8fb55641d8bc1ff0e61463a255bf8f8c527383fa500d6503e799f592ea1c594732846d6957f4287fec19553e4581be581bc8ecfc5f5d9d2090315f03784ffd7ec5ee7faa94f7e4889f6dea977e63de995fb195ff393e708ff8f3d2ed832efafcfcef5c7c7b109f4c9c7b2a45f7fe7cfcfe26dcaf78ed7b5998e7993da66b9bf999f8fd0038a4f18a2df5341dfb00c6fe5c92e5caaaab8b32f835ae1dae05bcd1d974e264eb29a1d82bdc44471d99ef49750bc0be28996ce47b9d77a7894f99630c2e31f6d0ed58d80036952d6363a787bc32550805ea88effe758d08c8fe7708ae44826015ea688ce400704a0cf2d5b841c2e5cbaac8cb4d73571734e1c534c5e73ae18f05e75e51d567764294fca491c43ba95245125af24b3d0ac0ba6006da7fef9dd67efa7463521346c691ba92aaf76142ad2a801292af9d6c38b3675522f921ebcd272ce3a66c6b1a56ad19f64a18a1254a33338f93ff552c88f1b3aebfc1f5a4ea2a62cc5142281d080949ffc10fd9c8615ed4659ac7ce92d0736b94694db617651c872bcb18e02cee57310c195c986aefdecd4d0109c1c0271fc3c35585d312c5a299e3b72fbc88939ddd777fa9a88dfce672bdacd51d6eef2c696637613447e3e177eb264872a508877ab6377faf9f50b866832d7d4db6c2f26bea0ff2c87df4168919f1c573a33f8f586fd3b963ed3a8628e4cc04618acc1a303efd4765fcbba43962f60531cd225156b9b39d1321e48e0a031617b920258a83a9859aad84f05220dd78934b812970428555c1f6ce7ba61450f2a7185b5f343a22f5f66977e19448522d002e08a4093efa786f1c449f253aa00634dc6100ce509586ff6ee3fe07522476a762f881478040013345eff4f78f66b4eb37ba0824629132467c43205587", 0xdd0}], 0x3}, 0x0) [ 1326.248985][T26600] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x20b) 17:45:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x320) 17:45:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003760400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1326.363647][ T20] usb 6-1: Service connection timeout for: 256 [ 1326.369859][ T20] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services 17:45:21 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x410000, 0x0) [ 1326.408958][ T20] ath9k_htc: Failed to initialize the device [ 1326.437425][T26613] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1326.439215][T23140] usb 6-1: ath9k_htc: USB layer deinitialized [ 1326.863663][T23140] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1327.293747][T23140] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1327.484150][T23140] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1327.493234][T23140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.501344][T23140] usb 6-1: Product: syz [ 1327.505904][T23140] usb 6-1: Manufacturer: syz [ 1327.510517][T23140] usb 6-1: SerialNumber: syz [ 1327.576863][T23140] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1328.174219][T23140] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1328.782458][ T20] usb 6-1: USB disconnect, device number 57 17:45:24 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x20c) 17:45:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000680)) 17:45:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x300}, 0x0) 17:45:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000770400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x320) 17:45:24 executing program 0: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f00000035c0)=[{0x0, 0x7ffffffff000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 17:45:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}]}, 0x320) 17:45:24 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 17:45:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x20d) [ 1329.339219][T26619] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1329.403830][T23140] usb 6-1: Service connection timeout for: 256 [ 1329.410046][T23140] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services 17:45:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001770400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1329.444936][T23140] ath9k_htc: Failed to initialize the device [ 1329.463614][ T20] usb 6-1: ath9k_htc: USB layer deinitialized [ 1329.504589][T26637] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1329.853843][ T20] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1330.233689][ T20] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1330.397138][ T20] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1330.406509][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.415067][ T20] usb 6-1: Product: syz [ 1330.419349][ T20] usb 6-1: Manufacturer: syz [ 1330.424466][ T20] usb 6-1: SerialNumber: syz [ 1330.484667][ T20] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1331.073695][ T20] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1331.696093][T23140] usb 6-1: USB disconnect, device number 58 [ 1332.113636][ T20] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1332.120790][ T20] ath9k_htc: Failed to initialize the device [ 1332.127465][T23140] usb 6-1: ath9k_htc: USB layer deinitialized 17:45:27 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x20e) 17:45:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x11, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 17:45:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}]}, 0x320) 17:45:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002770400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8953, 0x0) 17:45:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}]}, 0x320) 17:45:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f0000000040)=0xfffffffffffffd52) 17:45:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x20f) [ 1332.242042][T26648] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:27 executing program 1: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 17:45:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003770400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x320) [ 1332.361290][T26657] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1332.663641][T23140] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1333.023794][T23140] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1333.183699][T23140] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1333.192772][T23140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.201103][T23140] usb 6-1: Product: syz [ 1333.205678][T23140] usb 6-1: Manufacturer: syz [ 1333.211418][T23140] usb 6-1: SerialNumber: syz [ 1333.254455][T23140] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1333.833808][T18143] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1334.447605][T12624] usb 6-1: USB disconnect, device number 59 17:45:30 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x24}}, 0x0) 17:45:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x210) 17:45:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000100)='GPL\x00', 0x3, 0x1000, &(0x7f00000007c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:45:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000780400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}]}, 0x320) [ 1334.913647][T18143] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1334.920637][T18143] ath9k_htc: Failed to initialize the device [ 1334.931099][T12624] usb 6-1: ath9k_htc: USB layer deinitialized 17:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x324, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x48) [ 1334.988504][T26669] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}]}, 0x320) 17:45:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x211) 17:45:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}]}, 0x320) 17:45:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x320) 17:45:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001780400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1335.169975][T26688] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1335.413880][T12624] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1335.793867][T12624] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1335.953946][T12624] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1335.963026][T12624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.971558][T12624] usb 6-1: Product: syz [ 1335.976183][T12624] usb 6-1: Manufacturer: syz [ 1335.980795][T12624] usb 6-1: SerialNumber: syz [ 1336.035745][T12624] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1336.663823][T12624] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1337.281058][T25435] usb 6-1: USB disconnect, device number 60 [ 1337.713776][T12624] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1337.721027][T12624] ath9k_htc: Failed to initialize the device [ 1337.727822][T25435] usb 6-1: ath9k_htc: USB layer deinitialized 17:45:33 executing program 5: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}]}, 0x320) 17:45:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x212) 17:45:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x32280, 0x0) getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f0000000040)=""/117, &(0x7f00000000c0)=0x75) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x3, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'veth1\x00', 0x2}, 0x18) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:45:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002780400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x32280, 0x0) getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f0000000040)=""/117, &(0x7f00000000c0)=0x75) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x3, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x213) 17:45:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}]}, 0x320) [ 1337.820202][T26696] IPVS: stopping backup sync thread 4976 ... [ 1337.846391][T26698] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:33 executing program 0: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000180)=@phonet={0x23, 0x0, 0x0, 0x41}, 0x80, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000040)="2e0000001a008104e00f80ecdbfbe1ee8080eee90cdc556a6c32552012001e00810040fb120f0100040fda1bc650", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) recvmsg$kcm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2, &(0x7f0000000640)=""/146, 0x92}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000040)=@in, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/173, 0xad}, {&(0x7f0000000200)=""/131, 0x83}, {&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f0000000300)=""/175, 0xaf}], 0x4, &(0x7f00000004c0)=""/239, 0xef}, 0x6}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)=""/127, 0x7f}, {&(0x7f00000005c0)=""/5, 0x5}], 0x2, &(0x7f0000000640)=""/215, 0xd7}, 0x401}], 0x2, 0x10100, &(0x7f00000007c0)={0x0, 0x989680}) 17:45:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003780400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}]}, 0x320) [ 1337.999407][T26711] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1338.037793][T26709] netlink: 'syz-executor.0': attribute type 30 has an invalid length. 17:45:33 executing program 5: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x32280, 0x0) getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f0000000040)=""/117, &(0x7f00000000c0)=0x75) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x3, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x214) 17:45:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000790400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}]}, 0x320) 17:45:33 executing program 0: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000180)=@phonet={0x23, 0x0, 0x0, 0x41}, 0x80, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000040)="2e0000001a008104e00f80ecdbfbe1ee8080eee90cdc556a6c32552012001e00810040fb120f0100040fda1bc650", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) recvmsg$kcm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2, &(0x7f0000000640)=""/146, 0x92}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000040)=@in, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/173, 0xad}, {&(0x7f0000000200)=""/131, 0x83}, {&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f0000000300)=""/175, 0xaf}], 0x4, &(0x7f00000004c0)=""/239, 0xef}, 0x6}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)=""/127, 0x7f}, {&(0x7f00000005c0)=""/5, 0x5}], 0x2, &(0x7f0000000640)=""/215, 0xd7}, 0x401}], 0x2, 0x10100, &(0x7f00000007c0)={0x0, 0x989680}) 17:45:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x32280, 0x0) getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f0000000040)=""/117, &(0x7f00000000c0)=0x75) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x3, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}]}, 0x320) 17:45:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x215) [ 1338.397513][T26723] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1338.434129][T26725] netlink: 'syz-executor.0': attribute type 30 has an invalid length. 17:45:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001790400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900013b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}]}, 0x320) [ 1338.560729][T26734] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1338.591818][T26736] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 17:45:34 executing program 5: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x32280, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x3, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x216) 17:45:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x19000000}]}, 0x320) 17:45:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002790400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001380400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x3, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1338.956250][T26743] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000000}]}, 0x320) 17:45:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x217) [ 1339.004346][T26746] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 17:45:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x218) 17:45:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x3, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003790400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1339.164700][T26759] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000380400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:35 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000000}]}, 0x320) 17:45:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x3, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x219) 17:45:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900007a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:35 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x3, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x20030000}]}, 0x320) 17:45:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x21a) 17:45:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900017a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900012e0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:35 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x3, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}]}, 0x320) 17:45:35 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 17:45:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, 0x320) 17:45:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x21b) 17:45:35 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900022c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900027a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:35 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 17:45:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b000000}]}, 0x320) 17:45:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x21c) 17:45:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900037a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0xd00}, [{}]}, 0x320) 17:45:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000}]}, 0x320) 17:45:35 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 17:45:36 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:45:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x21d) 17:45:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900007b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:36 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x3, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}]}, 0x320) 17:45:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x21e) 17:45:36 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x3, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x320) 17:45:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:45:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900017b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x21f) 17:45:36 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:36 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@generic={0x3, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x180000000000000}]}, 0x320) 17:45:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x11, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:45:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900027b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x220) 17:45:36 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@generic={0x3, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x221) 17:45:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x320) 17:45:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (fail_nth: 1) 17:45:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900037b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1341.392678][T26861] FAULT_INJECTION: forcing a failure. [ 1341.392678][T26861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1341.423045][T26861] CPU: 1 PID: 26861 Comm: syz-executor.0 Not tainted 5.17.0-rc2-syzkaller #0 [ 1341.431872][T26861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.441949][T26861] Call Trace: [ 1341.445248][T26861] [ 1341.448193][T26861] dump_stack_lvl+0xcd/0x134 [ 1341.452825][T26861] should_fail.cold+0x5/0xa [ 1341.457362][T26861] prepare_alloc_pages+0x17b/0x570 [ 1341.462478][T26861] __alloc_pages+0x12f/0x500 [ 1341.467061][T26861] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 1341.473831][T26861] alloc_pages+0x1aa/0x310 [ 1341.478245][T26861] skb_page_frag_refill+0x262/0x570 [ 1341.483444][T26861] tun_build_skb+0x1ff/0x1010 [ 1341.488141][T26861] ? tun_xdp_act+0x8d0/0x8d0 [ 1341.492727][T26861] ? __lock_acquire+0xbbf/0x5470 [ 1341.497678][T26861] tun_get_user+0x812/0x3720 [ 1341.502302][T26861] ? tun_build_skb+0x1010/0x1010 [ 1341.507242][T26861] ? lock_downgrade+0x6e0/0x6e0 [ 1341.512098][T26861] tun_chr_write_iter+0xdd/0x1a0 [ 1341.517050][T26861] new_sync_write+0x431/0x660 [ 1341.521730][T26861] ? new_sync_read+0x6e0/0x6e0 [ 1341.526498][T26861] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1341.532734][T26861] ? security_file_permission+0xab/0xd0 [ 1341.538289][T26861] vfs_write+0x7cd/0xae0 [ 1341.542542][T26861] ksys_write+0x12d/0x250 [ 1341.546863][T26861] ? __ia32_sys_read+0xb0/0xb0 [ 1341.551617][T26861] ? syscall_enter_from_user_mode+0x21/0x70 [ 1341.557517][T26861] do_syscall_64+0x35/0xb0 [ 1341.561950][T26861] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1341.567860][T26861] RIP: 0033:0x7ff57aab2b6f [ 1341.572271][T26861] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 17:45:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x222) [ 1341.591881][T26861] RSP: 002b:00007ff579475130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1341.600302][T26861] RAX: ffffffffffffffda RBX: 00007ff57ac12f60 RCX: 00007ff57aab2b6f [ 1341.608369][T26861] RDX: 0000000000000036 RSI: 00000000200001c0 RDI: 00000000000000c8 [ 1341.616351][T26861] RBP: 00007ff5794751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1341.624333][T26861] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 1341.632307][T26861] R13: 00007ff57b146b1f R14: 00007ff579475300 R15: 0000000000022000 [ 1341.640281][T26861] [ 1341.723707][T23140] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1342.083781][T23140] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1342.243823][T23140] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1342.252906][T23140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.261553][T23140] usb 6-1: Product: syz [ 1342.266015][T23140] usb 6-1: Manufacturer: syz [ 1342.270618][T23140] usb 6-1: SerialNumber: syz [ 1342.314530][T23140] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1342.893879][T23140] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1343.505943][T18143] usb 6-1: USB disconnect, device number 61 [ 1343.953707][T23140] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1343.961326][T23140] ath9k_htc: Failed to initialize the device [ 1343.969412][T18143] usb 6-1: ath9k_htc: USB layer deinitialized 17:45:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}]}, 0x320) 17:45:39 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@generic={0x3, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900007c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (fail_nth: 2) 17:45:39 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x223) 17:45:39 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1344.059230][T26873] FAULT_INJECTION: forcing a failure. [ 1344.059230][T26873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.064867][T26874] validate_nla: 11 callbacks suppressed [ 1344.064887][T26874] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}]}, 0x320) 17:45:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x224) 17:45:39 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1344.119725][T26873] CPU: 1 PID: 26873 Comm: syz-executor.0 Not tainted 5.17.0-rc2-syzkaller #0 [ 1344.128543][T26873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.138616][T26873] Call Trace: [ 1344.141911][T26873] [ 1344.144854][T26873] dump_stack_lvl+0xcd/0x134 [ 1344.149470][T26873] should_fail.cold+0x5/0xa [ 1344.154005][T26873] copy_page_from_iter+0x359/0x7c0 [ 1344.159155][T26873] tun_build_skb+0x27c/0x1010 [ 1344.163892][T26873] ? tun_xdp_act+0x8d0/0x8d0 17:45:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (fail_nth: 3) [ 1344.163931][T26873] ? __lock_acquire+0xbbf/0x5470 [ 1344.163975][T26873] tun_get_user+0x812/0x3720 [ 1344.164020][T26873] ? tun_build_skb+0x1010/0x1010 [ 1344.164057][T26873] ? lock_downgrade+0x6e0/0x6e0 [ 1344.164104][T26873] tun_chr_write_iter+0xdd/0x1a0 17:45:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900017c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1344.164135][T26873] new_sync_write+0x431/0x660 [ 1344.164165][T26873] ? new_sync_read+0x6e0/0x6e0 [ 1344.164216][T26873] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1344.164253][T26873] ? security_file_permission+0xab/0xd0 17:45:39 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1344.164294][T26873] vfs_write+0x7cd/0xae0 [ 1344.164330][T26873] ksys_write+0x12d/0x250 [ 1344.164359][T26873] ? __ia32_sys_read+0xb0/0xb0 [ 1344.164390][T26873] ? syscall_enter_from_user_mode+0x21/0x70 [ 1344.164428][T26873] do_syscall_64+0x35/0xb0 [ 1344.164454][T26873] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1344.164485][T26873] RIP: 0033:0x7ff57aab2b6f 17:45:39 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1344.164507][T26873] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1344.164534][T26873] RSP: 002b:00007ff579475130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1344.164562][T26873] RAX: ffffffffffffffda RBX: 00007ff57ac12f60 RCX: 00007ff57aab2b6f [ 1344.164581][T26873] RDX: 0000000000000036 RSI: 00000000200001c0 RDI: 00000000000000c8 [ 1344.164597][T26873] RBP: 00007ff5794751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.164614][T26873] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 1344.164630][T26873] R13: 00007ff57b146b1f R14: 00007ff579475300 R15: 0000000000022000 [ 1344.164664][T26873] [ 1344.285146][T26889] FAULT_INJECTION: forcing a failure. [ 1344.285146][T26889] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.291277][T26891] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1344.299884][T26889] CPU: 1 PID: 26889 Comm: syz-executor.0 Not tainted 5.17.0-rc2-syzkaller #0 [ 1344.422535][T26889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.422555][T26889] Call Trace: [ 1344.422566][T26889] [ 1344.422576][T26889] dump_stack_lvl+0xcd/0x134 [ 1344.443380][T26889] should_fail.cold+0x5/0xa [ 1344.447891][T26889] ? __build_skb+0x21/0x60 [ 1344.452319][T26889] should_failslab+0x5/0x10 [ 1344.456851][T26889] kmem_cache_alloc+0x5e/0x3a0 [ 1344.461616][T26889] __build_skb+0x21/0x60 [ 1344.465862][T26889] build_skb+0x1e/0x190 [ 1344.470042][T26889] __tun_build_skb+0x2c/0x260 [ 1344.474744][T26889] tun_build_skb+0x5d8/0x1010 [ 1344.479442][T26889] ? tun_xdp_act+0x8d0/0x8d0 [ 1344.484042][T26889] ? __lock_acquire+0xbbf/0x5470 [ 1344.488997][T26889] tun_get_user+0x812/0x3720 [ 1344.493609][T26889] ? tun_build_skb+0x1010/0x1010 [ 1344.498567][T26889] ? lock_downgrade+0x6e0/0x6e0 [ 1344.503423][T26889] tun_chr_write_iter+0xdd/0x1a0 [ 1344.508366][T26889] new_sync_write+0x431/0x660 [ 1344.513059][T26889] ? new_sync_read+0x6e0/0x6e0 [ 1344.517839][T26889] ? lockdep_hardirqs_on+0x79/0x100 [ 1344.523040][T26889] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1344.529279][T26889] ? security_file_permission+0xab/0xd0 [ 1344.534913][T26889] vfs_write+0x7cd/0xae0 [ 1344.539157][T26889] ksys_write+0x12d/0x250 [ 1344.543484][T26889] ? __ia32_sys_read+0xb0/0xb0 [ 1344.548268][T26889] ? syscall_enter_from_user_mode+0x21/0x70 [ 1344.554166][T26889] do_syscall_64+0x35/0xb0 [ 1344.558595][T26889] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1344.564490][T26889] RIP: 0033:0x7ff57aab2b6f [ 1344.568907][T26889] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 17:45:40 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}]}}}}}}}, 0x0) [ 1344.588577][T26889] RSP: 002b:00007ff579475130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1344.596987][T26889] RAX: ffffffffffffffda RBX: 00007ff57ac12f60 RCX: 00007ff57aab2b6f [ 1344.604950][T26889] RDX: 0000000000000036 RSI: 00000000200001c0 RDI: 00000000000000c8 [ 1344.612921][T26889] RBP: 00007ff5794751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.620902][T26889] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 1344.628890][T26889] R13: 00007ff57b146b1f R14: 00007ff579475300 R15: 0000000000022000 [ 1344.636879][T26889] 17:45:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x225) [ 1344.843779][T18143] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1345.213922][T18143] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1345.373846][T18143] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1345.382919][T18143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.391516][T18143] usb 6-1: Product: syz [ 1345.396601][T18143] usb 6-1: Manufacturer: syz [ 1345.401207][T18143] usb 6-1: SerialNumber: syz [ 1345.455694][T18143] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1346.073696][T18143] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1346.688480][T23140] usb 6-1: USB disconnect, device number 62 17:45:42 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (fail_nth: 4) 17:45:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}]}, 0x320) [ 1347.153779][T18143] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1347.160774][T18143] ath9k_htc: Failed to initialize the device [ 1347.168584][T23140] usb 6-1: ath9k_htc: USB layer deinitialized 17:45:42 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}]}}}}}}}, 0x0) 17:45:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900027c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x226) [ 1347.231731][T26906] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1347.243296][T26907] FAULT_INJECTION: forcing a failure. [ 1347.243296][T26907] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.255993][T26907] CPU: 0 PID: 26907 Comm: syz-executor.0 Not tainted 5.17.0-rc2-syzkaller #0 [ 1347.264808][T26907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.264831][T26907] Call Trace: [ 1347.264839][T26907] 17:45:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x320) [ 1347.264851][T26907] dump_stack_lvl+0xcd/0x134 [ 1347.264888][T26907] should_fail.cold+0x5/0xa [ 1347.264923][T26907] ? __nf_conntrack_alloc+0x1c0/0x810 [ 1347.264958][T26907] should_failslab+0x5/0x10 [ 1347.264988][T26907] kmem_cache_alloc+0x5e/0x3a0 [ 1347.265024][T26907] __nf_conntrack_alloc+0x1c0/0x810 [ 1347.265060][T26907] init_conntrack.constprop.0+0x10c4/0x1430 [ 1347.265093][T26907] ? nf_ct_get_id+0x1a0/0x1a0 [ 1347.265124][T26907] ? nf_conntrack_alloc+0x40/0x40 [ 1347.265163][T26907] ? lockdep_hardirqs_on+0x79/0x100 17:45:42 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}]}}}}}}}, 0x0) [ 1347.265192][T26907] ? ipt_do_table+0xcf2/0x1990 [ 1347.265216][T26907] ? __local_bh_enable_ip+0xa0/0x120 [ 1347.265248][T26907] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1347.265287][T26907] nf_conntrack_in+0xdc0/0x17f0 [ 1347.265329][T26907] ? nf_conntrack_get_tuple_skb+0x440/0x440 [ 1347.265370][T26907] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1347.265404][T26907] ? ipv4_conntrack_defrag+0x1ba/0x5f0 [ 1347.265440][T26907] nf_hook_slow+0xc5/0x1e0 [ 1347.265471][T26907] nf_hook.constprop.0+0x3ac/0x650 17:45:42 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x6, "bc496745"}]}}}}}}}, 0x0) [ 1347.265507][T26907] ? ip_list_rcv_finish.constprop.0+0x6e0/0x6e0 [ 1347.265538][T26907] ? inet_del_offload+0x50/0x50 [ 1347.265564][T26907] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1347.265598][T26907] ? tun_sock_write_space+0xf2/0x1d0 [ 1347.402255][T26907] ? ip_list_rcv_finish.constprop.0+0x6e0/0x6e0 [ 1347.402295][T26907] ? ip_rcv_core+0x86c/0xcc0 [ 1347.402328][T26907] ip_rcv+0x74/0xd0 [ 1347.402350][T26907] ? ip_local_deliver+0x200/0x200 [ 1347.423038][T26907] __netif_receive_skb_one_core+0x114/0x180 17:45:42 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x6, "bc496745"}]}}}}}}}, 0x0) [ 1347.423078][T26907] ? __netif_receive_skb_core+0x3850/0x3850 [ 1347.423102][T26907] ? ktime_get_with_offset+0x3f2/0x500 [ 1347.423133][T26907] ? lockdep_hardirqs_on+0x79/0x100 [ 1347.423161][T26907] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1347.423190][T26907] ? ktime_get_with_offset+0x36d/0x500 [ 1347.423220][T26907] __netif_receive_skb+0x24/0x1b0 [ 1347.423249][T26907] netif_receive_skb+0x13e/0x8e0 [ 1347.423278][T26907] ? __netif_receive_skb+0x1b0/0x1b0 [ 1347.423306][T26907] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1347.423347][T26907] tun_rx_batched.isra.0+0x460/0x720 [ 1347.423392][T26907] ? tun_net_open+0x120/0x120 [ 1347.423421][T26907] ? lock_release+0x720/0x720 [ 1347.423449][T26907] ? tun_get_user+0x23a1/0x3720 17:45:43 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x6, "bc496745"}]}}}}}}}, 0x0) [ 1347.423476][T26907] ? lock_downgrade+0x6e0/0x6e0 [ 1347.423503][T26907] ? eth_type_trans+0x29e/0x640 [ 1347.423539][T26907] ? __local_bh_enable_ip+0xa0/0x120 [ 1347.423580][T26907] tun_get_user+0x257e/0x3720 [ 1347.423627][T26907] ? tun_build_skb+0x1010/0x1010 [ 1347.423663][T26907] ? lock_downgrade+0x6e0/0x6e0 [ 1347.423715][T26907] tun_chr_write_iter+0xdd/0x1a0 [ 1347.423749][T26907] new_sync_write+0x431/0x660 [ 1347.423783][T26907] ? new_sync_read+0x6e0/0x6e0 17:45:43 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x8, "bc496745b9b7"}]}}}}}}}, 0x0) [ 1347.423829][T26907] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1347.423856][T26907] ? security_file_permission+0xab/0xd0 [ 1347.423890][T26907] vfs_write+0x7cd/0xae0 [ 1347.423918][T26907] ksys_write+0x12d/0x250 [ 1347.423942][T26907] ? __ia32_sys_read+0xb0/0xb0 [ 1347.423968][T26907] ? syscall_enter_from_user_mode+0x21/0x70 [ 1347.423997][T26907] do_syscall_64+0x35/0xb0 [ 1347.424018][T26907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1347.424045][T26907] RIP: 0033:0x7ff57aab2b6f [ 1347.424066][T26907] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1347.424086][T26907] RSP: 002b:00007ff579475130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1347.424110][T26907] RAX: ffffffffffffffda RBX: 00007ff57ac12f60 RCX: 00007ff57aab2b6f [ 1347.424129][T26907] RDX: 0000000000000036 RSI: 00000000200001c0 RDI: 00000000000000c8 [ 1347.424145][T26907] RBP: 00007ff5794751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1347.424160][T26907] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 1347.424176][T26907] R13: 00007ff57b146b1f R14: 00007ff579475300 R15: 0000000000022000 [ 1347.424215][T26907] [ 1347.813605][T23140] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1348.203944][T23140] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1348.393896][T23140] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1348.403069][T23140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.411680][T23140] usb 6-1: Product: syz [ 1348.416286][T23140] usb 6-1: Manufacturer: syz [ 1348.420904][T23140] usb 6-1: SerialNumber: syz [ 1348.484498][T23140] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1349.093703][T23140] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1349.711635][T25435] usb 6-1: USB disconnect, device number 63 [ 1350.113711][T23140] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1350.120728][T23140] ath9k_htc: Failed to initialize the device [ 1350.128826][T25435] usb 6-1: ath9k_htc: USB layer deinitialized 17:45:45 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (fail_nth: 5) 17:45:45 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x8, "bc496745b9b7"}]}}}}}}}, 0x0) 17:45:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900037c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x320) 17:45:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x227) [ 1350.262872][T26935] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1350.264130][T26931] FAULT_INJECTION: forcing a failure. [ 1350.264130][T26931] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.283660][T26931] CPU: 0 PID: 26931 Comm: syz-executor.0 Not tainted 5.17.0-rc2-syzkaller #0 [ 1350.292445][T26931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.302527][T26931] Call Trace: [ 1350.305837][T26931] [ 1350.308781][T26931] dump_stack_lvl+0xcd/0x134 [ 1350.313415][T26931] should_fail.cold+0x5/0xa [ 1350.317941][T26931] ? nf_ct_ext_add+0x27d/0x6c0 [ 1350.322737][T26931] should_failslab+0x5/0x10 [ 1350.327269][T26931] __kmalloc_track_caller+0x79/0x320 [ 1350.332582][T26931] ? nf_ct_ext_add+0x2d8/0x6c0 [ 1350.337374][T26931] krealloc+0x87/0xf0 [ 1350.341378][T26931] nf_ct_ext_add+0x2d8/0x6c0 [ 1350.345997][T26931] init_conntrack.constprop.0+0x456/0x1430 [ 1350.351833][T26931] ? nf_ct_get_id+0x1a0/0x1a0 [ 1350.356534][T26931] ? nf_conntrack_alloc+0x40/0x40 [ 1350.361678][T26931] ? lockdep_hardirqs_on+0x79/0x100 [ 1350.366898][T26931] ? ipt_do_table+0xcf2/0x1990 [ 1350.371678][T26931] ? __local_bh_enable_ip+0xa0/0x120 [ 1350.376987][T26931] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1350.383259][T26931] nf_conntrack_in+0xdc0/0x17f0 [ 1350.388153][T26931] ? nf_conntrack_get_tuple_skb+0x440/0x440 [ 1350.394083][T26931] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1350.400376][T26931] ? ipv4_conntrack_defrag+0x1ba/0x5f0 17:45:45 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x8, "bc496745b9b7"}]}}}}}}}, 0x0) 17:45:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x320) [ 1350.400424][T26931] nf_hook_slow+0xc5/0x1e0 [ 1350.400460][T26931] nf_hook.constprop.0+0x3ac/0x650 17:45:46 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) (fail_nth: 1) [ 1350.400489][T26931] ? ip_list_rcv_finish.constprop.0+0x6e0/0x6e0 [ 1350.400519][T26931] ? inet_del_offload+0x50/0x50 [ 1350.400544][T26931] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1350.400580][T26931] ? tun_sock_write_space+0xf2/0x1d0 [ 1350.400612][T26931] ? ip_list_rcv_finish.constprop.0+0x6e0/0x6e0 17:45:46 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) (fail_nth: 2) [ 1350.400642][T26931] ? ip_rcv_core+0x86c/0xcc0 [ 1350.400677][T26931] ip_rcv+0x74/0xd0 [ 1350.400701][T26931] ? ip_local_deliver+0x200/0x200 [ 1350.400728][T26931] __netif_receive_skb_one_core+0x114/0x180 [ 1350.400760][T26931] ? __netif_receive_skb_core+0x3850/0x3850 [ 1350.400789][T26931] ? ktime_get_with_offset+0x3f2/0x500 [ 1350.400823][T26931] ? lockdep_hardirqs_on+0x79/0x100 [ 1350.400854][T26931] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1350.400887][T26931] ? ktime_get_with_offset+0x36d/0x500 [ 1350.400923][T26931] __netif_receive_skb+0x24/0x1b0 17:45:46 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) (fail_nth: 3) 17:45:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (fail_nth: 6) [ 1350.400953][T26931] netif_receive_skb+0x13e/0x8e0 [ 1350.400981][T26931] ? __netif_receive_skb+0x1b0/0x1b0 [ 1350.401011][T26931] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1350.401056][T26931] tun_rx_batched.isra.0+0x460/0x720 [ 1350.401091][T26931] ? tun_net_open+0x120/0x120 [ 1350.401118][T26931] ? lock_release+0x720/0x720 [ 1350.401147][T26931] ? tun_get_user+0x23a1/0x3720 [ 1350.401176][T26931] ? lock_downgrade+0x6e0/0x6e0 [ 1350.401204][T26931] ? eth_type_trans+0x29e/0x640 [ 1350.401239][T26931] ? __local_bh_enable_ip+0xa0/0x120 [ 1350.401285][T26931] tun_get_user+0x257e/0x3720 [ 1350.401333][T26931] ? tun_build_skb+0x1010/0x1010 [ 1350.401370][T26931] ? lock_downgrade+0x6e0/0x6e0 [ 1350.401422][T26931] tun_chr_write_iter+0xdd/0x1a0 [ 1350.401455][T26931] new_sync_write+0x431/0x660 [ 1350.401487][T26931] ? new_sync_read+0x6e0/0x6e0 [ 1350.401536][T26931] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1350.401570][T26931] ? security_file_permission+0xab/0xd0 [ 1350.401610][T26931] vfs_write+0x7cd/0xae0 [ 1350.401646][T26931] ksys_write+0x12d/0x250 [ 1350.401676][T26931] ? __ia32_sys_read+0xb0/0xb0 [ 1350.401709][T26931] ? syscall_enter_from_user_mode+0x21/0x70 [ 1350.401747][T26931] do_syscall_64+0x35/0xb0 [ 1350.401775][T26931] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1350.401809][T26931] RIP: 0033:0x7ff57aab2b6f [ 1350.401833][T26931] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1350.401861][T26931] RSP: 002b:00007ff579475130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1350.401890][T26931] RAX: ffffffffffffffda RBX: 00007ff57ac12f60 RCX: 00007ff57aab2b6f [ 1350.401910][T26931] RDX: 0000000000000036 RSI: 00000000200001c0 RDI: 00000000000000c8 [ 1350.401928][T26931] RBP: 00007ff5794751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.401945][T26931] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 1350.401963][T26931] R13: 00007ff57b146b1f R14: 00007ff579475300 R15: 0000000000022000 [ 1350.402002][T26931] [ 1350.544663][T26944] FAULT_INJECTION: forcing a failure. [ 1350.544663][T26944] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1350.544701][T26944] CPU: 0 PID: 26944 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller #0 [ 1350.544729][T26944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.544744][T26944] Call Trace: [ 1350.544753][T26944] [ 1350.544764][T26944] dump_stack_lvl+0xcd/0x134 [ 1350.544795][T26944] should_fail.cold+0x5/0xa [ 1350.544831][T26944] prepare_alloc_pages+0x17b/0x570 [ 1350.544864][T26944] __alloc_pages+0x12f/0x500 [ 1350.544891][T26944] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 1350.544944][T26944] alloc_pages+0x1aa/0x310 [ 1350.544972][T26944] skb_page_frag_refill+0x262/0x570 [ 1350.545009][T26944] tun_build_skb+0x1ff/0x1010 [ 1350.545047][T26944] ? tun_xdp_act+0x8d0/0x8d0 [ 1350.545077][T26944] ? __lock_acquire+0xbbf/0x5470 [ 1350.545120][T26944] tun_get_user+0x812/0x3720 [ 1350.545162][T26944] ? tun_build_skb+0x1010/0x1010 [ 1350.545195][T26944] ? lock_downgrade+0x6e0/0x6e0 [ 1350.545246][T26944] tun_chr_write_iter+0xdd/0x1a0 [ 1350.545278][T26944] new_sync_write+0x431/0x660 [ 1350.545311][T26944] ? new_sync_read+0x6e0/0x6e0 [ 1350.545357][T26944] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1350.545391][T26944] ? security_file_permission+0xab/0xd0 [ 1350.545431][T26944] vfs_write+0x7cd/0xae0 [ 1350.545465][T26944] ksys_write+0x12d/0x250 [ 1350.545493][T26944] ? __ia32_sys_read+0xb0/0xb0 [ 1350.545525][T26944] ? syscall_enter_from_user_mode+0x21/0x70 [ 1350.545563][T26944] do_syscall_64+0x35/0xb0 [ 1350.545589][T26944] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1350.545620][T26944] RIP: 0033:0x7f3dee497b6f [ 1350.545641][T26944] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1350.545674][T26944] RSP: 002b:00007f3dece5a130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1350.545701][T26944] RAX: ffffffffffffffda RBX: 00007f3dee5f7f60 RCX: 00007f3dee497b6f [ 1350.545721][T26944] RDX: 0000000000000042 RSI: 0000000020000180 RDI: 00000000000000c8 [ 1350.545738][T26944] RBP: 00007f3dece5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.545756][T26944] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000001 [ 1350.545773][T26944] R13: 00007f3deeb2bb1f R14: 00007f3dece5a300 R15: 0000000000022000 [ 1350.545809][T26944] [ 1350.613842][T26946] FAULT_INJECTION: forcing a failure. [ 1350.613842][T26946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.613878][T26946] CPU: 0 PID: 26946 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller #0 [ 1350.613906][T26946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.613922][T26946] Call Trace: [ 1350.613931][T26946] [ 1350.613941][T26946] dump_stack_lvl+0xcd/0x134 [ 1350.613972][T26946] should_fail.cold+0x5/0xa [ 1350.614006][T26946] copy_page_from_iter+0x359/0x7c0 [ 1350.614044][T26946] tun_build_skb+0x27c/0x1010 [ 1350.614080][T26946] ? tun_xdp_act+0x8d0/0x8d0 [ 1350.614111][T26946] ? __lock_acquire+0xbbf/0x5470 [ 1350.614158][T26946] tun_get_user+0x812/0x3720 [ 1350.614202][T26946] ? tun_build_skb+0x1010/0x1010 [ 1350.614235][T26946] ? lock_downgrade+0x6e0/0x6e0 [ 1350.614283][T26946] tun_chr_write_iter+0xdd/0x1a0 [ 1350.614314][T26946] new_sync_write+0x431/0x660 [ 1350.614345][T26946] ? new_sync_read+0x6e0/0x6e0 [ 1350.614386][T26946] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1350.614417][T26946] ? security_file_permission+0xab/0xd0 [ 1350.614451][T26946] vfs_write+0x7cd/0xae0 [ 1350.614483][T26946] ksys_write+0x12d/0x250 [ 1350.614511][T26946] ? __ia32_sys_read+0xb0/0xb0 [ 1350.614541][T26946] ? syscall_enter_from_user_mode+0x21/0x70 [ 1350.614577][T26946] do_syscall_64+0x35/0xb0 [ 1350.614601][T26946] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1350.614631][T26946] RIP: 0033:0x7f3dee497b6f [ 1350.614653][T26946] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1350.614686][T26946] RSP: 002b:00007f3dece5a130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1350.614714][T26946] RAX: ffffffffffffffda RBX: 00007f3dee5f7f60 RCX: 00007f3dee497b6f [ 1350.614734][T26946] RDX: 0000000000000042 RSI: 0000000020000180 RDI: 00000000000000c8 [ 1350.614752][T26946] RBP: 00007f3dece5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.614770][T26946] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000001 [ 1350.614788][T26946] R13: 00007f3deeb2bb1f R14: 00007f3dece5a300 R15: 0000000000022000 [ 1350.614825][T26946] [ 1350.717972][T26949] FAULT_INJECTION: forcing a failure. [ 1350.717972][T26949] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.720249][T26950] FAULT_INJECTION: forcing a failure. [ 1350.720249][T26950] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.723962][T26949] CPU: 1 PID: 26949 Comm: syz-executor.0 Not tainted 5.17.0-rc2-syzkaller #0 [ 1350.723994][T26949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.724010][T26949] Call Trace: [ 1350.724017][T26949] [ 1350.724028][T26949] dump_stack_lvl+0xcd/0x134 [ 1350.724062][T26949] should_fail.cold+0x5/0xa [ 1351.396007][T26949] ? dst_alloc+0x146/0x1f0 [ 1351.396050][T26949] should_failslab+0x5/0x10 [ 1351.396081][T26949] kmem_cache_alloc+0x5e/0x3a0 [ 1351.396114][T26949] dst_alloc+0x146/0x1f0 [ 1351.396143][T26949] rt_dst_alloc+0x73/0x450 [ 1351.396180][T26949] ip_route_input_slow+0x180e/0x39b0 [ 1351.396214][T26949] ? fib_multipath_hash+0x1150/0x1150 [ 1351.396252][T26949] ? lock_release+0x720/0x720 [ 1351.396285][T26949] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1351.396318][T26949] ? __inet_lookup_established+0x494/0x680 [ 1351.396355][T26949] ip_route_input_noref+0x116/0x2a0 [ 1351.450755][T26949] ? ip_route_input_slow+0x39b0/0x39b0 [ 1351.450792][T26949] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1351.461952][T26949] ? tcp_v4_early_demux+0x40f/0x9f0 [ 1351.467188][T26949] ? tcp_v4_early_demux+0x59/0x9f0 [ 1351.472321][T26949] ip_rcv_finish_core.constprop.0+0x288/0x1e90 [ 1351.478489][T26949] ip_rcv_finish+0x135/0x2f0 [ 1351.483085][T26949] ip_rcv+0xaa/0xd0 [ 1351.486901][T26949] ? ip_local_deliver+0x200/0x200 [ 1351.491930][T26949] __netif_receive_skb_one_core+0x114/0x180 [ 1351.497839][T26949] ? __netif_receive_skb_core+0x3850/0x3850 [ 1351.503738][T26949] ? ktime_get_with_offset+0x3f2/0x500 [ 1351.509232][T26949] ? lockdep_hardirqs_on+0x79/0x100 [ 1351.514446][T26949] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1351.520175][T26949] ? ktime_get_with_offset+0x36d/0x500 [ 1351.525648][T26949] __netif_receive_skb+0x24/0x1b0 [ 1351.530681][T26949] netif_receive_skb+0x13e/0x8e0 [ 1351.535622][T26949] ? __netif_receive_skb+0x1b0/0x1b0 [ 1351.540914][T26949] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1351.546926][T26949] tun_rx_batched.isra.0+0x460/0x720 [ 1351.552243][T26949] ? tun_net_open+0x120/0x120 [ 1351.556940][T26949] ? lock_release+0x720/0x720 [ 1351.561624][T26949] ? tun_get_user+0x23a1/0x3720 [ 1351.566477][T26949] ? lock_downgrade+0x6e0/0x6e0 [ 1351.571332][T26949] ? eth_type_trans+0x29e/0x640 [ 1351.576191][T26949] ? __local_bh_enable_ip+0xa0/0x120 [ 1351.581496][T26949] tun_get_user+0x257e/0x3720 [ 1351.586195][T26949] ? tun_build_skb+0x1010/0x1010 [ 1351.591152][T26949] ? lock_downgrade+0x6e0/0x6e0 [ 1351.596037][T26949] tun_chr_write_iter+0xdd/0x1a0 [ 1351.600987][T26949] new_sync_write+0x431/0x660 [ 1351.605676][T26949] ? new_sync_read+0x6e0/0x6e0 [ 1351.610459][T26949] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1351.616708][T26949] ? security_file_permission+0xab/0xd0 [ 1351.622279][T26949] vfs_write+0x7cd/0xae0 [ 1351.626537][T26949] ksys_write+0x12d/0x250 [ 1351.630870][T26949] ? __ia32_sys_read+0xb0/0xb0 [ 1351.635641][T26949] ? syscall_enter_from_user_mode+0x21/0x70 [ 1351.641548][T26949] do_syscall_64+0x35/0xb0 [ 1351.645981][T26949] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1351.651890][T26949] RIP: 0033:0x7ff57aab2b6f [ 1351.656306][T26949] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1351.675918][T26949] RSP: 002b:00007ff579475130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1351.684333][T26949] RAX: ffffffffffffffda RBX: 00007ff57ac12f60 RCX: 00007ff57aab2b6f [ 1351.692323][T26949] RDX: 0000000000000036 RSI: 00000000200001c0 RDI: 00000000000000c8 [ 1351.700293][T26949] RBP: 00007ff5794751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1351.708270][T26949] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 1351.716241][T26949] R13: 00007ff57b146b1f R14: 00007ff579475300 R15: 0000000000022000 [ 1351.724234][T26949] [ 1351.727252][T26950] CPU: 0 PID: 26950 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller #0 [ 1351.736055][T26950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.736074][T26950] Call Trace: [ 1351.736082][T26950] [ 1351.736091][T26950] dump_stack_lvl+0xcd/0x134 [ 1351.736122][T26950] should_fail.cold+0x5/0xa [ 1351.736152][T26950] ? __build_skb+0x21/0x60 [ 1351.736178][T26950] should_failslab+0x5/0x10 [ 1351.736207][T26950] kmem_cache_alloc+0x5e/0x3a0 [ 1351.736239][T26950] __build_skb+0x21/0x60 [ 1351.736265][T26950] build_skb+0x1e/0x190 [ 1351.736293][T26950] __tun_build_skb+0x2c/0x260 [ 1351.736320][T26950] tun_build_skb+0x5d8/0x1010 [ 1351.736354][T26950] ? tun_xdp_act+0x8d0/0x8d0 [ 1351.736379][T26950] ? __lock_acquire+0xbbf/0x5470 [ 1351.736416][T26950] tun_get_user+0x812/0x3720 [ 1351.736453][T26950] ? tun_build_skb+0x1010/0x1010 [ 1351.736483][T26950] ? lock_downgrade+0x6e0/0x6e0 [ 1351.736523][T26950] tun_chr_write_iter+0xdd/0x1a0 [ 1351.736551][T26950] new_sync_write+0x431/0x660 [ 1351.736579][T26950] ? new_sync_read+0x6e0/0x6e0 [ 1351.736619][T26950] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1351.736649][T26950] ? security_file_permission+0xab/0xd0 [ 1351.736683][T26950] vfs_write+0x7cd/0xae0 [ 1351.736719][T26950] ksys_write+0x12d/0x250 [ 1351.736745][T26950] ? __ia32_sys_read+0xb0/0xb0 [ 1351.736774][T26950] ? syscall_enter_from_user_mode+0x21/0x70 [ 1351.736808][T26950] do_syscall_64+0x35/0xb0 [ 1351.736831][T26950] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1351.736861][T26950] RIP: 0033:0x7f3dee497b6f [ 1351.736881][T26950] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1351.736903][T26950] RSP: 002b:00007f3dece5a130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1351.736927][T26950] RAX: ffffffffffffffda RBX: 00007f3dee5f7f60 RCX: 00007f3dee497b6f [ 1351.736944][T26950] RDX: 0000000000000042 RSI: 0000000020000180 RDI: 00000000000000c8 [ 1351.736959][T26950] RBP: 00007f3dece5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1351.736974][T26950] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000001 [ 1351.736990][T26950] R13: 00007f3deeb2bb1f R14: 00007f3dece5a300 R15: 0000000000022000 [ 1351.737021][T26950] [ 1351.743608][T25435] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1352.344025][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1352.513813][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1352.522985][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.531373][T25435] usb 6-1: Product: syz [ 1352.535775][T25435] usb 6-1: Manufacturer: syz [ 1352.540499][T25435] usb 6-1: SerialNumber: syz [ 1352.584815][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1353.163850][T12624] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 17:45:48 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900007d0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:48 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x228) 17:45:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (fail_nth: 7) 17:45:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x320) [ 1353.296002][T23140] usb 6-1: USB disconnect, device number 64 17:45:48 executing program 1: syz_emit_ethernet(0xd, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1353.342603][T26960] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1353.345967][T26956] FAULT_INJECTION: forcing a failure. [ 1353.345967][T26956] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.363423][T26956] CPU: 0 PID: 26956 Comm: syz-executor.0 Not tainted 5.17.0-rc2-syzkaller #0 17:45:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (fail_nth: 8) 17:45:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900017d0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1353.363460][T26956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.363475][T26956] Call Trace: [ 1353.363484][T26956] [ 1353.363495][T26956] dump_stack_lvl+0xcd/0x134 [ 1353.363530][T26956] should_fail.cold+0x5/0xa [ 1353.363564][T26956] ? vfs_write+0x7cd/0xae0 [ 1353.363597][T26956] ? ref_tracker_alloc+0x10a/0x460 [ 1353.363656][T26956] should_failslab+0x5/0x10 [ 1353.363689][T26956] kmem_cache_alloc_trace+0x55/0x2c0 [ 1353.363719][T26956] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1353.363759][T26956] ref_tracker_alloc+0x10a/0x460 17:45:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:45:49 executing program 1: syz_emit_ethernet(0x82, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0xd, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1353.363786][T26956] ? fib_rules_lookup+0x3eb/0xc20 [ 1353.363868][T26956] ? ref_tracker_dir_print+0x90/0x90 [ 1353.363899][T26956] ? fib_rules_net_exit+0x60/0x60 [ 1353.363943][T26956] dst_init+0xe0/0x520 [ 1353.363977][T26956] dst_alloc+0x16b/0x1f0 [ 1353.364011][T26956] rt_dst_alloc+0x73/0x450 [ 1353.364045][T26956] ip_route_input_slow+0x180e/0x39b0 [ 1353.364082][T26956] ? fib_multipath_hash+0x1150/0x1150 [ 1353.364127][T26956] ? lock_release+0x720/0x720 [ 1353.364164][T26956] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1353.364196][T26956] ? __inet_lookup_established+0x494/0x680 [ 1353.364238][T26956] ip_route_input_noref+0x116/0x2a0 [ 1353.364264][T26956] ? ip_route_input_slow+0x39b0/0x39b0 [ 1353.364289][T26956] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1353.364325][T26956] ? tcp_v4_early_demux+0x40f/0x9f0 [ 1353.364356][T26956] ? tcp_v4_early_demux+0x59/0x9f0 [ 1353.364394][T26956] ip_rcv_finish_core.constprop.0+0x288/0x1e90 [ 1353.364431][T26956] ip_rcv_finish+0x135/0x2f0 [ 1353.364457][T26956] ip_rcv+0xaa/0xd0 [ 1353.364477][T26956] ? ip_local_deliver+0x200/0x200 [ 1353.364499][T26956] __netif_receive_skb_one_core+0x114/0x180 [ 1353.364525][T26956] ? __netif_receive_skb_core+0x3850/0x3850 [ 1353.364553][T26956] ? ktime_get_with_offset+0x3f2/0x500 [ 1353.364597][T26956] ? lockdep_hardirqs_on+0x79/0x100 [ 1353.364631][T26956] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1353.364665][T26956] ? ktime_get_with_offset+0x36d/0x500 [ 1353.364721][T26956] __netif_receive_skb+0x24/0x1b0 [ 1353.364756][T26956] netif_receive_skb+0x13e/0x8e0 [ 1353.364785][T26956] ? __netif_receive_skb+0x1b0/0x1b0 [ 1353.364815][T26956] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1353.364861][T26956] tun_rx_batched.isra.0+0x460/0x720 [ 1353.364898][T26956] ? tun_net_open+0x120/0x120 [ 1353.364924][T26956] ? lock_release+0x720/0x720 [ 1353.364952][T26956] ? tun_get_user+0x23a1/0x3720 [ 1353.364980][T26956] ? lock_downgrade+0x6e0/0x6e0 [ 1353.365006][T26956] ? eth_type_trans+0x29e/0x640 [ 1353.365035][T26956] ? __local_bh_enable_ip+0xa0/0x120 [ 1353.365074][T26956] tun_get_user+0x257e/0x3720 [ 1353.365116][T26956] ? tun_build_skb+0x1010/0x1010 [ 1353.365152][T26956] ? lock_downgrade+0x6e0/0x6e0 [ 1353.365201][T26956] tun_chr_write_iter+0xdd/0x1a0 [ 1353.365232][T26956] new_sync_write+0x431/0x660 [ 1353.365264][T26956] ? new_sync_read+0x6e0/0x6e0 [ 1353.365312][T26956] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1353.365344][T26956] ? security_file_permission+0xab/0xd0 [ 1353.365382][T26956] vfs_write+0x7cd/0xae0 [ 1353.365417][T26956] ksys_write+0x12d/0x250 [ 1353.365446][T26956] ? __ia32_sys_read+0xb0/0xb0 [ 1353.365481][T26956] ? syscall_enter_from_user_mode+0x21/0x70 [ 1353.365521][T26956] do_syscall_64+0x35/0xb0 [ 1353.365548][T26956] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1353.365589][T26956] RIP: 0033:0x7ff57aab2b6f [ 1353.365613][T26956] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1353.365639][T26956] RSP: 002b:00007ff579475130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1353.365668][T26956] RAX: ffffffffffffffda RBX: 00007ff57ac12f60 RCX: 00007ff57aab2b6f [ 1353.365687][T26956] RDX: 0000000000000036 RSI: 00000000200001c0 RDI: 00000000000000c8 [ 1353.365703][T26956] RBP: 00007ff5794751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1353.365720][T26956] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 1353.365738][T26956] R13: 00007ff57b146b1f R14: 00007ff579475300 R15: 0000000000022000 [ 1353.365776][T26956] [ 1353.365833][T26956] memory allocation failure, unreliable refcount tracker. [ 1353.461821][T26964] FAULT_INJECTION: forcing a failure. [ 1353.461821][T26964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1353.461856][T26964] CPU: 0 PID: 26964 Comm: syz-executor.0 Not tainted 5.17.0-rc2-syzkaller #0 [ 1353.461883][T26964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.461899][T26964] Call Trace: [ 1353.461907][T26964] [ 1353.461921][T26964] dump_stack_lvl+0xcd/0x134 [ 1353.461955][T26964] should_fail.cold+0x5/0xa [ 1353.462000][T26964] _copy_to_user+0x2c/0x150 [ 1353.462036][T26964] simple_read_from_buffer+0xcc/0x160 [ 1353.462076][T26964] proc_fail_nth_read+0x187/0x220 [ 1353.462111][T26964] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1353.462142][T26964] ? security_file_permission+0xab/0xd0 [ 1353.462177][T26964] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1353.462208][T26964] vfs_read+0x1b5/0x600 [ 1353.462242][T26964] ksys_read+0x12d/0x250 [ 1353.462270][T26964] ? vfs_write+0xae0/0xae0 [ 1353.462300][T26964] ? syscall_enter_from_user_mode+0x21/0x70 [ 1353.462340][T26964] do_syscall_64+0x35/0xb0 [ 1353.462364][T26964] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1353.462395][T26964] RIP: 0033:0x7ff57aab2c0c [ 1353.462417][T26964] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1353.462443][T26964] RSP: 002b:00007ff579475160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1353.462471][T26964] RAX: ffffffffffffffda RBX: 00007ff57ac12f60 RCX: 00007ff57aab2c0c [ 1353.462489][T26964] RDX: 000000000000000f RSI: 00007ff5794751e0 RDI: 0000000000000004 [ 1353.462506][T26964] RBP: 00007ff5794751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1353.462522][T26964] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 1353.462539][T26964] R13: 00007ff57b146b1f R14: 00007ff579475300 R15: 0000000000022000 [ 1353.462574][T26964] [ 1353.490368][T26968] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1354.193735][T12624] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1354.200859][T12624] ath9k_htc: Failed to initialize the device [ 1354.207867][T23140] usb 6-1: ath9k_htc: USB layer deinitialized [ 1354.583724][T23140] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1354.953642][T23140] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1355.133969][T23140] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1355.143138][T23140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.151803][T23140] usb 6-1: Product: syz [ 1355.157088][T23140] usb 6-1: Manufacturer: syz [ 1355.161823][T23140] usb 6-1: SerialNumber: syz [ 1355.215376][T23140] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1355.803885][T23140] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1356.622903][T12624] usb 6-1: USB disconnect, device number 65 [ 1356.833849][T23140] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1356.840849][T23140] ath9k_htc: Failed to initialize the device [ 1356.849083][T12624] usb 6-1: ath9k_htc: USB layer deinitialized 17:45:52 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:52 executing program 1: syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:45:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x320) 17:45:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x229) 17:45:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900027d0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1357.173608][T26985] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x320) 17:45:52 executing program 1: syz_emit_ethernet(0x200001c2, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x22a) 17:45:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900037d0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x200001f6, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1357.316968][T26997] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1357.473611][T25435] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1357.833675][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1357.993698][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1358.002781][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.011364][T25435] usb 6-1: Product: syz [ 1358.015863][T25435] usb 6-1: Manufacturer: syz [ 1358.020486][T25435] usb 6-1: SerialNumber: syz [ 1358.064521][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1358.633785][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1359.444426][T12624] usb 6-1: USB disconnect, device number 66 [ 1359.713619][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1359.720672][T25435] ath9k_htc: Failed to initialize the device [ 1359.727221][T12624] usb 6-1: ath9k_htc: USB layer deinitialized 17:45:55 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x320) 17:45:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x22b) 17:45:55 executing program 1: syz_emit_ethernet(0xfffffdef, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0xfffffdef, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:45:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900007e0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x320) 17:45:55 executing program 1: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1359.994594][T27009] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x22c) 17:45:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0xfffffffffffffdef, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:45:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900017e0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:55 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x300, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1360.150913][T27021] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1360.313814][T23140] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1360.733892][T23140] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1360.926236][T23140] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1360.935500][T23140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.943977][T23140] usb 6-1: Product: syz [ 1360.948161][T23140] usb 6-1: Manufacturer: syz [ 1360.952762][T23140] usb 6-1: SerialNumber: syz [ 1360.994613][T23140] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1361.315200][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.321522][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.583675][T23140] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1362.192779][T25435] usb 6-1: USB disconnect, device number 67 17:45:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x22d) 17:45:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x320) 17:45:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x300, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:45:58 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x500, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900027e0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:58 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:45:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x500, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:45:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1900000000000000}]}, 0x320) [ 1362.749945][T27031] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:45:58 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x600, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x22e) 17:45:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900037e0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:45:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x600, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:45:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x320) [ 1362.847279][T23140] usb 6-1: Service connection timeout for: 256 [ 1362.857399][T23140] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1362.883282][T23140] ath9k_htc: Failed to initialize the device 17:45:58 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x700, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x22f) [ 1362.903131][T27046] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1362.911747][T25435] usb 6-1: ath9k_htc: USB layer deinitialized 17:45:58 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x802, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:45:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x700, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1363.283659][T25435] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1363.643789][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1363.813742][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1363.823083][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.831573][T25435] usb 6-1: Product: syz [ 1363.836127][T25435] usb 6-1: Manufacturer: syz [ 1363.840799][T25435] usb 6-1: SerialNumber: syz [ 1363.894571][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1364.473972][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1365.095349][T12624] usb 6-1: USB disconnect, device number 68 17:46:01 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:46:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x320) 17:46:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900007f0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:01 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x803, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x230) 17:46:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x802, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x803, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2003000000000000}]}, 0x320) [ 1365.637883][T27068] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:01 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x804, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900017f0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x231) [ 1365.723771][T25435] usb 6-1: Service connection timeout for: 256 [ 1365.732308][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1365.758771][T25435] ath9k_htc: Failed to initialize the device 17:46:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x804, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1365.768582][T27076] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1365.780973][T12624] usb 6-1: ath9k_htc: USB layer deinitialized [ 1366.183616][T12624] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1366.564109][T12624] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1366.764025][T12624] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1366.776542][T12624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.793700][T12624] usb 6-1: Product: syz [ 1366.802533][T12624] usb 6-1: Manufacturer: syz [ 1366.812978][T12624] usb 6-1: SerialNumber: syz [ 1366.875560][T12624] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1367.523733][T12624] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1368.134247][T25435] usb 6-1: USB disconnect, device number 69 17:46:04 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:46:04 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x806, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x320) 17:46:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x232) 17:46:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900027f0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x806, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:04 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x807, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x807, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1368.666541][T27088] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x320) 17:46:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x233) 17:46:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900037f0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x808, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1368.811677][T27102] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1368.833609][T12624] usb 6-1: Service connection timeout for: 256 [ 1368.841150][T12624] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1368.874060][T12624] ath9k_htc: Failed to initialize the device [ 1368.888873][T25435] usb 6-1: ath9k_htc: USB layer deinitialized [ 1369.263616][T25435] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1369.623842][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1369.783681][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1369.793016][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.801448][T25435] usb 6-1: Product: syz [ 1369.806229][T25435] usb 6-1: Manufacturer: syz [ 1369.810915][T25435] usb 6-1: SerialNumber: syz [ 1369.865202][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1370.443694][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1371.251091][T23140] usb 6-1: USB disconnect, device number 70 17:46:07 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:46:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x234) 17:46:07 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x808, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x320) 17:46:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x828, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002800400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1371.713596][T25435] usb 6-1: Service connection timeout for: 256 [ 1371.720041][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1371.731356][T25435] ath9k_htc: Failed to initialize the device [ 1371.738217][T23140] usb 6-1: ath9k_htc: USB layer deinitialized 17:46:07 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x80a, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0xa00, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1371.796678][T27113] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x235) 17:46:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000}]}, 0x320) 17:46:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003800400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:07 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x80b, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1371.979187][T27129] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1372.243794][T23140] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1372.674042][T23140] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1372.853778][T23140] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1372.862860][T23140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.871487][T23140] usb 6-1: Product: syz [ 1372.876068][T23140] usb 6-1: Manufacturer: syz [ 1372.880680][T23140] usb 6-1: SerialNumber: syz [ 1372.936511][T23140] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1373.513966][T23140] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1374.325785][T18144] usb 6-1: USB disconnect, device number 71 [ 1374.753686][T23140] usb 6-1: Service connection timeout for: 256 [ 1374.760058][T23140] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1374.770088][T23140] ath9k_htc: Failed to initialize the device [ 1374.776755][T18144] usb 6-1: ath9k_htc: USB layer deinitialized 17:46:10 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:46:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x1c00, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:10 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x80e, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x236) 17:46:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}]}, 0x320) 17:46:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000810400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1374.865776][T27143] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x237) 17:46:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x2000, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:10 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x828, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x320) 17:46:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x3f00, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001810400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1375.053086][T27159] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1375.273706][T18144] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1375.653789][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1375.823822][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1375.832934][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.841534][T18144] usb 6-1: Product: syz [ 1375.846791][T18144] usb 6-1: Manufacturer: syz [ 1375.851412][T18144] usb 6-1: SerialNumber: syz [ 1375.914684][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1376.563702][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1377.374373][T25435] usb 6-1: USB disconnect, device number 72 [ 1377.796039][T18144] usb 6-1: Service connection timeout for: 256 [ 1377.802251][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1377.814263][T18144] ath9k_htc: Failed to initialize the device [ 1377.820656][T25435] usb 6-1: ath9k_htc: USB layer deinitialized 17:46:13 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:46:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x238) 17:46:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x320) 17:46:13 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x834, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x4305, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002810400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:13 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x860, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x239) [ 1377.925057][T27166] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x6000, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, 0x320) 17:46:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003810400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:13 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x900, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1378.047442][T27180] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1378.333717][T25435] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1378.693695][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1378.853808][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1378.863064][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.871857][T25435] usb 6-1: Product: syz [ 1378.876562][T25435] usb 6-1: Manufacturer: syz [ 1378.881268][T25435] usb 6-1: SerialNumber: syz [ 1378.934547][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1379.513669][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1379.933756][T25435] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 1379.939456][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1380.331447][T18144] usb 6-1: USB disconnect, device number 73 [ 1380.336525][T25435] ath9k_htc: Failed to initialize the device [ 1380.343896][T18144] usb 6-1: ath9k_htc: USB layer deinitialized 17:46:16 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:46:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x8035, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}, 0x320) 17:46:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x23a) 17:46:16 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0xa00, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000820400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x8100, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x320) 17:46:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x23b) 17:46:16 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0xb00, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1380.897825][T27194] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001820400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x23c) [ 1381.028011][T27206] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1381.173724][T25435] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1381.533846][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1381.703812][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1381.712896][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.721630][T25435] usb 6-1: Product: syz [ 1381.726534][T25435] usb 6-1: Manufacturer: syz [ 1381.731155][T25435] usb 6-1: SerialNumber: syz [ 1381.784689][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1382.373786][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1382.794210][T25435] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 1382.799925][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1383.187207][T12624] usb 6-1: USB disconnect, device number 74 [ 1383.197531][T25435] ath9k_htc: Failed to initialize the device [ 1383.206514][T12624] usb 6-1: ath9k_htc: USB layer deinitialized 17:46:19 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:46:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x8847, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:19 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x1c00, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x320) 17:46:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x23d) 17:46:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002820400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:19 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x2800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x8848, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1383.741777][T27216] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x23e) 17:46:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x320) 17:46:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003820400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1383.879334][T27230] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1384.023725][T18144] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1384.393658][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1384.553777][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1384.562942][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.572183][T18144] usb 6-1: Product: syz [ 1384.576874][T18144] usb 6-1: Manufacturer: syz [ 1384.581580][T18144] usb 6-1: SerialNumber: syz [ 1384.634535][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1385.213741][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1385.633951][T18144] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 1385.640252][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1386.024658][T25435] usb 6-1: USB disconnect, device number 75 [ 1386.035822][T18144] ath9k_htc: Failed to initialize the device [ 1386.042105][T25435] usb 6-1: ath9k_htc: USB layer deinitialized 17:46:22 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:46:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x320) 17:46:22 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x3f00, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x23f) 17:46:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x8906, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000830400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:22 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x4305, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x4, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x240) [ 1386.575605][T27238] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x320) 17:46:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x320) [ 1386.873774][T18144] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1387.233831][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1387.403803][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1387.413319][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.421930][T18144] usb 6-1: Product: syz [ 1387.426501][T18144] usb 6-1: Manufacturer: syz [ 1387.431206][T18144] usb 6-1: SerialNumber: syz [ 1387.476800][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1388.123689][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1388.740677][T18143] usb 6-1: USB disconnect, device number 76 17:46:24 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:46:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001830400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:24 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x6000, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x241) 17:46:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x320) 17:46:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1389.288932][T27264] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:24 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x6558, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x242) 17:46:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x320) 17:46:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x2, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002830400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1389.469224][T27281] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1389.553791][T18144] usb 6-1: Service connection timeout for: 257 [ 1389.560004][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1389.568533][T18144] ath9k_htc: Failed to initialize the device [ 1389.574916][T18143] usb 6-1: ath9k_htc: USB layer deinitialized [ 1389.943613][T18143] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1390.303786][T18143] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1390.463853][T18143] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1390.472927][T18143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.481258][T18143] usb 6-1: Product: syz [ 1390.485789][T18143] usb 6-1: Manufacturer: syz [ 1390.490408][T18143] usb 6-1: SerialNumber: syz [ 1390.545335][T18143] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1391.123782][T18143] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1391.733858][T25435] usb 6-1: USB disconnect, device number 77 17:46:27 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:46:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x243) 17:46:27 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x8035, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x320) 17:46:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x3, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003830400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x6, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:27 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x8100, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1392.285993][T27288] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x244) 17:46:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}]}, 0x320) 17:46:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x8, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000840400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1392.452003][T27304] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1392.593697][T18143] usb 6-1: Service connection timeout for: 257 [ 1392.601142][T18143] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1392.610678][T18143] ath9k_htc: Failed to initialize the device [ 1392.617341][T25435] usb 6-1: ath9k_htc: USB layer deinitialized [ 1392.983731][T25435] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1393.363747][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1393.533825][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1393.542911][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.551778][T25435] usb 6-1: Product: syz [ 1393.556457][T25435] usb 6-1: Manufacturer: syz [ 1393.561172][T25435] usb 6-1: SerialNumber: syz [ 1393.625182][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1394.253795][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1394.862967][T18143] usb 6-1: USB disconnect, device number 78 17:46:30 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 17:46:30 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x8847, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x245) 17:46:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x320) 17:46:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0xa, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001840400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:30 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x8848, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x320) 17:46:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x246) [ 1395.423320][T27316] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:31 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002840400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1395.582171][T27329] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1395.713854][T25435] usb 6-1: Service connection timeout for: 257 [ 1395.720060][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1395.729185][T25435] ath9k_htc: Failed to initialize the device [ 1395.735883][T18143] usb 6-1: ath9k_htc: USB layer deinitialized [ 1396.103654][T18143] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1396.503843][T18143] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1396.674253][T18143] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1396.683512][T18143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.691665][T18143] usb 6-1: Product: syz [ 1396.697742][T18143] usb 6-1: Manufacturer: syz [ 1396.702455][T18143] usb 6-1: SerialNumber: syz [ 1396.757713][T18143] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1397.383834][T18143] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1398.194680][T18144] usb 6-1: USB disconnect, device number 79 17:46:34 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 17:46:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}]}, 0x320) 17:46:34 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x8906, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x247) 17:46:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003840400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1398.728392][T27337] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x320) 17:46:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x248) 17:46:34 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x4, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000850400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1398.834147][T18143] usb 6-1: Service connection timeout for: 257 [ 1398.834175][T18143] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1398.834568][T18143] ath9k_htc: Failed to initialize the device [ 1398.835297][T18144] usb 6-1: ath9k_htc: USB layer deinitialized [ 1398.871208][T27350] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1399.213557][T18144] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1399.613702][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1399.783774][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1399.792851][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.802304][T18144] usb 6-1: Product: syz [ 1399.818159][T18144] usb 6-1: Manufacturer: syz [ 1399.822766][T18144] usb 6-1: SerialNumber: syz [ 1399.884879][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1400.493625][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1401.303921][T25435] usb 6-1: USB disconnect, device number 80 17:46:37 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 17:46:37 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001850400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x249) 17:46:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}]}, 0x320) 17:46:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:37 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1401.853080][T27362] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x24a) 17:46:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320}]}, 0x320) 17:46:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002850400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:37 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1401.962397][T18144] usb 6-1: Service connection timeout for: 257 [ 1401.974773][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1402.008130][T18144] ath9k_htc: Failed to initialize the device [ 1402.008419][T25435] usb 6-1: ath9k_htc: USB layer deinitialized [ 1402.022728][T27376] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1402.373758][T25435] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1402.764519][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1402.943803][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1402.953003][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.961903][T25435] usb 6-1: Product: syz [ 1402.966537][T25435] usb 6-1: Manufacturer: syz [ 1402.971335][T25435] usb 6-1: SerialNumber: syz [ 1403.034561][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1403.653743][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1404.464341][T18144] usb 6-1: USB disconnect, device number 81 17:46:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}]}, 0x320) 17:46:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x24b) 17:46:40 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003850400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:40 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8"}) 17:46:40 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x2, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x24c) 17:46:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1405.035204][T27389] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}]}, 0x320) [ 1405.083717][T25435] usb 6-1: Service connection timeout for: 257 [ 1405.093001][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services 17:46:40 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x3, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x7, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x24d) 17:46:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000860400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1405.127154][T25435] ath9k_htc: Failed to initialize the device [ 1405.151909][T18144] usb 6-1: ath9k_htc: USB layer deinitialized 17:46:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}]}, 0x320) 17:46:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x24e) 17:46:40 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x6, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1405.240719][T27404] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1405.523723][T18144] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1405.913808][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1406.093953][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1406.103030][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.111641][T18144] usb 6-1: Product: syz [ 1406.117155][T18144] usb 6-1: Manufacturer: syz [ 1406.121779][T18144] usb 6-1: SerialNumber: syz [ 1406.176008][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1406.793935][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1407.414140][T18144] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 1407.419851][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1407.604317][T18143] usb 6-1: USB disconnect, device number 82 [ 1407.617863][T18144] ath9k_htc: Failed to initialize the device [ 1407.624467][T18143] usb 6-1: ath9k_htc: USB layer deinitialized 17:46:43 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8"}) 17:46:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x320) 17:46:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:43 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x7, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x24f) 17:46:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001860400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x250) 17:46:43 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x8, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1408.167377][T27421] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x320) 17:46:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002860400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:43 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0xa, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1408.344485][T27438] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1408.473923][T18143] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1408.843939][T18143] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1409.003692][T18143] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1409.012857][T18143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.021014][T18143] usb 6-1: Product: syz [ 1409.025260][T18143] usb 6-1: Manufacturer: syz [ 1409.029859][T18143] usb 6-1: SerialNumber: syz [ 1409.085644][T18143] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1409.713699][T18143] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1410.334218][T18143] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 1410.340068][T18143] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1410.534584][T18144] usb 6-1: USB disconnect, device number 83 [ 1410.547243][T18143] ath9k_htc: Failed to initialize the device [ 1410.555844][T18144] usb 6-1: ath9k_htc: USB layer deinitialized 17:46:46 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8"}) 17:46:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x251) 17:46:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x320) 17:46:46 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003860400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:46 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x252) 17:46:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x320) [ 1411.088764][T27449] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000870400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:46 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1411.257882][T27462] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1411.363644][T12624] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1411.754055][T12624] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1411.934505][T12624] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1411.943861][T12624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.951862][T12624] usb 6-1: Product: syz [ 1411.956661][T12624] usb 6-1: Manufacturer: syz [ 1411.961276][T12624] usb 6-1: SerialNumber: syz [ 1412.004555][T12624] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1412.643684][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1413.253870][T25435] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 1413.259556][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1413.453902][T12624] usb 6-1: USB disconnect, device number 84 [ 1413.468270][T25435] ath9k_htc: Failed to initialize the device [ 1413.474951][T12624] usb 6-1: ath9k_htc: USB layer deinitialized 17:46:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x320) 17:46:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x253) 17:46:49 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001870400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:49 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8"}) 17:46:49 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x254) [ 1414.023333][T27472] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x320) 17:46:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x320) 17:46:49 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x255) 17:46:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002870400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x3, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x256) 17:46:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1414.231023][T27492] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1414.343627][T18143] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1414.703871][T18143] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1414.863799][T18143] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1414.872952][T18143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.881417][T18143] usb 6-1: Product: syz [ 1414.885756][T18143] usb 6-1: Manufacturer: syz [ 1414.890622][T18143] usb 6-1: SerialNumber: syz [ 1414.944530][T18143] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1415.523685][T18143] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1416.163789][T18143] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 1416.169473][T18143] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1416.362938][T25435] usb 6-1: USB disconnect, device number 85 [ 1416.366591][T18143] ath9k_htc: Failed to initialize the device [ 1416.377114][T25435] usb 6-1: ath9k_htc: USB layer deinitialized 17:46:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002820400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x6, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x257) 17:46:52 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x320) 17:46:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003870400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:52 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x6, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x258) [ 1416.916920][T27507] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x7, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900}]}, 0x320) [ 1416.961400][T27508] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 17:46:52 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x7, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x8, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900027e0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000880400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x320) 17:46:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x28, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:52 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x320) [ 1417.156509][T27525] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x300, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1417.208315][T27529] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 17:46:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x259) 17:46:52 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0xa, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001880400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003}]}, 0x320) 17:46:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x25a) 17:46:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x320) 17:46:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x600, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:52 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0xb, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x320) [ 1417.397432][T27546] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x700, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:53 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "049bdbab", {0x1, 0x2, 0x100, 0x1, 0x4}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:46:53 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0xe, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002880400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x25b) 17:46:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x320) 17:46:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1f00, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1417.560788][T27562] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803}]}, 0x320) 17:46:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003880400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:53 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x25c) 17:46:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2800, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x25d) [ 1417.716240][T27576] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1417.813708][T25435] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1418.183655][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1418.343943][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1418.353026][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.361474][T25435] usb 6-1: Product: syz [ 1418.368191][T25435] usb 6-1: Manufacturer: syz [ 1418.372787][T25435] usb 6-1: SerialNumber: syz [ 1418.424410][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1419.003866][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1420.014645][T12624] usb 6-1: USB disconnect, device number 86 17:46:56 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "049bdbab", {0x1, 0x2, 0x100, 0x1, 0x4}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:46:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x320) 17:46:56 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x34, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000890400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x25e) 17:46:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x3075, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x3f00, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:56 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1420.563277][T27592] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x25f) 17:46:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x320) 17:46:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001890400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1420.720878][T27604] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1420.844811][T25435] usb 6-1: Service connection timeout for: 258 [ 1420.851005][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1420.859438][T25435] ath9k_htc: Failed to initialize the device [ 1420.865878][T12624] usb 6-1: ath9k_htc: USB layer deinitialized [ 1421.263848][T12624] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1421.623906][T12624] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1421.793814][T12624] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1421.802930][T12624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.811467][T12624] usb 6-1: Product: syz [ 1421.815976][T12624] usb 6-1: Manufacturer: syz [ 1421.820585][T12624] usb 6-1: SerialNumber: syz [ 1421.874437][T12624] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1422.493720][T12624] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1422.754690][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.761006][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.129510][T25435] usb 6-1: USB disconnect, device number 87 17:46:59 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "049bdbab", {0x1, 0x2, 0x100, 0x1, 0x4}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:46:59 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x320) 17:46:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x260) 17:46:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x7530, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:46:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002890400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:59 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:46:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1423.680422][T27618] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:46:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x261) 17:46:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}]}, 0x320) 17:46:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003890400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:46:59 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1423.825328][T27630] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1423.963811][T12624] usb 6-1: Service connection timeout for: 257 [ 1423.970161][T12624] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1423.978543][T12624] ath9k_htc: Failed to initialize the device [ 1423.985036][T25435] usb 6-1: ath9k_htc: USB layer deinitialized [ 1424.363775][T25435] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1424.743785][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1424.916439][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1424.925817][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.934355][T25435] usb 6-1: Product: syz [ 1424.938626][T25435] usb 6-1: Manufacturer: syz [ 1424.943278][T25435] usb 6-1: SerialNumber: syz [ 1424.984670][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1425.603794][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1426.217192][T18143] usb 6-1: USB disconnect, device number 88 17:47:02 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x0, "bd2abe1b", {0x1, 0xffff, 0x0, 0x0, 0x7}}) 17:47:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}]}, 0x320) 17:47:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x262) 17:47:02 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900008a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}]}, 0x320) 17:47:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:02 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x3, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x263) [ 1426.767233][T27645] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1426.843795][T25435] usb 6-1: Service connection timeout for: 256 [ 1426.850314][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services 17:47:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900018a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x264) [ 1426.886941][T25435] ath9k_htc: Failed to initialize the device [ 1426.911292][T18143] usb 6-1: ath9k_htc: USB layer deinitialized [ 1426.955686][T27657] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1427.283611][T18143] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1427.643739][T18143] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1427.833646][T18143] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1427.842719][T18143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.851116][T18143] usb 6-1: Product: syz [ 1427.855363][T18143] usb 6-1: Manufacturer: syz [ 1427.859968][T18143] usb 6-1: SerialNumber: syz [ 1427.904548][T18143] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1428.493999][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1429.300764][T18143] usb 6-1: USB disconnect, device number 89 17:47:05 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x0, "bd2abe1b", {0x1, 0xffff, 0x0, 0x0, 0x7}}) 17:47:05 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x4, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x320) 17:47:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x265) 17:47:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900028a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x266) [ 1429.845868][T27668] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x6, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:05 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x6, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900038a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}]}, 0x320) 17:47:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x267) [ 1429.953847][T18144] usb 6-1: Service connection timeout for: 257 [ 1429.960516][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1429.977482][T27676] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1429.990732][T18144] ath9k_htc: Failed to initialize the device [ 1430.016265][T18143] usb 6-1: ath9k_htc: USB layer deinitialized [ 1430.413594][T18143] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1430.773839][T18143] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1430.934689][T18143] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1430.944058][T18143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.952124][T18143] usb 6-1: Product: syz [ 1430.956929][T18143] usb 6-1: Manufacturer: syz [ 1430.961608][T18143] usb 6-1: SerialNumber: syz [ 1431.014567][T18143] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1431.593895][T18143] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1432.833639][T18143] usb 6-1: Service connection timeout for: 256 [ 1432.839858][T18143] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services 17:47:08 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x0, "bd2abe1b", {0x1, 0xffff, 0x0, 0x0, 0x7}}) 17:47:08 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x7, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x7, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x268) 17:47:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}]}, 0x320) 17:47:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900008b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1433.023954][T18144] usb 6-1: USB disconnect, device number 90 [ 1433.037471][T18143] ath9k_htc: Failed to initialize the device [ 1433.044053][T18144] usb 6-1: ath9k_htc: USB layer deinitialized 17:47:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}]}, 0x320) 17:47:08 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x8, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x269) [ 1433.092093][T27692] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900018b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:08 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xa, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1433.241266][T27706] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1433.453618][T18144] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1433.813669][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1433.973830][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1433.983734][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.991869][T18144] usb 6-1: Product: syz [ 1433.996554][T18144] usb 6-1: Manufacturer: syz [ 1434.001238][T18144] usb 6-1: SerialNumber: syz [ 1434.055285][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1434.633656][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1435.258143][T18143] usb 6-1: USB disconnect, device number 91 17:47:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x28, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}]}, 0x320) 17:47:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x26a) 17:47:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900028b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:11 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xb, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:11 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="1101dbc3de6536088dee1adb23610000000109022d00010000000009040000f37a008d741b9b9e1f00020000000905050200de7e000009058b1e202edb223cb1d739267913de96126f755a44bd53b6aab628df2cccc452b474de695b56ab85b1ce9b63e0fb1d7635711d9acefb2c49e4260e271ff8e61ee32fe5006dc8738f81696cb45f3d833585c5d557bdc20aad9bd80cebf45cb7df74c55c9c7982b18add3d501c774cc4f5a749fd73ca037fb82c70ce8bb884fe047277491e6fc60f4aaa54fd2044448924f0363840bddc547d60cf90bdb36c2631a2b50d7066a91a98f90119c14fd041254ba67789eb959bd2c9384bc99f5498da4a99540923a7e4ee0636b3533b1f3492ee2e81dc1ae3a12e8da7afcdba0ca5b940b95fbecec97932fd3473b9664740ff2f9f69439f5cb3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x36, &(0x7f0000000080)=@generic={0x1, 0x2, 0x2e, "3c3b6dc6", "2c51c1d005d983b9b4813e17232d1f20753363e19071d4a0ce228c5319d636eb7e7eacf5c364e3d0e0ba0e26fbf1"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:47:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x26b) 17:47:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x300, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}]}, 0x320) 17:47:11 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xe, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1435.822054][T27719] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x26c) 17:47:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x600, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}]}, 0x320) 17:47:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900038b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:11 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x28, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}]}, 0x320) 17:47:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x26d) [ 1436.007611][T27737] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1436.113580][T18144] usb 6-1: Service connection timeout for: 257 [ 1436.122686][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1436.153648][T18144] ath9k_htc: Failed to initialize the device [ 1436.159835][T18143] usb 6-1: ath9k_htc: USB layer deinitialized [ 1436.523626][T18143] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1436.884117][T18143] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1437.043696][T18143] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1437.052806][T18143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.061523][T18143] usb 6-1: Product: syz [ 1437.066265][T18143] usb 6-1: Manufacturer: syz [ 1437.070877][T18143] usb 6-1: SerialNumber: syz [ 1437.124631][T18143] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1437.703848][T18143] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1438.311217][T27721] UDC core: couldn't find an available UDC or it's busy: -16 [ 1438.318895][T27721] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1438.530603][T18144] usb 6-1: USB disconnect, device number 92 17:47:14 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="1101dbc3de6536088dee1adb23610000000109022d00010000000009040000f37a008d741b9b9e1f00020000000905050200de7e000009058b1e202edb223cb1d739267913de96126f755a44bd53b6aab628df2cccc452b474de695b56ab85b1ce9b63e0fb1d7635711d9acefb2c49e4260e271ff8e61ee32fe5006dc8738f81696cb45f3d833585c5d557bdc20aad9bd80cebf45cb7df74c55c9c7982b18add3d501c774cc4f5a749fd73ca037fb82c70ce8bb884fe047277491e6fc60f4aaa54fd2044448924f0363840bddc547d60cf90bdb36c2631a2b50d7066a91a98f90119c14fd041254ba67789eb959bd2c9384bc99f5498da4a99540923a7e4ee0636b3533b1f3492ee2e81dc1ae3a12e8da7afcdba0ca5b940b95fbecec97932fd3473b9664740ff2f9f69439f5cb3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x36, &(0x7f0000000080)=@generic={0x1, 0x2, 0x2e, "3c3b6dc6", "2c51c1d005d983b9b4813e17232d1f20753363e19071d4a0ce228c5319d636eb7e7eacf5c364e3d0e0ba0e26fbf1"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x36, &(0x7f0000000080)=@generic={0x1, 0x2, 0x2e, "3c3b6dc6", "2c51c1d005d983b9b4813e17232d1f20753363e19071d4a0ce228c5319d636eb7e7eacf5c364e3d0e0ba0e26fbf1"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) (async) 17:47:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x700, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:14 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x34, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}]}, 0x320) 17:47:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x26e) 17:47:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900008c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x26f) 17:47:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1f00, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:14 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x60, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1439.071966][T27752] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19000000}]}, 0x320) 17:47:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900018c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:14 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xf0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1439.238322][T27768] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1439.394172][T18143] usb 6-1: Service connection timeout for: 258 [ 1439.400390][T18143] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1439.410827][T18143] ath9k_htc: Failed to initialize the device [ 1439.417177][T18144] usb 6-1: ath9k_htc: USB layer deinitialized [ 1439.793764][T18144] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1440.183675][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1440.374959][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1440.384316][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.392322][T18144] usb 6-1: Product: syz [ 1440.397154][T18144] usb 6-1: Manufacturer: syz [ 1440.401767][T18144] usb 6-1: SerialNumber: syz [ 1440.461319][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1441.113878][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1441.719476][T27757] UDC core: couldn't find an available UDC or it's busy: -16 [ 1441.727196][T27757] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:47:17 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x36, &(0x7f0000000080)=@generic={0x1, 0x2, 0x2e, "3c3b6dc6", "2c51c1d005d983b9b4813e17232d1f20753363e19071d4a0ce228c5319d636eb7e7eacf5c364e3d0e0ba0e26fbf1"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x36, &(0x7f0000000080)=@generic={0x1, 0x2, 0x2e, "3c3b6dc6", "2c51c1d005d983b9b4813e17232d1f20753363e19071d4a0ce228c5319d636eb7e7eacf5c364e3d0e0ba0e26fbf1"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) (async) 17:47:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x270) 17:47:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2800, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000000}]}, 0x320) 17:47:17 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x300, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900028c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1441.952880][T25435] usb 6-1: USB disconnect, device number 93 17:47:17 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x480, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3075, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x271) [ 1441.992193][T27784] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900038c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000000}]}, 0x320) 17:47:17 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x600, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1442.150849][T27798] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1442.833749][T18144] usb 6-1: Service connection timeout for: 258 [ 1442.840094][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1442.848514][T18144] ath9k_htc: Failed to initialize the device [ 1442.854969][T25435] usb 6-1: ath9k_htc: USB layer deinitialized [ 1443.263675][T25435] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1443.633890][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1443.793873][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1443.803133][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.811941][T25435] usb 6-1: Product: syz [ 1443.816589][T25435] usb 6-1: Manufacturer: syz [ 1443.821208][T25435] usb 6-1: SerialNumber: syz [ 1443.880279][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1444.453753][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1445.058094][T27790] UDC core: couldn't find an available UDC or it's busy: -16 [ 1445.065628][T27790] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:47:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x272) 17:47:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3f00, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20030000}]}, 0x320) 17:47:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900008d0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:20 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x700, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1445.277750][T27790] UDC core: couldn't find an available UDC or it's busy: -16 [ 1445.285447][T27790] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1445.305196][T12624] usb 6-1: USB disconnect, device number 94 17:47:20 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xa00, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x273) 17:47:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}]}, 0x320) 17:47:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1445.367363][T27817] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:20 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000813336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3fc, &(0x7f0000000840)={{0x12, 0x1, 0x300, 0xed, 0x84, 0x6, 0x10, 0x19d2, 0x176, 0x3fe2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ea, 0x2, 0x3f, 0x81, 0x48, 0x1, [{{0x9, 0x4, 0x3, 0x0, 0x1, 0xb4, 0x49, 0x59, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "7fa8"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001}, [@country_functional={0x12, 0x24, 0x7, 0x69, 0x6, [0x0, 0x1, 0x401, 0xfff8, 0x6, 0x8]}]}], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0x1, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x8}]}}]}}, {{0x9, 0x4, 0x1, 0x20, 0x7, 0x14, 0x40, 0xf1, 0x3e, [@generic={0x9b, 0x22, "c7604d7f64e1aa56ced3ad730fc8574b91f59610aaf440c79ad02afcfbb17dbaaf766e8e808c41c226bc9ca5a063a581980872c216010abe055512f87fcd295388c612a401c0b572c4e2aefcc0d4206cd7e780b5d881ebc140b8be27218696b6349b135812f3dc4b719fdfead164998074273bc6d2d3e897920b1d14bed644ecc221a08ad9845fd3867dab6b1452732a064256e477483726f0"}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x81, 0x1, 0x3}]}], [{{0x9, 0x5, 0x3, 0x10, 0x10, 0xff, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x20, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x0, 0x79, 0x6, [@generic={0xa0, 0x21, "cceea9af9615aa42f13a5150b8613c0c4084d06e403ba40c32ace8370f09667ab9ec156b8e073e7fa1a900a05a4326d591a0317f7a1afa6190eff1816a3db77c02433ab88182d5114ed83fa10c532124ae12a03a462f655a7f79fe5714aa79d9915b8d8be2d1953dfd8a9ba46cdf0f9cdc4caa99d5fe1ce69fe947c5fd983c6f3b7048f2671ebd917ee021a3347aeeff5ee7576ac85d8e50d19dc14e420a"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x0, 0x4, 0x81, [@generic={0xe8, 0x6, "e1ebf2a1d7d5db50d16a50d8c41af39dc96fd4321a2e35047369746900ea0b0e6cf70bc9f326f1b489bc85e917aabe23e378e358f5731f0a65297297247ea2d900300af96cee0786dd3580aec3668e83ca528f6088a1ceac0e44e35587f677b3e7003e57ceb0cb99a22c298aa760113512b08836d283559de6f0c3d5f76d3e13bfe02a63d20304a10f319628319e04fb6724e40e505582845ea197ed9d48b7355806e101e0008f577a2b7c11c320e76812e7ce4d098d31e29eee402505e7825ef34eb558db532fdf1fb77018865e4f133c30fe642c016c8e3eb4420f0c616fb53668422b0815"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x4, 0x40, 0x40, [@generic={0x2c, 0x2, "41f7d1497fea03489d7ec42c7eefa85177eb91c30a0751fe2f685eef0d73aba85c2054b2710be803c8e1"}, @generic={0x5, 0x5, "8a55d2"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x7f, 0x7f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x2}, @generic={0x28, 0x30, "ffeccb2cb38e51b1013c616af3a417bafab99346bcd6ae59f829a9883c05c7471ca5ed323c3f"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x0, 0x61, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0xa9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x3}]}}, {{0x9, 0x5, 0x1, 0x1, 0x20, 0x0, 0x0, 0x5, [@generic={0x50, 0x30, "da8cb58ae8b6b0ce6a83b9d361670759576ade64582f7fd904897312959398c2f5e5252f4cb062ed62d547b285b07aaa1dfed6a822ae47a1588be0c3bb5116f639c0e7acc380c33a6f5621654bf5"}, @generic={0x5f, 0x23, "c6dc92ac7035402b249b485251aaf4664c58026ae2f57748d188a627af6db7ea414ad106344ea33eeb899df291d1bb01af35dfedf3510ae80f007567cbe435453477439b873f5501ba03e1efa15d6f3d431e16cd7186d468693ce2e588"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x110, 0x2, 0x80, 0x34, 0xff, 0x3}, 0x19, &(0x7f0000000c80)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x36, 0x20, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3, 0xe0, 0xfff}]}, 0x3, [{0x90, &(0x7f0000000cc0)=@string={0x90, 0x3, "9bdb5bd30d78e4cd74e127c08369b2be5ae676f2b0e637c849892cea2c92653d8739556a29cb8962c4d767ca70d3218a419787dc465ac1fed3a4427fbf1527e3e6d015d77355f4a9795574b881502386d68f0e5dc45decf32d2788011549d48d66d326a254982f7bf5677da7dc5f1abc9fd30fd6debdb2b2736849ef874a22497e770f9efe4c870e57bafdd273f8"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x240a}}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x150, &(0x7f0000000e40)={[{0x8, 0x4e00, "451a0338ab5b9374"}, {0xb9, 0x4e00, "c267ff0b6d44016705b5b6c8a2e0722cbc951c79995c3f5ef70766256c30cf52187ca55cfac02c77d33afe3938c7af680a355524e2eccd40234af8ec9f7f4dcf8f7c6e59bd50c1b1d4f79a6e17bbcc354e38bb3416f2d73f4897ca5ae80c6fe33b46ad9c614ff1ee1b8ad22c1f03b111fbea8478a372ee00f96f741cc0d7131c42d6d971bfd59b6cf2f312210c1af7360d1b9839cfd1c92a8b68a5efb65b205e4b71e639d517820b0d09161cc53a60b7caf02cdb24332c6d21"}, {0x7e, 0x4e00, "b1bda466b678d3f1e2d9170b8294751396a6658e08869d5bb3724d879a416b6708c29dba4f5f23a9a874142392759a296b75ea564ef2f14d3246a4fb9e0ddd9a70e4142932a0fddc3b358a92e20d9409665c43aa55a7b5b909f47c4577cfd199eb0ed757b5c843d5727a5460204d9864d662b04ee52089037ac563fc0e5d"}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000800)=@conn_svc_rsp={0x0, 0x0, 0xa, "64f33c30", {0x3, 0x103, 0x0, 0x1f, 0x3ff, 0x81, 0x30}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_connect(0x0, 0x163, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x48, 0xa8, 0x8a, 0x40, 0x66b, 0x105, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x151, 0x1, 0x1, 0x7, 0x0, 0x3, [{{0x9, 0x4, 0xe5, 0x81, 0x1, 0x3f, 0x20, 0x49, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x2}, [@selector_unit={0x5, 0x24, 0x5, 0x2, 0x1f}]}, @uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x3, 0xd7, 0x2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0x92, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x58, 0x61, "9317", "61e9"}, @as_header={0x7, 0x24, 0x1, 0x80, 0x3, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0x6, "db", "d8a15b"}, @as_header={0x7, 0x24, 0x1, 0x81, 0xc1, 0x3}]}], [{{0x9, 0x5, 0x5, 0x10, 0x10, 0x7, 0x8, 0x3, [@generic={0xf2, 0x7, "1fa1df380eb823617199e56ffee5de2247cc12288a14e6426b2771918b7e241df735d84639209a14bc9dc076b3d90061427bfe5c57281fc29eb2ac05921844525c5fc513982a6ef4f25fd8ffe6bd6051f90a57d88946e83a82d21e1603419a22965a9c03114604abfaa963079cafba052583c7d26476179b2ae035ed5f50cd6d542c56b8c2130dc04c27ea75b3551fa29ba8cc7bf39e6a9e01f8766d4c6f9c99e930d8c6bfdc125974998cec12741d9452af5dfeab7a10a65688a3c6984d7bfcd0b8458f2eddb0c7ba28c903f8fd4b4d692753cb6f6d6061c64ce359b164fc2c452eb1e715eae633abcdd628a93909f7"}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x5, 0x8, 0x1, 0x10, 0x2}, 0x2f, &(0x7f0000000600)=ANY=[@ANYBLOB="050f2f00030a1003000700810800000c100a000000f0080014100402a8415db7dd160920fccbf85161ff03004a2a3b165680ca1ed845865ae3fa7435a30447dd09cba566121750a2f2c8a5ab8c1fcac972984498767a65288494c658dab73d84576b63b272967bfbb8fb7cbacc7e270fba7ce316198b948e68cc1fcb9f6ca878af1e01ed8ea2ce14d781dad274af88403cd49407f67e295c307a"], 0x1, [{0x9f, &(0x7f0000000480)=@string={0x9f, 0x3, "63aa4f79e82fe464fc40b028060377225decf2c1b5bba6e864ea2a3d1e2e2bac17ec5f8de5eac708d37161a3db2fff0200db0f6c7d480aceca7ec072eff0cc5d042523456e12dbd8f3434f1c5fb923036528688a3b077945b000dfcbdfffc8476506b496c782759cebf73442011c60c786dd507f5e2049e1baabbbf573264a0e3360e653970116a2e170cacb8a0a29308cc5fac476aa9ec5a802d5ae38"}}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x2008, &(0x7f0000001000)={[{0x1000, 0x4e00, "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"}, {0x1000, 0x4e00, "1df765c79b4b80385898417164e1a4958f477d962fdd06d2fe1b7677b3b7bbf9315db6a1beb4035f8118cd3a12b76012831645701ddb84bd984755c311dbf38b64335a1c69096e25012186673162013db5677b5e93b24c2a9384bef8854c95782fd7a2973cccc14cf67a2989fc7416ba29ab8b63bf9e4a4baa7a25871da4b8a45a7a85f5edc9c8116fc5267449e5e933beec8bcaa5d2d0959c252e7a0c5a36ae919beebae63999118c633c76b538cda6941488b02a13907ffc1325d10defedff63ce35e6a2d156b070178493ce6237a1e97bcb06fd71fced3dbf75ffc15f715af36430da137ed6a4f2f54fa541bc5076342e90e79437d3df5e25a06f8e04d2b46f5985ee5b709b754fb892ca5150fe025e40c45f9d6bba44b7b6018f0fd92b420e4a99b75a3906d9f7bf8ef48d40b102546d0201035104fd23a64acf26045e9ed0f7a8b937514ee58d455d995b900ca26a22b6f8fa0c4eb4be9b2884a9f0e796b8df064161ac5d94e7ea05962ac9e74a23d2babf83fd4891ed0146a8cc0ba32703daf1537dd50970941db179a4f8b1e1da28d0fb04457b6e99a6cdae9fa7d74efeb90e3706a991b593d801b988d79feb1ef0b87016104fbeb47faf28aef50b6d396c38b2c865f00523a0bef87aaa38ee10b98024d166f5e5ef88ffb319246766b975ba79f4326a5339f68afc65d3c32881f42d870c2383b00434c7727a4b9657b95ba553e7d5b25b6f62a05acca6c6743ab77cfceab7c8af5c4624275eb7493ced6178090fc6054e343630823ca3399d5dd3ffa345da2e089a281e138cc4b35fc20e790795b1fc43bfa0e06481562d338a6604d089cefa7167868d959e16f32999cfea51437b45a74c000d8c654e8576dd3676351f677e5caf5e62b84ee5c218a7da747874865ccaaabb3b58602c1d273d494a0f2f0293a2b8eae1c3549783151435453904736b7d90200efe10a1e58cb67a17a2ea52d3243a51d186061d4fcec3c088f53dd85c4538de09ab9dc5b03519c5cff85013b09b804928db9d324e936895ae6eee997864aa16fd499802572652443f604cc5c70678687197579b8255c46faf14c0a535101341ab7dab48f22a6b420ccf677854af6e9533ae49b9a52a42709e1ece416839c7e1d9f389955932b7b968767a0bb3420eaa36f2e1adfe2d018ead13221c7e20fde9cd5fd0dd3be78d53f50e3e69905a6960106e69530a9d8d0f54604025434929fa50dee59c1852695d2f88bcfebffc5d4d8f1c66909094c077eed06e2640761b3e53f0f8ffe81685aadc77c979847f71f48a625cbecaed1ee60282607de821e815833c536039ee38ca2d3f4652272a19b8a4b7eff8379d6cbcbc784e47e7ba0e40e8fb4fed6873a17d800bf386694a477e86d5b641ecb40f0a184cce5a8444b831c2ccd34e1429bc3890b3b36a08110a77c49cf0705156df617c4609dd7b5bdf7922f96ef687a0467ce0c5241063e990c26a5972b6b62c97a4f4d535577e78502c8eae5882a7b6e3c2956f85c32757c1c694f218f1fb12a772335da8e45fed3999a79bc6a4d57f222f15ba36a5cc8355c55b48ab6634f44332a7dde3f1c400bc09badc1430c74554090b3f1809d59f8f4e21af962ed905b4e2673e4ec14cf4338ecfccbf9f2dee67c01a33ab9d2eda9e3951dfb4ac5eab25ffb17129c6bd442051590cb88af1545322b68c505aee4fa775aa2252478ad3be231c71bb8bf9732a26440906756e14d4e3f1dbe0cda4961970f937e012060f4d16f6f5925050130583d7e702d46829fd5919474f62fd3d2f99f416645764285f017294261fe798311876d53dd5fd07d0f7036698dc01b5adb0ff2817bdc54a61ce721d9e81569cc7996e071e23ebcff1669d45e8e5f3fec178082be1a7150f4b92318309fd27d16dbf0f2df570174e57e7d37f2370ebd855aa30fe3748fa99efd144d6606bb6e0c4004207909d91a0374f020e5637a13296f0b80495ba5a0ab6f228da8180429c806942ab44ef6191bf1d58e14a02045b9f6980b179bdcd2f7c15d33c5029be2cc46b9921bdef93ecff1a0df0dab92026a431c0c35fc3277f64a883f7b293a4184af85490bf6a9af430edabd86f7b8856c1ba42aa9a96092e8cc2b460022043bfd56c60f136c9298bba298ec06e16cfc20890e533a5ccc2860fffdb79c53783e553b3d548779e469df38c41b9e64e490051d6d066cd747369c48c6f51ae809710f596ab4f167f3067c8e1da65a407cb9d1b4e6e25490ad7fbd90ab36ca06d29ac308345dc7af5d0d248db45e5ee120f3249325bff9d46c6f6afd32ddc5d9eccca5177a49ef5bee94016cf9768e6c35446a22e59b5bd46ca28452c243766d4b0f15f259e10863d703ecd4b62ae9da8d80462155c5a9c40010904f27b01c6aaf03df4460546564f3def5e91d009e21cac13f220b34488f1e3d61fa6f8f0e29fbadc305e0dd4f327087b8870e89b00873333676ba7eabf98704fd6972cfa9abc70bce49186024ac78471efa6f65ffd30fbe1f9274c149e95744e8a6b9bb7862c5af014629c9dbe972115a9c68c2cd4b4862a5afed52890027104c00ffefd45e0c1732796dfd6db3b89484db668501e5217b081eecd8c611c8f7e7dbed76cb5f51bd020f23571f9b134d454f35202ce9daa5945249aa933df1e2fd4bb6f6c04d5ab414bbf0898d59a4e97edb23ac6b95e53797a51a0bc5cbb094a0f88ed35ea3c601cdf113577d8a916bb8ee2710d1c59d2716a675080b89c4dbcd0fecf6cabc47a46c3724251cab38f59f0d7729e72b28245e824453c8f50e82cc1a268307498fc7013342743e21a921b2521b54e2883d250cce863a38f4e32bf6eb14a6a1b4323b39ca916ecda20292f6c2f7977fd9e170f256542ffc018f60187c2e34788bb5dbf4c9249090431827469985c7670a653fe21d425fc61e51685be2dbe3ebf78ccd123af8e94922af6a2f16ce86e78cd37832d6941796de56a150b01166a706112ec1de1e004558aa749a80b7e468385b723600626da3dbb3844d4306d17395183fd0c1b6d1247797d11bc157456ba4dd6fc171b26d60d480412245d04e946506f490f26a0b63c8d23d12ce9ed913cb5da7b6a4e367e82b0a4f0c5424f127a460503f4b043cb75896e959716e3bd7ebbf7c3791e72df9891aa3e2c1eb3cf3c3e7cd3bd8cc23bfa7890fffb580b4ef4c9df9f9e6deae58aac42d74749591b23d87431756bf9e9e0ff8cff0bd05fe712f44786c9f804b32cdc292d22e7304021eddb0b562bab994efd07559257cbc56335cf4fdf00d7d1fbe707a11a61883e162b83835d2fa819246a619ff5a6c8bfc5f2ac343cca994d2c037acd3a1e66832ae88a1c14b36c8b41f25759bc0161149b6c430b1469f67e9acad832b544c20572dd75cb85fda4e5725fd1e20b615c42cbc07cdefbe144fd14b97e3d21bb13b9377cc0fd93f6f20212979151c88cad223b5d01f038ddb202d2cb0ba18f0356a3865886fb6e9fbf3030b685f9e318441db024a04b278f5977ab93b942510782e79329fc428381b7477ae62898f167e46c2e90b8f7255d491ff704c2a088e98df58b54e5bfb1d4e5c38ea068d1bab9577675f649df99c6ebb1862dbb5dfeda3c0bac8c3a0bf80b4ace67bc351a049485a3f2a432c4309c673ae93729c8f8fb87405e60a5e3840744b9ec8d032dc2d0b0b0c1e87c506bc0d338685629cf504010e402e9a649dd53b6746e5533e6fcb396632242f7af8157b32da437f3df1c9f48e9cff92b909d5d72fab01c3e41ca12bb33abc5dc97a0abf905ca89e4900fc99f1cbb9891a08d8a75d7280b5b70a909298b876fffee67d47060e77cac9c53dff71e844e4a1ed219e1088c7915b4ad0e4ad9283e7be701957afdec68fb5a2a51307d6f3322ac6794a1a1f128a57658c55e3d346926145ea957c5907ef94df6f5502bbc9dd9c71dc61385ac1ad5ef89767bcaab65d0500de853677333902e1309cbd1bd7bf93e8fdd92603af4c35373e198bbc6a350b3296bebe26011fa6238b763c1e16f78ef50f3d762b37a372521034a7b0a3d0044506feccf662e654a771cecd3893619f2bc65aab437f55534a0b02723d84a706f42e106e350988255ce2df4b850fe4e4ddb2df0022bab8d8636e864ac1e9f480b90742f6ee2b7bd59a35350d15f2f4939c749c51d6f2c29da37d788650f67ccce6a27d8a2daa2d8958e108d5473118b14a1d460b1523fd6689eb4f3938bc7595e88c8987bd265accbf87013bcb79e0a01e4a57aed5cbe4a06bb8693fc3dec111e8dab92b55a6f66c6316b7f96b9f567b90b51ab695c21d0c2d9a4188c89be8d12a5d0c8e551b8bb64f3e019022231603eefcd18841ef92c744658277bf65dc621cee9543df4f337145bf5c92be5c3e6d435e1b265c989aaebc91d24915199669d4d9912cf66761abf0faff9d5d0f0fdb11936327a6fce001f03ce9261c9d315b3b9a71631e2f352530fddbbd4b01355697b8cb06d9f85b287ea53d1e65c83c27fea4268da3a55748581be28c30dc482cd12d52e1bfbe5e58029530312b9db80b5fa9a812d7398fb791a48bc8a4fb5b0aa21219b47f80d89d5492573af976bc10d6b540104e9451ef207e69ec38cb658f6bcfbc3489711a777ddb3a3bf829336aaaddeab4576414e5acf5ba34e94cf8c9fa80382bbc1b6df10d05bf60705b9e3ce8d7bb193e608bd23a1d1c29ddad4dd5f2c86d8555f676c69723dba42409e1962d46acb05ed195356c576d596af18092db66f8b46659a6990dab933fe950bd7457d8ca643e4c3d6a0e11a49e02f2b618464601fbfe93b65a4358a7aa43ba0400a9a6d9da6ad00fd1428cf9f4fdcc311a5904b085126a647c535a798827801c77fd4666f107f9ae7eb3e4d15b356d4721272c1a51b54717b9688cb3a33010d09d23cfea4954a60305c9c15278c48d3cd3c1aa54fb822c9cd9c2a426c95d5bf25f38b2805ebdf7b6357033dddc3ade5b99c3b5c572daf77cb55da6c93bd62d4c2e86beb69a600556a4aca2e8503eecccdfdf372fb1a719f1c863257c0b2b5619df7c680a65c5d994b6e205daf6a1891ce85a2ed2d04d3bc715bd794644d6533336528c402aaba0c3265d985fa71e04ba0fd084e5728c337200edd58731383c13697d94825e5b5cc609bfb5a50edf4fcc5e39629f60265b485b044f9a6d29fbd3e06542c457077a5a059854e8c9dd69cdf2fd8b3f1bc9fda74436c504b95aca3e4df8ee588fd445dbaa2bbffd37e455ed5fc6087cc39992986b00862df674cbc72c0ac85910c916f308a4581a00a23febf22086e7913644a80332a2e77f1605e8686e331d631ac751ddc79e5161ca82a28a17f3c96a57092024daad42439466f64a3dfa336918224fc4d140330a181e4a1d4be9a07658be5d5949ecd403ede6e81c798759f6fb36d1937ceeee21068660bbf1861c79e6ae66f9493930d46d5da9f3adaa4f1174af1af79427558f004bd2aef61ec0d9abb618310187d447c0417f54ddcb393ce6a1292ef6980a707e30f60de9b5b03e69c95dc31f6f26155a7d7cb525e48bddc0b23d72681079781a77c1d6a8d2c81a5d7e30f13963f90cd3beffeb39aa3b8ded6f23139ba42e6faadb6d19a4f192bee97aeed955ceffd68891da3538807cab0fc70c967cb51430e93ae41d620cb447b47f7136614bf26dcab6309598fa6152713615fa902c97e53b4710417d2ec82fcd7f33b528312678e1e6fa9fc08ef4d153f587d419bc0877a0eb982d76585bf8b02fdba85184e3631af8ab7ded3622f51c5bb4171"}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000fc0)=@conn_svc_rsp={0x0, 0x0, 0xa, "ae3830ef", {0x3, 0x102, 0x0, 0x7f, 0x6, 0x1, 0xfc}}) 17:47:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900018d0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x274) 17:47:21 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xb00, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, 0x320) 17:47:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x7530, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1445.500415][T27829] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x275) 17:47:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900028d0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b000000}]}, 0x320) 17:47:21 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xe00, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x276) [ 1445.665114][T27843] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1446.113792][T25435] usb 6-1: Service connection timeout for: 258 [ 1446.119996][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1446.129954][T25435] ath9k_htc: Failed to initialize the device [ 1446.136619][T12624] usb 6-1: ath9k_htc: USB layer deinitialized [ 1446.503683][T12624] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1446.873639][T12624] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1447.033891][T12624] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1447.042983][T12624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.051675][T12624] usb 6-1: Product: syz [ 1447.056229][T12624] usb 6-1: Manufacturer: syz [ 1447.060843][T12624] usb 6-1: SerialNumber: syz [ 1447.115501][T12624] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1447.743807][T12624] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1447.950497][T27823] UDC core: couldn't find an available UDC or it's busy: -16 [ 1447.958423][T27823] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1447.967678][T27823] UDC core: couldn't find an available UDC or it's busy: -16 [ 1447.977166][T27823] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1448.388343][T27823] UDC core: couldn't find an available UDC or it's busy: -16 [ 1448.396023][T27823] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1448.608936][T25435] usb 6-1: USB disconnect, device number 95 17:47:24 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) (async, rerun: 64) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000813336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) (rerun: 64) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) r2 = syz_usb_connect(0x0, 0x3fc, &(0x7f0000000840)={{0x12, 0x1, 0x300, 0xed, 0x84, 0x6, 0x10, 0x19d2, 0x176, 0x3fe2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ea, 0x2, 0x3f, 0x81, 0x48, 0x1, [{{0x9, 0x4, 0x3, 0x0, 0x1, 0xb4, 0x49, 0x59, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "7fa8"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001}, [@country_functional={0x12, 0x24, 0x7, 0x69, 0x6, [0x0, 0x1, 0x401, 0xfff8, 0x6, 0x8]}]}], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0x1, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x8}]}}]}}, {{0x9, 0x4, 0x1, 0x20, 0x7, 0x14, 0x40, 0xf1, 0x3e, [@generic={0x9b, 0x22, "c7604d7f64e1aa56ced3ad730fc8574b91f59610aaf440c79ad02afcfbb17dbaaf766e8e808c41c226bc9ca5a063a581980872c216010abe055512f87fcd295388c612a401c0b572c4e2aefcc0d4206cd7e780b5d881ebc140b8be27218696b6349b135812f3dc4b719fdfead164998074273bc6d2d3e897920b1d14bed644ecc221a08ad9845fd3867dab6b1452732a064256e477483726f0"}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x81, 0x1, 0x3}]}], [{{0x9, 0x5, 0x3, 0x10, 0x10, 0xff, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x20, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x0, 0x79, 0x6, [@generic={0xa0, 0x21, "cceea9af9615aa42f13a5150b8613c0c4084d06e403ba40c32ace8370f09667ab9ec156b8e073e7fa1a900a05a4326d591a0317f7a1afa6190eff1816a3db77c02433ab88182d5114ed83fa10c532124ae12a03a462f655a7f79fe5714aa79d9915b8d8be2d1953dfd8a9ba46cdf0f9cdc4caa99d5fe1ce69fe947c5fd983c6f3b7048f2671ebd917ee021a3347aeeff5ee7576ac85d8e50d19dc14e420a"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x0, 0x4, 0x81, [@generic={0xe8, 0x6, "e1ebf2a1d7d5db50d16a50d8c41af39dc96fd4321a2e35047369746900ea0b0e6cf70bc9f326f1b489bc85e917aabe23e378e358f5731f0a65297297247ea2d900300af96cee0786dd3580aec3668e83ca528f6088a1ceac0e44e35587f677b3e7003e57ceb0cb99a22c298aa760113512b08836d283559de6f0c3d5f76d3e13bfe02a63d20304a10f319628319e04fb6724e40e505582845ea197ed9d48b7355806e101e0008f577a2b7c11c320e76812e7ce4d098d31e29eee402505e7825ef34eb558db532fdf1fb77018865e4f133c30fe642c016c8e3eb4420f0c616fb53668422b0815"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x4, 0x40, 0x40, [@generic={0x2c, 0x2, "41f7d1497fea03489d7ec42c7eefa85177eb91c30a0751fe2f685eef0d73aba85c2054b2710be803c8e1"}, @generic={0x5, 0x5, "8a55d2"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x7f, 0x7f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x2}, @generic={0x28, 0x30, "ffeccb2cb38e51b1013c616af3a417bafab99346bcd6ae59f829a9883c05c7471ca5ed323c3f"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x0, 0x61, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0xa9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x3}]}}, {{0x9, 0x5, 0x1, 0x1, 0x20, 0x0, 0x0, 0x5, [@generic={0x50, 0x30, "da8cb58ae8b6b0ce6a83b9d361670759576ade64582f7fd904897312959398c2f5e5252f4cb062ed62d547b285b07aaa1dfed6a822ae47a1588be0c3bb5116f639c0e7acc380c33a6f5621654bf5"}, @generic={0x5f, 0x23, "c6dc92ac7035402b249b485251aaf4664c58026ae2f57748d188a627af6db7ea414ad106344ea33eeb899df291d1bb01af35dfedf3510ae80f007567cbe435453477439b873f5501ba03e1efa15d6f3d431e16cd7186d468693ce2e588"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x110, 0x2, 0x80, 0x34, 0xff, 0x3}, 0x19, &(0x7f0000000c80)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x36, 0x20, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3, 0xe0, 0xfff}]}, 0x3, [{0x90, &(0x7f0000000cc0)=@string={0x90, 0x3, "9bdb5bd30d78e4cd74e127c08369b2be5ae676f2b0e637c849892cea2c92653d8739556a29cb8962c4d767ca70d3218a419787dc465ac1fed3a4427fbf1527e3e6d015d77355f4a9795574b881502386d68f0e5dc45decf32d2788011549d48d66d326a254982f7bf5677da7dc5f1abc9fd30fd6debdb2b2736849ef874a22497e770f9efe4c870e57bafdd273f8"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x240a}}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x150, &(0x7f0000000e40)={[{0x8, 0x4e00, "451a0338ab5b9374"}, {0xb9, 0x4e00, "c267ff0b6d44016705b5b6c8a2e0722cbc951c79995c3f5ef70766256c30cf52187ca55cfac02c77d33afe3938c7af680a355524e2eccd40234af8ec9f7f4dcf8f7c6e59bd50c1b1d4f79a6e17bbcc354e38bb3416f2d73f4897ca5ae80c6fe33b46ad9c614ff1ee1b8ad22c1f03b111fbea8478a372ee00f96f741cc0d7131c42d6d971bfd59b6cf2f312210c1af7360d1b9839cfd1c92a8b68a5efb65b205e4b71e639d517820b0d09161cc53a60b7caf02cdb24332c6d21"}, {0x7e, 0x4e00, "b1bda466b678d3f1e2d9170b8294751396a6658e08869d5bb3724d879a416b6708c29dba4f5f23a9a874142392759a296b75ea564ef2f14d3246a4fb9e0ddd9a70e4142932a0fddc3b358a92e20d9409665c43aa55a7b5b909f47c4577cfd199eb0ed757b5c843d5727a5460204d9864d662b04ee52089037ac563fc0e5d"}]}) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000800)=@conn_svc_rsp={0x0, 0x0, 0xa, "64f33c30", {0x3, 0x103, 0x0, 0x1f, 0x3ff, 0x81, 0x30}}) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) (async) syz_usb_connect(0x0, 0x163, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x48, 0xa8, 0x8a, 0x40, 0x66b, 0x105, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x151, 0x1, 0x1, 0x7, 0x0, 0x3, [{{0x9, 0x4, 0xe5, 0x81, 0x1, 0x3f, 0x20, 0x49, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x2}, [@selector_unit={0x5, 0x24, 0x5, 0x2, 0x1f}]}, @uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x3, 0xd7, 0x2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0x92, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x58, 0x61, "9317", "61e9"}, @as_header={0x7, 0x24, 0x1, 0x80, 0x3, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0x6, "db", "d8a15b"}, @as_header={0x7, 0x24, 0x1, 0x81, 0xc1, 0x3}]}], [{{0x9, 0x5, 0x5, 0x10, 0x10, 0x7, 0x8, 0x3, [@generic={0xf2, 0x7, "1fa1df380eb823617199e56ffee5de2247cc12288a14e6426b2771918b7e241df735d84639209a14bc9dc076b3d90061427bfe5c57281fc29eb2ac05921844525c5fc513982a6ef4f25fd8ffe6bd6051f90a57d88946e83a82d21e1603419a22965a9c03114604abfaa963079cafba052583c7d26476179b2ae035ed5f50cd6d542c56b8c2130dc04c27ea75b3551fa29ba8cc7bf39e6a9e01f8766d4c6f9c99e930d8c6bfdc125974998cec12741d9452af5dfeab7a10a65688a3c6984d7bfcd0b8458f2eddb0c7ba28c903f8fd4b4d692753cb6f6d6061c64ce359b164fc2c452eb1e715eae633abcdd628a93909f7"}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x5, 0x8, 0x1, 0x10, 0x2}, 0x2f, &(0x7f0000000600)=ANY=[@ANYBLOB="050f2f00030a1003000700810800000c100a000000f0080014100402a8415db7dd160920fccbf85161ff03004a2a3b165680ca1ed845865ae3fa7435a30447dd09cba566121750a2f2c8a5ab8c1fcac972984498767a65288494c658dab73d84576b63b272967bfbb8fb7cbacc7e270fba7ce316198b948e68cc1fcb9f6ca878af1e01ed8ea2ce14d781dad274af88403cd49407f67e295c307a"], 0x1, [{0x9f, &(0x7f0000000480)=@string={0x9f, 0x3, "63aa4f79e82fe464fc40b028060377225decf2c1b5bba6e864ea2a3d1e2e2bac17ec5f8de5eac708d37161a3db2fff0200db0f6c7d480aceca7ec072eff0cc5d042523456e12dbd8f3434f1c5fb923036528688a3b077945b000dfcbdfffc8476506b496c782759cebf73442011c60c786dd507f5e2049e1baabbbf573264a0e3360e653970116a2e170cacb8a0a29308cc5fac476aa9ec5a802d5ae38"}}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x2008, &(0x7f0000001000)={[{0x1000, 0x4e00, "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"}, {0x1000, 0x4e00, "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"}]}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000fc0)=@conn_svc_rsp={0x0, 0x0, 0xa, "ae3830ef", {0x3, 0x102, 0x0, 0x7f, 0x6, 0x1, 0xfc}}) 17:47:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000}]}, 0x320) 17:47:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900038d0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:24 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x1f00, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x277) [ 1449.143984][T27857] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1449.178158][T27863] UDC core: couldn't find an available UDC or it's busy: -16 17:47:24 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x278) 17:47:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}]}, 0x320) [ 1449.193832][T27863] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1449.218206][T27863] UDC core: couldn't find an available UDC or it's busy: -16 17:47:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900008e0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:24 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x2800, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1449.260926][T27863] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1449.300594][T27863] UDC core: couldn't find an available UDC or it's busy: -16 [ 1449.316155][T27863] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1449.340376][T27873] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1449.340486][T27863] UDC core: couldn't find an available UDC or it's busy: -16 [ 1449.357775][T27863] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1449.371653][T27863] UDC core: couldn't find an available UDC or it's busy: -16 [ 1449.383978][T27863] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1449.473673][T12624] usb 6-1: Service connection timeout for: 258 [ 1449.480028][T12624] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1449.490705][T12624] ath9k_htc: Failed to initialize the device [ 1449.497533][T25435] usb 6-1: ath9k_htc: USB layer deinitialized [ 1449.863678][T25435] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1450.224443][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1450.383761][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1450.392863][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.401668][T25435] usb 6-1: Product: syz [ 1450.406298][T25435] usb 6-1: Manufacturer: syz [ 1450.410918][T25435] usb 6-1: SerialNumber: syz [ 1450.465264][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1451.043650][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1451.258642][ T20] usb 6-1: USB disconnect, device number 96 17:47:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x279) 17:47:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x320) 17:47:27 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x3075, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:27 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000813336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (rerun: 32) r2 = syz_usb_connect(0x0, 0x3fc, &(0x7f0000000840)={{0x12, 0x1, 0x300, 0xed, 0x84, 0x6, 0x10, 0x19d2, 0x176, 0x3fe2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ea, 0x2, 0x3f, 0x81, 0x48, 0x1, [{{0x9, 0x4, 0x3, 0x0, 0x1, 0xb4, 0x49, 0x59, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "7fa8"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001}, [@country_functional={0x12, 0x24, 0x7, 0x69, 0x6, [0x0, 0x1, 0x401, 0xfff8, 0x6, 0x8]}]}], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0x1, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x8}]}}]}}, {{0x9, 0x4, 0x1, 0x20, 0x7, 0x14, 0x40, 0xf1, 0x3e, [@generic={0x9b, 0x22, "c7604d7f64e1aa56ced3ad730fc8574b91f59610aaf440c79ad02afcfbb17dbaaf766e8e808c41c226bc9ca5a063a581980872c216010abe055512f87fcd295388c612a401c0b572c4e2aefcc0d4206cd7e780b5d881ebc140b8be27218696b6349b135812f3dc4b719fdfead164998074273bc6d2d3e897920b1d14bed644ecc221a08ad9845fd3867dab6b1452732a064256e477483726f0"}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x81, 0x1, 0x3}]}], [{{0x9, 0x5, 0x3, 0x10, 0x10, 0xff, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x20, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x0, 0x79, 0x6, [@generic={0xa0, 0x21, "cceea9af9615aa42f13a5150b8613c0c4084d06e403ba40c32ace8370f09667ab9ec156b8e073e7fa1a900a05a4326d591a0317f7a1afa6190eff1816a3db77c02433ab88182d5114ed83fa10c532124ae12a03a462f655a7f79fe5714aa79d9915b8d8be2d1953dfd8a9ba46cdf0f9cdc4caa99d5fe1ce69fe947c5fd983c6f3b7048f2671ebd917ee021a3347aeeff5ee7576ac85d8e50d19dc14e420a"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x0, 0x4, 0x81, [@generic={0xe8, 0x6, "e1ebf2a1d7d5db50d16a50d8c41af39dc96fd4321a2e35047369746900ea0b0e6cf70bc9f326f1b489bc85e917aabe23e378e358f5731f0a65297297247ea2d900300af96cee0786dd3580aec3668e83ca528f6088a1ceac0e44e35587f677b3e7003e57ceb0cb99a22c298aa760113512b08836d283559de6f0c3d5f76d3e13bfe02a63d20304a10f319628319e04fb6724e40e505582845ea197ed9d48b7355806e101e0008f577a2b7c11c320e76812e7ce4d098d31e29eee402505e7825ef34eb558db532fdf1fb77018865e4f133c30fe642c016c8e3eb4420f0c616fb53668422b0815"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x4, 0x40, 0x40, [@generic={0x2c, 0x2, "41f7d1497fea03489d7ec42c7eefa85177eb91c30a0751fe2f685eef0d73aba85c2054b2710be803c8e1"}, @generic={0x5, 0x5, "8a55d2"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x7f, 0x7f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x2}, @generic={0x28, 0x30, "ffeccb2cb38e51b1013c616af3a417bafab99346bcd6ae59f829a9883c05c7471ca5ed323c3f"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x0, 0x61, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0xa9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x3}]}}, {{0x9, 0x5, 0x1, 0x1, 0x20, 0x0, 0x0, 0x5, [@generic={0x50, 0x30, "da8cb58ae8b6b0ce6a83b9d361670759576ade64582f7fd904897312959398c2f5e5252f4cb062ed62d547b285b07aaa1dfed6a822ae47a1588be0c3bb5116f639c0e7acc380c33a6f5621654bf5"}, @generic={0x5f, 0x23, "c6dc92ac7035402b249b485251aaf4664c58026ae2f57748d188a627af6db7ea414ad106344ea33eeb899df291d1bb01af35dfedf3510ae80f007567cbe435453477439b873f5501ba03e1efa15d6f3d431e16cd7186d468693ce2e588"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x110, 0x2, 0x80, 0x34, 0xff, 0x3}, 0x19, &(0x7f0000000c80)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x36, 0x20, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3, 0xe0, 0xfff}]}, 0x3, [{0x90, &(0x7f0000000cc0)=@string={0x90, 0x3, "9bdb5bd30d78e4cd74e127c08369b2be5ae676f2b0e637c849892cea2c92653d8739556a29cb8962c4d767ca70d3218a419787dc465ac1fed3a4427fbf1527e3e6d015d77355f4a9795574b881502386d68f0e5dc45decf32d2788011549d48d66d326a254982f7bf5677da7dc5f1abc9fd30fd6debdb2b2736849ef874a22497e770f9efe4c870e57bafdd273f8"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x240a}}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x150, &(0x7f0000000e40)={[{0x8, 0x4e00, "451a0338ab5b9374"}, {0xb9, 0x4e00, "c267ff0b6d44016705b5b6c8a2e0722cbc951c79995c3f5ef70766256c30cf52187ca55cfac02c77d33afe3938c7af680a355524e2eccd40234af8ec9f7f4dcf8f7c6e59bd50c1b1d4f79a6e17bbcc354e38bb3416f2d73f4897ca5ae80c6fe33b46ad9c614ff1ee1b8ad22c1f03b111fbea8478a372ee00f96f741cc0d7131c42d6d971bfd59b6cf2f312210c1af7360d1b9839cfd1c92a8b68a5efb65b205e4b71e639d517820b0d09161cc53a60b7caf02cdb24332c6d21"}, {0x7e, 0x4e00, "b1bda466b678d3f1e2d9170b8294751396a6658e08869d5bb3724d879a416b6708c29dba4f5f23a9a874142392759a296b75ea564ef2f14d3246a4fb9e0ddd9a70e4142932a0fddc3b358a92e20d9409665c43aa55a7b5b909f47c4577cfd199eb0ed757b5c843d5727a5460204d9864d662b04ee52089037ac563fc0e5d"}]}) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000800)=@conn_svc_rsp={0x0, 0x0, 0xa, "64f33c30", {0x3, 0x103, 0x0, 0x1f, 0x3ff, 0x81, 0x30}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) (async) syz_usb_connect(0x0, 0x163, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x48, 0xa8, 0x8a, 0x40, 0x66b, 0x105, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x151, 0x1, 0x1, 0x7, 0x0, 0x3, [{{0x9, 0x4, 0xe5, 0x81, 0x1, 0x3f, 0x20, 0x49, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x2}, [@selector_unit={0x5, 0x24, 0x5, 0x2, 0x1f}]}, @uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x3, 0xd7, 0x2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0x92, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x58, 0x61, "9317", "61e9"}, @as_header={0x7, 0x24, 0x1, 0x80, 0x3, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0x6, "db", "d8a15b"}, @as_header={0x7, 0x24, 0x1, 0x81, 0xc1, 0x3}]}], [{{0x9, 0x5, 0x5, 0x10, 0x10, 0x7, 0x8, 0x3, [@generic={0xf2, 0x7, "1fa1df380eb823617199e56ffee5de2247cc12288a14e6426b2771918b7e241df735d84639209a14bc9dc076b3d90061427bfe5c57281fc29eb2ac05921844525c5fc513982a6ef4f25fd8ffe6bd6051f90a57d88946e83a82d21e1603419a22965a9c03114604abfaa963079cafba052583c7d26476179b2ae035ed5f50cd6d542c56b8c2130dc04c27ea75b3551fa29ba8cc7bf39e6a9e01f8766d4c6f9c99e930d8c6bfdc125974998cec12741d9452af5dfeab7a10a65688a3c6984d7bfcd0b8458f2eddb0c7ba28c903f8fd4b4d692753cb6f6d6061c64ce359b164fc2c452eb1e715eae633abcdd628a93909f7"}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x5, 0x8, 0x1, 0x10, 0x2}, 0x2f, &(0x7f0000000600)=ANY=[@ANYBLOB="050f2f00030a1003000700810800000c100a000000f0080014100402a8415db7dd160920fccbf85161ff03004a2a3b165680ca1ed845865ae3fa7435a30447dd09cba566121750a2f2c8a5ab8c1fcac972984498767a65288494c658dab73d84576b63b272967bfbb8fb7cbacc7e270fba7ce316198b948e68cc1fcb9f6ca878af1e01ed8ea2ce14d781dad274af88403cd49407f67e295c307a"], 0x1, [{0x9f, &(0x7f0000000480)=@string={0x9f, 0x3, "63aa4f79e82fe464fc40b028060377225decf2c1b5bba6e864ea2a3d1e2e2bac17ec5f8de5eac708d37161a3db2fff0200db0f6c7d480aceca7ec072eff0cc5d042523456e12dbd8f3434f1c5fb923036528688a3b077945b000dfcbdfffc8476506b496c782759cebf73442011c60c786dd507f5e2049e1baabbbf573264a0e3360e653970116a2e170cacb8a0a29308cc5fac476aa9ec5a802d5ae38"}}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x2008, &(0x7f0000001000)={[{0x1000, 0x4e00, "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"}, {0x1000, 0x4e00, "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"}]}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000fc0)=@conn_svc_rsp={0x0, 0x0, 0xa, "ae3830ef", {0x3, 0x102, 0x0, 0x7f, 0x6, 0x1, 0xfc}}) 17:47:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900018e0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1451.814592][T27886] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1451.828122][T27891] UDC core: couldn't find an available UDC or it's busy: -16 17:47:27 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x3400, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x27a) 17:47:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x6, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180000000000000}]}, 0x320) [ 1451.859820][T27891] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:47:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900028e0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:27 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x3f00, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1451.914944][T27891] UDC core: couldn't find an available UDC or it's busy: -16 [ 1451.943781][T27891] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:47:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x27b) 17:47:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x7, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1451.968738][T27904] UDC core: couldn't find an available UDC or it's busy: -16 [ 1451.968762][T27904] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:47:27 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x3fff, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1452.026282][T27907] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1452.113620][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1452.120626][T25435] ath9k_htc: Failed to initialize the device [ 1452.144295][ T20] usb 6-1: ath9k_htc: USB layer deinitialized [ 1452.533573][ T20] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1452.943675][ T20] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1453.133751][ T20] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1453.142829][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.151314][ T20] usb 6-1: Product: syz [ 1453.155881][ T20] usb 6-1: Manufacturer: syz [ 1453.160491][ T20] usb 6-1: SerialNumber: syz [ 1453.225106][ T20] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1453.853702][ T20] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1454.058304][T18144] usb 6-1: USB disconnect, device number 97 17:47:30 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xe6, &(0x7f0000000340)=@generic={0x1, 0x0, 0xde, "7edc5fa2", "5e5f47817287be67b22a3a9bc4753f208827df2348ef7c97909cec325486b0371232a3968248f7c12513d659b9e0c944323d2a939e341a6165dd0eb6880d29c9ba96c0358ea8e56b8f393538791bc3e906e65b9c76972940db510283c930a15f823a5b16533ba8a214f8f3cb60e83b43c2840b139e30fbe8d8456d98eb763e2d85c55f39a733c15f0de0480de2c833a1ac274a80764728f1e650bf1aca9146f4114e842557082dd4d7e889ba8378569afaa071d9490e999bbf2d9504bd38c83d6762748af4fbeff2361e746b2cebb0057a4f3ff1ce74a9e096901f759c8b"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d00010000000009040000000000010009058d1f00020000000905050200de7e000009058b1e203c62746d622522036bb851d6ccaa97ada9be672b2c901f6f07d86a58544ee03f303210ecdbf50669effcfae26e878182d1d1e71e0d31570f46dc350decd9556779ec35247ef93dbc67fb23f0f41b9979365a9290112855a55c313db4c61e8c9c83eddf70622daa283ad4e0d6058ab3b1dcb106159b"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x61, &(0x7f0000000100)=@generic={0x4, 0x2, 0x59, "77ac4aa5", "cdf485fbb851ebba9b3101f781c7f9b9e0ac31e6166849c4d0f7e9d1a8cb3050a750ae4cdf2a0e03c68160ddfdf2c8bc9d81246c166db8f6b4976c7cee4288fd973569153bf75ef1d95b2e161b590fb68361fc7c172d9f1cfe"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xf5, &(0x7f0000000240)=@generic={0x3, 0x2, 0xed, "e9bfd8ce", "98c4472a335d698007265f41b86180e703fc8fa55c7ae7755d6d408c4c90997d7fafbbe554fcb5dae2452f90d73cb10a48e89891b17118dbed0602f2cb7c16f6010e922d556abbe44eaae274ffe0bbf849e9efacdcf2654e003a7c7e0a306482200d617124e3cbd1b59502663cbb20e85198b4a05cfc788a93e10d8163b40188a5cbf94d5f2bf7985192fc5be9c75a9295f7525690adedf36b0a83d429e63fc50885a47a27d43780792e5cf69151fa33870007b9595a2f6eadc04d4d76939c46ef6ca021b7bae799338ecd4319da38565c832990572ce2f72fdad47dc3bd391b1be847f7aa9e299132567ecdc2"}) 17:47:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x320) 17:47:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900038e0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x27c) 17:47:30 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x4000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x28, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:30 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x6000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x27d) [ 1454.605955][T27923] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}]}, 0x320) 17:47:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900008f0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:30 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x7530, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1454.737657][T27936] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1454.913875][ T20] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1454.921005][ T20] ath9k_htc: Failed to initialize the device [ 1454.927846][T18144] usb 6-1: ath9k_htc: USB layer deinitialized [ 1455.323739][T18144] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1455.703633][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1455.873811][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1455.883647][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.891657][T18144] usb 6-1: Product: syz [ 1455.896662][T18144] usb 6-1: Manufacturer: syz [ 1455.901274][T18144] usb 6-1: SerialNumber: syz [ 1455.956613][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1456.573608][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1457.397689][T27926] UDC core: couldn't find an available UDC or it's busy: -16 [ 1457.405491][T27926] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1457.630007][ T20] usb 6-1: USB disconnect, device number 98 [ 1457.873669][T18144] usb 6-1: Service connection timeout for: 256 [ 1457.879869][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1457.889259][T18144] ath9k_htc: Failed to initialize the device [ 1457.895859][ T20] usb 6-1: ath9k_htc: USB layer deinitialized 17:47:33 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xe6, &(0x7f0000000340)=@generic={0x1, 0x0, 0xde, "7edc5fa2", "5e5f47817287be67b22a3a9bc4753f208827df2348ef7c97909cec325486b0371232a3968248f7c12513d659b9e0c944323d2a939e341a6165dd0eb6880d29c9ba96c0358ea8e56b8f393538791bc3e906e65b9c76972940db510283c930a15f823a5b16533ba8a214f8f3cb60e83b43c2840b139e30fbe8d8456d98eb763e2d85c55f39a733c15f0de0480de2c833a1ac274a80764728f1e650bf1aca9146f4114e842557082dd4d7e889ba8378569afaa071d9490e999bbf2d9504bd38c83d6762748af4fbeff2361e746b2cebb0057a4f3ff1ce74a9e096901f759c8b"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d00010000000009040000000000010009058d1f00020000000905050200de7e000009058b1e203c62746d622522036bb851d6ccaa97ada9be672b2c901f6f07d86a58544ee03f303210ecdbf50669effcfae26e878182d1d1e71e0d31570f46dc350decd9556779ec35247ef93dbc67fb23f0f41b9979365a9290112855a55c313db4c61e8c9c83eddf70622daa283ad4e0d6058ab3b1dcb106159b"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x61, &(0x7f0000000100)=@generic={0x4, 0x2, 0x59, "77ac4aa5", "cdf485fbb851ebba9b3101f781c7f9b9e0ac31e6166849c4d0f7e9d1a8cb3050a750ae4cdf2a0e03c68160ddfdf2c8bc9d81246c166db8f6b4976c7cee4288fd973569153bf75ef1d95b2e161b590fb68361fc7c172d9f1cfe"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xf5, &(0x7f0000000240)=@generic={0x3, 0x2, 0xed, "e9bfd8ce", "98c4472a335d698007265f41b86180e703fc8fa55c7ae7755d6d408c4c90997d7fafbbe554fcb5dae2452f90d73cb10a48e89891b17118dbed0602f2cb7c16f6010e922d556abbe44eaae274ffe0bbf849e9efacdcf2654e003a7c7e0a306482200d617124e3cbd1b59502663cbb20e85198b4a05cfc788a93e10d8163b40188a5cbf94d5f2bf7985192fc5be9c75a9295f7525690adedf36b0a83d429e63fc50885a47a27d43780792e5cf69151fa33870007b9595a2f6eadc04d4d76939c46ef6ca021b7bae799338ecd4319da38565c832990572ce2f72fdad47dc3bd391b1be847f7aa9e299132567ecdc2"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xe6, &(0x7f0000000340)=@generic={0x1, 0x0, 0xde, "7edc5fa2", "5e5f47817287be67b22a3a9bc4753f208827df2348ef7c97909cec325486b0371232a3968248f7c12513d659b9e0c944323d2a939e341a6165dd0eb6880d29c9ba96c0358ea8e56b8f393538791bc3e906e65b9c76972940db510283c930a15f823a5b16533ba8a214f8f3cb60e83b43c2840b139e30fbe8d8456d98eb763e2d85c55f39a733c15f0de0480de2c833a1ac274a80764728f1e650bf1aca9146f4114e842557082dd4d7e889ba8378569afaa071d9490e999bbf2d9504bd38c83d6762748af4fbeff2361e746b2cebb0057a4f3ff1ce74a9e096901f759c8b"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d00010000000009040000000000010009058d1f00020000000905050200de7e000009058b1e203c62746d622522036bb851d6ccaa97ada9be672b2c901f6f07d86a58544ee03f303210ecdbf50669effcfae26e878182d1d1e71e0d31570f46dc350decd9556779ec35247ef93dbc67fb23f0f41b9979365a9290112855a55c313db4c61e8c9c83eddf70622daa283ad4e0d6058ab3b1dcb106159b"], 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x61, &(0x7f0000000100)=@generic={0x4, 0x2, 0x59, "77ac4aa5", "cdf485fbb851ebba9b3101f781c7f9b9e0ac31e6166849c4d0f7e9d1a8cb3050a750ae4cdf2a0e03c68160ddfdf2c8bc9d81246c166db8f6b4976c7cee4288fd973569153bf75ef1d95b2e161b590fb68361fc7c172d9f1cfe"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xf5, &(0x7f0000000240)=@generic={0x3, 0x2, 0xed, "e9bfd8ce", "98c4472a335d698007265f41b86180e703fc8fa55c7ae7755d6d408c4c90997d7fafbbe554fcb5dae2452f90d73cb10a48e89891b17118dbed0602f2cb7c16f6010e922d556abbe44eaae274ffe0bbf849e9efacdcf2654e003a7c7e0a306482200d617124e3cbd1b59502663cbb20e85198b4a05cfc788a93e10d8163b40188a5cbf94d5f2bf7985192fc5be9c75a9295f7525690adedf36b0a83d429e63fc50885a47a27d43780792e5cf69151fa33870007b9595a2f6eadc04d4d76939c46ef6ca021b7bae799338ecd4319da38565c832990572ce2f72fdad47dc3bd391b1be847f7aa9e299132567ecdc2"}) (async) 17:47:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}]}, 0x320) 17:47:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x27e) 17:47:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900018f0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:33 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x8004, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x3, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:33 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xf000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1458.165123][T27945] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}]}, 0x320) 17:47:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x27f) 17:47:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900028f0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1458.330141][T27961] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1458.485914][ T20] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1458.853714][ T20] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1459.013663][ T20] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1459.023028][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.031519][ T20] usb 6-1: Product: syz [ 1459.036085][ T20] usb 6-1: Manufacturer: syz [ 1459.040790][ T20] usb 6-1: SerialNumber: syz [ 1459.095277][ T20] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1459.663624][ T20] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1460.487146][T27950] UDC core: couldn't find an available UDC or it's busy: -16 [ 1460.495082][T27950] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:47:36 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xe6, &(0x7f0000000340)=@generic={0x1, 0x0, 0xde, "7edc5fa2", "5e5f47817287be67b22a3a9bc4753f208827df2348ef7c97909cec325486b0371232a3968248f7c12513d659b9e0c944323d2a939e341a6165dd0eb6880d29c9ba96c0358ea8e56b8f393538791bc3e906e65b9c76972940db510283c930a15f823a5b16533ba8a214f8f3cb60e83b43c2840b139e30fbe8d8456d98eb763e2d85c55f39a733c15f0de0480de2c833a1ac274a80764728f1e650bf1aca9146f4114e842557082dd4d7e889ba8378569afaa071d9490e999bbf2d9504bd38c83d6762748af4fbeff2361e746b2cebb0057a4f3ff1ce74a9e096901f759c8b"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d00010000000009040000000000010009058d1f00020000000905050200de7e000009058b1e203c62746d622522036bb851d6ccaa97ada9be672b2c901f6f07d86a58544ee03f303210ecdbf50669effcfae26e878182d1d1e71e0d31570f46dc350decd9556779ec35247ef93dbc67fb23f0f41b9979365a9290112855a55c313db4c61e8c9c83eddf70622daa283ad4e0d6058ab3b1dcb106159b"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x61, &(0x7f0000000100)=@generic={0x4, 0x2, 0x59, "77ac4aa5", "cdf485fbb851ebba9b3101f781c7f9b9e0ac31e6166849c4d0f7e9d1a8cb3050a750ae4cdf2a0e03c68160ddfdf2c8bc9d81246c166db8f6b4976c7cee4288fd973569153bf75ef1d95b2e161b590fb68361fc7c172d9f1cfe"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xf5, &(0x7f0000000240)=@generic={0x3, 0x2, 0xed, "e9bfd8ce", "98c4472a335d698007265f41b86180e703fc8fa55c7ae7755d6d408c4c90997d7fafbbe554fcb5dae2452f90d73cb10a48e89891b17118dbed0602f2cb7c16f6010e922d556abbe44eaae274ffe0bbf849e9efacdcf2654e003a7c7e0a306482200d617124e3cbd1b59502663cbb20e85198b4a05cfc788a93e10d8163b40188a5cbf94d5f2bf7985192fc5be9c75a9295f7525690adedf36b0a83d429e63fc50885a47a27d43780792e5cf69151fa33870007b9595a2f6eadc04d4d76939c46ef6ca021b7bae799338ecd4319da38565c832990572ce2f72fdad47dc3bd391b1be847f7aa9e299132567ecdc2"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xe6, &(0x7f0000000340)=@generic={0x1, 0x0, 0xde, "7edc5fa2", "5e5f47817287be67b22a3a9bc4753f208827df2348ef7c97909cec325486b0371232a3968248f7c12513d659b9e0c944323d2a939e341a6165dd0eb6880d29c9ba96c0358ea8e56b8f393538791bc3e906e65b9c76972940db510283c930a15f823a5b16533ba8a214f8f3cb60e83b43c2840b139e30fbe8d8456d98eb763e2d85c55f39a733c15f0de0480de2c833a1ac274a80764728f1e650bf1aca9146f4114e842557082dd4d7e889ba8378569afaa071d9490e999bbf2d9504bd38c83d6762748af4fbeff2361e746b2cebb0057a4f3ff1ce74a9e096901f759c8b"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d00010000000009040000000000010009058d1f00020000000905050200de7e000009058b1e203c62746d622522036bb851d6ccaa97ada9be672b2c901f6f07d86a58544ee03f303210ecdbf50669effcfae26e878182d1d1e71e0d31570f46dc350decd9556779ec35247ef93dbc67fb23f0f41b9979365a9290112855a55c313db4c61e8c9c83eddf70622daa283ad4e0d6058ab3b1dcb106159b"], 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x61, &(0x7f0000000100)=@generic={0x4, 0x2, 0x59, "77ac4aa5", "cdf485fbb851ebba9b3101f781c7f9b9e0ac31e6166849c4d0f7e9d1a8cb3050a750ae4cdf2a0e03c68160ddfdf2c8bc9d81246c166db8f6b4976c7cee4288fd973569153bf75ef1d95b2e161b590fb68361fc7c172d9f1cfe"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xf5, &(0x7f0000000240)=@generic={0x3, 0x2, 0xed, "e9bfd8ce", "98c4472a335d698007265f41b86180e703fc8fa55c7ae7755d6d408c4c90997d7fafbbe554fcb5dae2452f90d73cb10a48e89891b17118dbed0602f2cb7c16f6010e922d556abbe44eaae274ffe0bbf849e9efacdcf2654e003a7c7e0a306482200d617124e3cbd1b59502663cbb20e85198b4a05cfc788a93e10d8163b40188a5cbf94d5f2bf7985192fc5be9c75a9295f7525690adedf36b0a83d429e63fc50885a47a27d43780792e5cf69151fa33870007b9595a2f6eadc04d4d76939c46ef6ca021b7bae799338ecd4319da38565c832990572ce2f72fdad47dc3bd391b1be847f7aa9e299132567ecdc2"}) (async) 17:47:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x280) 17:47:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x320) 17:47:36 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xff3f, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900038f0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1460.709203][T27950] UDC core: couldn't find an available UDC or it's busy: -16 [ 1460.716866][T27966] UDC core: couldn't find an available UDC or it's busy: -16 [ 1460.716890][T27966] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1460.732129][T27950] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1460.753190][T18144] usb 6-1: USB disconnect, device number 99 17:47:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x281) 17:47:36 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xffff, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x8, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1460.807849][T27977] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x320) 17:47:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000900400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xa, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1460.913698][ T20] usb 6-1: Service connection timeout for: 256 [ 1460.921167][ T20] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1460.943632][T27988] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1460.952957][ T20] ath9k_htc: Failed to initialize the device [ 1460.974333][T18144] usb 6-1: ath9k_htc: USB layer deinitialized [ 1461.333697][T18144] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1461.703631][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1461.865173][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1461.874624][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.882754][T18144] usb 6-1: Product: syz [ 1461.887591][T18144] usb 6-1: Manufacturer: syz [ 1461.892287][T18144] usb 6-1: SerialNumber: syz [ 1461.934418][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1462.513666][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1463.339082][T27980] UDC core: couldn't find an available UDC or it's busy: -16 [ 1463.346745][T27980] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:47:39 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x282) 17:47:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x320) 17:47:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001900400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1463.577431][T27980] UDC core: couldn't find an available UDC or it's busy: -16 [ 1463.585895][T27980] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1463.610400][T25435] usb 6-1: USB disconnect, device number 100 17:47:39 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x59, &(0x7f0000000240)=@generic={0x8, 0x0, 0x51, "8aa7b2fc", "329dbaf689fd341424c603ecbcadc8b6c6366a287db0259448269aa3e085df39355fc4ee355383500e6d64e601b9a4624da9c686fcc7a3423f0839726004a8807aa87f4f225e3e888ab4d3761f3128e4f4"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xe6, &(0x7f00000002c0)=@generic={0x1, 0x0, 0xde, "2e69e20c", "3271d6aedd57fe3d3b7a3f63d4e47f77f6ef16d46a4e4d953528b26d6e734f5b032ed81454a744c7c3b0d6890becfb74b7a0930694a72c2c5d46df14dbe5e51ed57697334d0dad743602c36fa72e74d465650cd7f2f53de0129c6140fdfb0a8bc9a13b3120a709ac33750d03b5bd916cad12ce3480b12b0c3af00206b1123dd895d20187c200e78fc63ef90d96c2e5f6de95fa8a8d2f888dac04017a96534c635fa30d29e8770c54564104e991977b44b2199aba749be6a7af533dce99f52c9d1966cddf2e8dfe1a4a7aaf7c3d2d0a19c8d941e515c230df7f742b4b6718"}) syz_usb_control_io$hid(r1, &(0x7f0000000540)={0x24, &(0x7f0000000480)={0x40, 0xd, 0x4a, {0x4a, 0x21, "e6bb63658a8207ce2da6c1ff71dfac42544b46a1a969dc197d72b3f4db7af101dd7fc7e0efa2ce0f59d3fc16608c16d3ab6858fd113ad87345165e81203050dcc2da40e462299156"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}, &(0x7f00000003c0)={0x0, 0x22, 0x13, {[@main=@item_4={0x3, 0x0, 0xa, "36d4296c"}, @main=@item_012={0x2, 0x0, 0xb, 'L>'}, @local=@item_012={0x0, 0x2, 0x3}, @global=@item_012={0x1, 0x1, 0x5, 'W'}, @global=@item_012={0x0, 0x1, 0xf}, @global=@item_4={0x3, 0x1, 0x6, "75a673c0"}, @global=@item_012={0x1, 0x1, 0x5, 'k'}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x30e0, 0x0, 0x1, {0x22, 0xcc5}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x40, 0x0, 0x29, "ba9ac3693d4323290d41b49ac61ca21d8aca085f6ede8935c35548968b6635bd007cfdcb2be470d634"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x60}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x3d}, &(0x7f0000000640)={0x20, 0x1, 0xc5, "8f81d3d3827d9d60a1c9a2edaeb38a6e068ae6df632f264bb78f62eac23437b9418f785d5b1756a9aaa2940141e7082f01497baf4544aa50746371fd0bd9bfb7cc8f58fa39f683adc43a8a9485b5459c077e3e3316661a54a0625df64f4cd704abe2c4ffabb210315dd445c26af927cfd5078b34a5e06e53c08c6b9b61f050550258ab182cf5a8ec33230347acf97e87c53d69d50a0f132eebcafcf2411998e1353eaa95b6a46fcb89923d32e9f5e43a149e4118a3d03c6bb32ce393bbf3686a7e9be58d20"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x80}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x498, &(0x7f00000007c0)={[{0xbf, 0x4e00, "07cc41ca4ea94e218c449eb3ba42e8d9d17f310e97bb8cfe05668e63a72823efceb392c5c42b6736ba2672e58cbfa7f1195e304d2e44dafb834fc0aba77a6aa3e4d2c475bb4e86fe112acb48c6fe1b3e01bd7cf9592204a6d3424ef3f102eddd6e52cb3867ed02c19aaa46a2b789c8c657b96f3f493ad35e85a1faf6f58c707cdfe0cb56ee05e497bca6ca5bf5ce92633b76172dc6a679f11ed3a8c870be74a8f12bc3f63809ad7bd04a03618e8411692e76a1d4b37f94af94c612eab004f1"}, {0xdb, 0x4e00, "354ac4c14bb9f0fb0bdf387f9ccb45de7bf82f457d827cef3298a63fe273e8e1b27404281572ba169afb1c1136bb873e3ce4c964cfb7b3fe5027321f390f72189c789c472359f01797607091b9206ae6aa7096f55cddc4c7ff049c7b5639a0ae0eb0997963c62c1a843fd5e278edaa6285f30525bab681a27a94f94925e9be795a33e9db9ffe74bfed8d03ced187ab577e99e018d8d850067098a9d1fcc171869749e32f162281a49e6e3264c836e6fb983050f04a6a5a9a8a09683042d648c917e899cfcb0da6e0023f5b97be2f5e2b926a3a5c78ebc3fbebcc16"}, {0x85, 0x4e00, "307d2670aed06e551ed64d35295173125275e9d933f2f781855dc014f454d6f2f50e75083559a042d78ee88a4abfafeb8e867f907be6cc3f89ed07622633d9e1f9c2952b52fcda27418127a142c90414283652dada43da30a1a65ff7084edd9ea256e82e8c3accbc7ad0e0f3f91465423d571f121b0062848c2efb27aa8e5b5bb512acff42"}, {0xcc, 0x4e00, "3307727a6b6ecf260e936c89a4f3ebad18a4dfd0eac1ab880e5b806655ee5e83c19f44a1c04c40584291155dc49af032304fb11c1819af3dd0908f779949e78a66f96594a42453ebbad593f1b8a6e09ebb1528e73201155b87b804998e5df57b588125800d709528d834efa6fa6417dda9c791f6a0ade7d501621331f0072588e277fcedc63492142fc3323aa26a07f273fcf2199b281b5360f0c1c7b5129bdff9431f0707b7abdd9eb94dc7e4477f9374a05d30e380404c20686d664be669ecb0d74693d2bd1c016b453538"}, {0x59, 0x4e00, "18a353185f54cf6ab28879bc196116d1124d88ab72f0635997d2ee07d1cc8a033fb9606b0f97f2dea918563d188d69d6dc4b1b75873ada602a2a27a1948ea42e88ce4eb0f6a51212aeb29af6741ffda91c011fd2bb79cb07d3"}, {0x43, 0x4e00, "969abd4a1e522d3b749e94c8f26c7968b4a9b2d660e2138c2067487c89aa695d3b7639e7303f44682ac0649941a0a9255a84a1a251204464e82fad2707e38d48321a8a"}, {0x93, 0x4e00, "83af32d9239f1506b9bb1296ae49dae440b6dc1e867e83a47cb85dadb992cad01ffe61327d6d8670068ed5a14aca8385991e15f5a09087ce8de38946ec5af70502e54a54deaa1170e7eeb3e68264b07e174aa11a815f6f3e18fe7b7e9300d18543e2d874d23260e8d1a132e86ba5e67dc86ec22a65947e20ddc5dbeea6f39508c894d2e56c87e5b72f89c8fd7dd902e3a38291"}, {0x53, 0x4e00, "99e2b28e95a7ddbda80850a21cd5097de9600d3a0b24e936c0e0a009af10d0d797e7dc17c2dad0494ff941834ca2c632b3821ae571859a7ec84985eb0fa80b54928ddc58afb7c0d4bbced6c267a0bb1b8ef30b"}]}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "4af44f9b", {0x1, 0x2, 0x20, 0x9, 0x5}}) 17:47:39 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x2, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002900400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1463.662828][T28007] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x283) 17:47:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x320) 17:47:39 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x3, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1463.778023][T28015] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1463.793881][T18144] usb 6-1: Service connection timeout for: 256 [ 1463.810924][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services 17:47:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003900400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x284) 17:47:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x320) [ 1463.854096][T18144] ath9k_htc: Failed to initialize the device [ 1463.860402][T25435] usb 6-1: ath9k_htc: USB layer deinitialized 17:47:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2b, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1463.932198][T28027] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1464.253701][T25435] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1464.613606][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1464.773896][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1464.782981][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.791784][T25435] usb 6-1: Product: syz [ 1464.796687][T25435] usb 6-1: Manufacturer: syz [ 1464.801303][T25435] usb 6-1: SerialNumber: syz [ 1464.854507][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1465.433723][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1465.640541][T28011] UDC core: couldn't find an available UDC or it's busy: -16 [ 1465.649027][T28011] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1465.658590][T28011] UDC core: couldn't find an available UDC or it's busy: -16 [ 1465.666102][T28011] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1466.096603][T28011] UDC core: couldn't find an available UDC or it's busy: -16 [ 1466.104224][T28011] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1466.113012][T18144] usb 6-1: USB disconnect, device number 101 [ 1466.513681][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1466.520692][T25435] ath9k_htc: Failed to initialize the device [ 1466.529896][T18144] usb 6-1: ath9k_htc: USB layer deinitialized 17:47:42 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x59, &(0x7f0000000240)=@generic={0x8, 0x0, 0x51, "8aa7b2fc", "329dbaf689fd341424c603ecbcadc8b6c6366a287db0259448269aa3e085df39355fc4ee355383500e6d64e601b9a4624da9c686fcc7a3423f0839726004a8807aa87f4f225e3e888ab4d3761f3128e4f4"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xe6, &(0x7f00000002c0)=@generic={0x1, 0x0, 0xde, "2e69e20c", "3271d6aedd57fe3d3b7a3f63d4e47f77f6ef16d46a4e4d953528b26d6e734f5b032ed81454a744c7c3b0d6890becfb74b7a0930694a72c2c5d46df14dbe5e51ed57697334d0dad743602c36fa72e74d465650cd7f2f53de0129c6140fdfb0a8bc9a13b3120a709ac33750d03b5bd916cad12ce3480b12b0c3af00206b1123dd895d20187c200e78fc63ef90d96c2e5f6de95fa8a8d2f888dac04017a96534c635fa30d29e8770c54564104e991977b44b2199aba749be6a7af533dce99f52c9d1966cddf2e8dfe1a4a7aaf7c3d2d0a19c8d941e515c230df7f742b4b6718"}) syz_usb_control_io$hid(r1, &(0x7f0000000540)={0x24, &(0x7f0000000480)={0x40, 0xd, 0x4a, {0x4a, 0x21, "e6bb63658a8207ce2da6c1ff71dfac42544b46a1a969dc197d72b3f4db7af101dd7fc7e0efa2ce0f59d3fc16608c16d3ab6858fd113ad87345165e81203050dcc2da40e462299156"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}, &(0x7f00000003c0)={0x0, 0x22, 0x13, {[@main=@item_4={0x3, 0x0, 0xa, "36d4296c"}, @main=@item_012={0x2, 0x0, 0xb, 'L>'}, @local=@item_012={0x0, 0x2, 0x3}, @global=@item_012={0x1, 0x1, 0x5, 'W'}, @global=@item_012={0x0, 0x1, 0xf}, @global=@item_4={0x3, 0x1, 0x6, "75a673c0"}, @global=@item_012={0x1, 0x1, 0x5, 'k'}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x30e0, 0x0, 0x1, {0x22, 0xcc5}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x40, 0x0, 0x29, "ba9ac3693d4323290d41b49ac61ca21d8aca085f6ede8935c35548968b6635bd007cfdcb2be470d634"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x60}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x3d}, &(0x7f0000000640)={0x20, 0x1, 0xc5, "8f81d3d3827d9d60a1c9a2edaeb38a6e068ae6df632f264bb78f62eac23437b9418f785d5b1756a9aaa2940141e7082f01497baf4544aa50746371fd0bd9bfb7cc8f58fa39f683adc43a8a9485b5459c077e3e3316661a54a0625df64f4cd704abe2c4ffabb210315dd445c26af927cfd5078b34a5e06e53c08c6b9b61f050550258ab182cf5a8ec33230347acf97e87c53d69d50a0f132eebcafcf2411998e1353eaa95b6a46fcb89923d32e9f5e43a149e4118a3d03c6bb32ce393bbf3686a7e9be58d20"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x80}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x498, &(0x7f00000007c0)={[{0xbf, 0x4e00, "07cc41ca4ea94e218c449eb3ba42e8d9d17f310e97bb8cfe05668e63a72823efceb392c5c42b6736ba2672e58cbfa7f1195e304d2e44dafb834fc0aba77a6aa3e4d2c475bb4e86fe112acb48c6fe1b3e01bd7cf9592204a6d3424ef3f102eddd6e52cb3867ed02c19aaa46a2b789c8c657b96f3f493ad35e85a1faf6f58c707cdfe0cb56ee05e497bca6ca5bf5ce92633b76172dc6a679f11ed3a8c870be74a8f12bc3f63809ad7bd04a03618e8411692e76a1d4b37f94af94c612eab004f1"}, {0xdb, 0x4e00, "354ac4c14bb9f0fb0bdf387f9ccb45de7bf82f457d827cef3298a63fe273e8e1b27404281572ba169afb1c1136bb873e3ce4c964cfb7b3fe5027321f390f72189c789c472359f01797607091b9206ae6aa7096f55cddc4c7ff049c7b5639a0ae0eb0997963c62c1a843fd5e278edaa6285f30525bab681a27a94f94925e9be795a33e9db9ffe74bfed8d03ced187ab577e99e018d8d850067098a9d1fcc171869749e32f162281a49e6e3264c836e6fb983050f04a6a5a9a8a09683042d648c917e899cfcb0da6e0023f5b97be2f5e2b926a3a5c78ebc3fbebcc16"}, {0x85, 0x4e00, "307d2670aed06e551ed64d35295173125275e9d933f2f781855dc014f454d6f2f50e75083559a042d78ee88a4abfafeb8e867f907be6cc3f89ed07622633d9e1f9c2952b52fcda27418127a142c90414283652dada43da30a1a65ff7084edd9ea256e82e8c3accbc7ad0e0f3f91465423d571f121b0062848c2efb27aa8e5b5bb512acff42"}, {0xcc, 0x4e00, "3307727a6b6ecf260e936c89a4f3ebad18a4dfd0eac1ab880e5b806655ee5e83c19f44a1c04c40584291155dc49af032304fb11c1819af3dd0908f779949e78a66f96594a42453ebbad593f1b8a6e09ebb1528e73201155b87b804998e5df57b588125800d709528d834efa6fa6417dda9c791f6a0ade7d501621331f0072588e277fcedc63492142fc3323aa26a07f273fcf2199b281b5360f0c1c7b5129bdff9431f0707b7abdd9eb94dc7e4477f9374a05d30e380404c20686d664be669ecb0d74693d2bd1c016b453538"}, {0x59, 0x4e00, "18a353185f54cf6ab28879bc196116d1124d88ab72f0635997d2ee07d1cc8a033fb9606b0f97f2dea918563d188d69d6dc4b1b75873ada602a2a27a1948ea42e88ce4eb0f6a51212aeb29af6741ffda91c011fd2bb79cb07d3"}, {0x43, 0x4e00, "969abd4a1e522d3b749e94c8f26c7968b4a9b2d660e2138c2067487c89aa695d3b7639e7303f44682ac0649941a0a9255a84a1a251204464e82fad2707e38d48321a8a"}, {0x93, 0x4e00, "83af32d9239f1506b9bb1296ae49dae440b6dc1e867e83a47cb85dadb992cad01ffe61327d6d8670068ed5a14aca8385991e15f5a09087ce8de38946ec5af70502e54a54deaa1170e7eeb3e68264b07e174aa11a815f6f3e18fe7b7e9300d18543e2d874d23260e8d1a132e86ba5e67dc86ec22a65947e20ddc5dbeea6f39508c894d2e56c87e5b72f89c8fd7dd902e3a38291"}, {0x53, 0x4e00, "99e2b28e95a7ddbda80850a21cd5097de9600d3a0b24e936c0e0a009af10d0d797e7dc17c2dad0494ff941834ca2c632b3821ae571859a7ec84985eb0fa80b54928ddc58afb7c0d4bbced6c267a0bb1b8ef30b"}]}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "4af44f9b", {0x1, 0x2, 0x20, 0x9, 0x5}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x59, &(0x7f0000000240)=@generic={0x8, 0x0, 0x51, "8aa7b2fc", "329dbaf689fd341424c603ecbcadc8b6c6366a287db0259448269aa3e085df39355fc4ee355383500e6d64e601b9a4624da9c686fcc7a3423f0839726004a8807aa87f4f225e3e888ab4d3761f3128e4f4"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xe6, &(0x7f00000002c0)=@generic={0x1, 0x0, 0xde, "2e69e20c", "3271d6aedd57fe3d3b7a3f63d4e47f77f6ef16d46a4e4d953528b26d6e734f5b032ed81454a744c7c3b0d6890becfb74b7a0930694a72c2c5d46df14dbe5e51ed57697334d0dad743602c36fa72e74d465650cd7f2f53de0129c6140fdfb0a8bc9a13b3120a709ac33750d03b5bd916cad12ce3480b12b0c3af00206b1123dd895d20187c200e78fc63ef90d96c2e5f6de95fa8a8d2f888dac04017a96534c635fa30d29e8770c54564104e991977b44b2199aba749be6a7af533dce99f52c9d1966cddf2e8dfe1a4a7aaf7c3d2d0a19c8d941e515c230df7f742b4b6718"}) (async) syz_usb_control_io$hid(r1, &(0x7f0000000540)={0x24, &(0x7f0000000480)={0x40, 0xd, 0x4a, {0x4a, 0x21, "e6bb63658a8207ce2da6c1ff71dfac42544b46a1a969dc197d72b3f4db7af101dd7fc7e0efa2ce0f59d3fc16608c16d3ab6858fd113ad87345165e81203050dcc2da40e462299156"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}, &(0x7f00000003c0)={0x0, 0x22, 0x13, {[@main=@item_4={0x3, 0x0, 0xa, "36d4296c"}, @main=@item_012={0x2, 0x0, 0xb, 'L>'}, @local=@item_012={0x0, 0x2, 0x3}, @global=@item_012={0x1, 0x1, 0x5, 'W'}, @global=@item_012={0x0, 0x1, 0xf}, @global=@item_4={0x3, 0x1, 0x6, "75a673c0"}, @global=@item_012={0x1, 0x1, 0x5, 'k'}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x30e0, 0x0, 0x1, {0x22, 0xcc5}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x40, 0x0, 0x29, "ba9ac3693d4323290d41b49ac61ca21d8aca085f6ede8935c35548968b6635bd007cfdcb2be470d634"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x60}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x3d}, &(0x7f0000000640)={0x20, 0x1, 0xc5, "8f81d3d3827d9d60a1c9a2edaeb38a6e068ae6df632f264bb78f62eac23437b9418f785d5b1756a9aaa2940141e7082f01497baf4544aa50746371fd0bd9bfb7cc8f58fa39f683adc43a8a9485b5459c077e3e3316661a54a0625df64f4cd704abe2c4ffabb210315dd445c26af927cfd5078b34a5e06e53c08c6b9b61f050550258ab182cf5a8ec33230347acf97e87c53d69d50a0f132eebcafcf2411998e1353eaa95b6a46fcb89923d32e9f5e43a149e4118a3d03c6bb32ce393bbf3686a7e9be58d20"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x80}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x498, &(0x7f00000007c0)={[{0xbf, 0x4e00, "07cc41ca4ea94e218c449eb3ba42e8d9d17f310e97bb8cfe05668e63a72823efceb392c5c42b6736ba2672e58cbfa7f1195e304d2e44dafb834fc0aba77a6aa3e4d2c475bb4e86fe112acb48c6fe1b3e01bd7cf9592204a6d3424ef3f102eddd6e52cb3867ed02c19aaa46a2b789c8c657b96f3f493ad35e85a1faf6f58c707cdfe0cb56ee05e497bca6ca5bf5ce92633b76172dc6a679f11ed3a8c870be74a8f12bc3f63809ad7bd04a03618e8411692e76a1d4b37f94af94c612eab004f1"}, {0xdb, 0x4e00, "354ac4c14bb9f0fb0bdf387f9ccb45de7bf82f457d827cef3298a63fe273e8e1b27404281572ba169afb1c1136bb873e3ce4c964cfb7b3fe5027321f390f72189c789c472359f01797607091b9206ae6aa7096f55cddc4c7ff049c7b5639a0ae0eb0997963c62c1a843fd5e278edaa6285f30525bab681a27a94f94925e9be795a33e9db9ffe74bfed8d03ced187ab577e99e018d8d850067098a9d1fcc171869749e32f162281a49e6e3264c836e6fb983050f04a6a5a9a8a09683042d648c917e899cfcb0da6e0023f5b97be2f5e2b926a3a5c78ebc3fbebcc16"}, {0x85, 0x4e00, "307d2670aed06e551ed64d35295173125275e9d933f2f781855dc014f454d6f2f50e75083559a042d78ee88a4abfafeb8e867f907be6cc3f89ed07622633d9e1f9c2952b52fcda27418127a142c90414283652dada43da30a1a65ff7084edd9ea256e82e8c3accbc7ad0e0f3f91465423d571f121b0062848c2efb27aa8e5b5bb512acff42"}, {0xcc, 0x4e00, "3307727a6b6ecf260e936c89a4f3ebad18a4dfd0eac1ab880e5b806655ee5e83c19f44a1c04c40584291155dc49af032304fb11c1819af3dd0908f779949e78a66f96594a42453ebbad593f1b8a6e09ebb1528e73201155b87b804998e5df57b588125800d709528d834efa6fa6417dda9c791f6a0ade7d501621331f0072588e277fcedc63492142fc3323aa26a07f273fcf2199b281b5360f0c1c7b5129bdff9431f0707b7abdd9eb94dc7e4477f9374a05d30e380404c20686d664be669ecb0d74693d2bd1c016b453538"}, {0x59, 0x4e00, "18a353185f54cf6ab28879bc196116d1124d88ab72f0635997d2ee07d1cc8a033fb9606b0f97f2dea918563d188d69d6dc4b1b75873ada602a2a27a1948ea42e88ce4eb0f6a51212aeb29af6741ffda91c011fd2bb79cb07d3"}, {0x43, 0x4e00, "969abd4a1e522d3b749e94c8f26c7968b4a9b2d660e2138c2067487c89aa695d3b7639e7303f44682ac0649941a0a9255a84a1a251204464e82fad2707e38d48321a8a"}, {0x93, 0x4e00, "83af32d9239f1506b9bb1296ae49dae440b6dc1e867e83a47cb85dadb992cad01ffe61327d6d8670068ed5a14aca8385991e15f5a09087ce8de38946ec5af70502e54a54deaa1170e7eeb3e68264b07e174aa11a815f6f3e18fe7b7e9300d18543e2d874d23260e8d1a132e86ba5e67dc86ec22a65947e20ddc5dbeea6f39508c894d2e56c87e5b72f89c8fd7dd902e3a38291"}, {0x53, 0x4e00, "99e2b28e95a7ddbda80850a21cd5097de9600d3a0b24e936c0e0a009af10d0d797e7dc17c2dad0494ff941834ca2c632b3821ae571859a7ec84985eb0fa80b54928ddc58afb7c0d4bbced6c267a0bb1b8ef30b"}]}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "4af44f9b", {0x1, 0x2, 0x20, 0x9, 0x5}}) (async) 17:47:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x285) 17:47:42 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x4, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000910400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x320) 17:47:42 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x6, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1466.660932][T28038] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x286) 17:47:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x320) 17:47:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001910400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:42 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x7, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1466.808660][T28055] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1467.073642][T18144] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1467.463649][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1467.643669][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1467.652859][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.662560][T18144] usb 6-1: Product: syz [ 1467.667187][T18144] usb 6-1: Manufacturer: syz [ 1467.671894][T18144] usb 6-1: SerialNumber: syz [ 1467.737721][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1468.373768][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1468.576245][T28045] UDC core: couldn't find an available UDC or it's busy: -16 [ 1468.583762][T28045] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1468.591640][T28045] UDC core: couldn't find an available UDC or it's busy: -16 [ 1468.599971][T28045] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1469.019547][T28045] UDC core: couldn't find an available UDC or it's busy: -16 [ 1469.027011][T28045] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1469.038028][T28045] UDC core: couldn't find an available UDC or it's busy: -16 [ 1469.049821][T28045] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:47:44 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x59, &(0x7f0000000240)=@generic={0x8, 0x0, 0x51, "8aa7b2fc", "329dbaf689fd341424c603ecbcadc8b6c6366a287db0259448269aa3e085df39355fc4ee355383500e6d64e601b9a4624da9c686fcc7a3423f0839726004a8807aa87f4f225e3e888ab4d3761f3128e4f4"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xe6, &(0x7f00000002c0)=@generic={0x1, 0x0, 0xde, "2e69e20c", "3271d6aedd57fe3d3b7a3f63d4e47f77f6ef16d46a4e4d953528b26d6e734f5b032ed81454a744c7c3b0d6890becfb74b7a0930694a72c2c5d46df14dbe5e51ed57697334d0dad743602c36fa72e74d465650cd7f2f53de0129c6140fdfb0a8bc9a13b3120a709ac33750d03b5bd916cad12ce3480b12b0c3af00206b1123dd895d20187c200e78fc63ef90d96c2e5f6de95fa8a8d2f888dac04017a96534c635fa30d29e8770c54564104e991977b44b2199aba749be6a7af533dce99f52c9d1966cddf2e8dfe1a4a7aaf7c3d2d0a19c8d941e515c230df7f742b4b6718"}) syz_usb_control_io$hid(r1, &(0x7f0000000540)={0x24, &(0x7f0000000480)={0x40, 0xd, 0x4a, {0x4a, 0x21, "e6bb63658a8207ce2da6c1ff71dfac42544b46a1a969dc197d72b3f4db7af101dd7fc7e0efa2ce0f59d3fc16608c16d3ab6858fd113ad87345165e81203050dcc2da40e462299156"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}, &(0x7f00000003c0)={0x0, 0x22, 0x13, {[@main=@item_4={0x3, 0x0, 0xa, "36d4296c"}, @main=@item_012={0x2, 0x0, 0xb, 'L>'}, @local=@item_012={0x0, 0x2, 0x3}, @global=@item_012={0x1, 0x1, 0x5, 'W'}, @global=@item_012={0x0, 0x1, 0xf}, @global=@item_4={0x3, 0x1, 0x6, "75a673c0"}, @global=@item_012={0x1, 0x1, 0x5, 'k'}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x30e0, 0x0, 0x1, {0x22, 0xcc5}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x40, 0x0, 0x29, "ba9ac3693d4323290d41b49ac61ca21d8aca085f6ede8935c35548968b6635bd007cfdcb2be470d634"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x60}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x3d}, &(0x7f0000000640)={0x20, 0x1, 0xc5, "8f81d3d3827d9d60a1c9a2edaeb38a6e068ae6df632f264bb78f62eac23437b9418f785d5b1756a9aaa2940141e7082f01497baf4544aa50746371fd0bd9bfb7cc8f58fa39f683adc43a8a9485b5459c077e3e3316661a54a0625df64f4cd704abe2c4ffabb210315dd445c26af927cfd5078b34a5e06e53c08c6b9b61f050550258ab182cf5a8ec33230347acf97e87c53d69d50a0f132eebcafcf2411998e1353eaa95b6a46fcb89923d32e9f5e43a149e4118a3d03c6bb32ce393bbf3686a7e9be58d20"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x80}}) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) (async, rerun: 64) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x498, &(0x7f00000007c0)={[{0xbf, 0x4e00, "07cc41ca4ea94e218c449eb3ba42e8d9d17f310e97bb8cfe05668e63a72823efceb392c5c42b6736ba2672e58cbfa7f1195e304d2e44dafb834fc0aba77a6aa3e4d2c475bb4e86fe112acb48c6fe1b3e01bd7cf9592204a6d3424ef3f102eddd6e52cb3867ed02c19aaa46a2b789c8c657b96f3f493ad35e85a1faf6f58c707cdfe0cb56ee05e497bca6ca5bf5ce92633b76172dc6a679f11ed3a8c870be74a8f12bc3f63809ad7bd04a03618e8411692e76a1d4b37f94af94c612eab004f1"}, {0xdb, 0x4e00, "354ac4c14bb9f0fb0bdf387f9ccb45de7bf82f457d827cef3298a63fe273e8e1b27404281572ba169afb1c1136bb873e3ce4c964cfb7b3fe5027321f390f72189c789c472359f01797607091b9206ae6aa7096f55cddc4c7ff049c7b5639a0ae0eb0997963c62c1a843fd5e278edaa6285f30525bab681a27a94f94925e9be795a33e9db9ffe74bfed8d03ced187ab577e99e018d8d850067098a9d1fcc171869749e32f162281a49e6e3264c836e6fb983050f04a6a5a9a8a09683042d648c917e899cfcb0da6e0023f5b97be2f5e2b926a3a5c78ebc3fbebcc16"}, {0x85, 0x4e00, "307d2670aed06e551ed64d35295173125275e9d933f2f781855dc014f454d6f2f50e75083559a042d78ee88a4abfafeb8e867f907be6cc3f89ed07622633d9e1f9c2952b52fcda27418127a142c90414283652dada43da30a1a65ff7084edd9ea256e82e8c3accbc7ad0e0f3f91465423d571f121b0062848c2efb27aa8e5b5bb512acff42"}, {0xcc, 0x4e00, "3307727a6b6ecf260e936c89a4f3ebad18a4dfd0eac1ab880e5b806655ee5e83c19f44a1c04c40584291155dc49af032304fb11c1819af3dd0908f779949e78a66f96594a42453ebbad593f1b8a6e09ebb1528e73201155b87b804998e5df57b588125800d709528d834efa6fa6417dda9c791f6a0ade7d501621331f0072588e277fcedc63492142fc3323aa26a07f273fcf2199b281b5360f0c1c7b5129bdff9431f0707b7abdd9eb94dc7e4477f9374a05d30e380404c20686d664be669ecb0d74693d2bd1c016b453538"}, {0x59, 0x4e00, "18a353185f54cf6ab28879bc196116d1124d88ab72f0635997d2ee07d1cc8a033fb9606b0f97f2dea918563d188d69d6dc4b1b75873ada602a2a27a1948ea42e88ce4eb0f6a51212aeb29af6741ffda91c011fd2bb79cb07d3"}, {0x43, 0x4e00, "969abd4a1e522d3b749e94c8f26c7968b4a9b2d660e2138c2067487c89aa695d3b7639e7303f44682ac0649941a0a9255a84a1a251204464e82fad2707e38d48321a8a"}, {0x93, 0x4e00, "83af32d9239f1506b9bb1296ae49dae440b6dc1e867e83a47cb85dadb992cad01ffe61327d6d8670068ed5a14aca8385991e15f5a09087ce8de38946ec5af70502e54a54deaa1170e7eeb3e68264b07e174aa11a815f6f3e18fe7b7e9300d18543e2d874d23260e8d1a132e86ba5e67dc86ec22a65947e20ddc5dbeea6f39508c894d2e56c87e5b72f89c8fd7dd902e3a38291"}, {0x53, 0x4e00, "99e2b28e95a7ddbda80850a21cd5097de9600d3a0b24e936c0e0a009af10d0d797e7dc17c2dad0494ff941834ca2c632b3821ae571859a7ec84985eb0fa80b54928ddc58afb7c0d4bbced6c267a0bb1b8ef30b"}]}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "4af44f9b", {0x1, 0x2, 0x20, 0x9, 0x5}}) 17:47:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x3a, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x287) 17:47:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x320) 17:47:44 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x8, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002910400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x3c, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1469.070983][T18143] usb 6-1: USB disconnect, device number 102 [ 1469.106883][T28071] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:44 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0xa, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x288) 17:47:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x320) [ 1469.161083][T28077] UDC core: couldn't find an available UDC or it's busy: -16 [ 1469.168900][T28077] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:47:44 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0xb, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003910400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1469.289980][T28090] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1469.393814][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1469.401783][T18144] ath9k_htc: Failed to initialize the device [ 1469.408952][T18143] usb 6-1: ath9k_htc: USB layer deinitialized [ 1469.783599][T18143] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1470.023601][T18143] usb 6-1: Using ep0 maxpacket: 8 [ 1470.153707][T18143] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1470.165096][T18143] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1470.176639][T18143] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1470.186919][T18143] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1470.197480][T18143] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1470.206889][T18143] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.226221][T18143] usb 6-1: config 0 descriptor?? [ 1470.483849][T18143] usb 6-1: GET_CAPABILITIES returned 0 [ 1470.489463][T18143] usbtmc 6-1:0.0: can't read capabilities [ 1471.039920][T28091] UDC core: couldn't find an available UDC or it's busy: -16 [ 1471.047640][T28091] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1471.057092][T28091] UDC core: couldn't find an available UDC or it's busy: -16 [ 1471.064593][T28091] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:47:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:47 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0xe, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x289) 17:47:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900000000000000}]}, 0x320) 17:47:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000920400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1472.161016][T18143] usb 6-1: USB disconnect, device number 103 [ 1472.197997][T28098] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:47 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x28, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x13}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x28a) 17:47:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x320) 17:47:47 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010000de7e000009058b1e20"], 0x0) syz_usb_ep_read(r0, 0x0, 0x17, &(0x7f0000000340)=""/23) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "b273d32d", {0x3, 0x6, 0x0, 0x3f, 0x5e91, 0x2, 0x14}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) r2 = syz_usb_connect(0x3, 0x1645, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0xd, 0x5, 0xcc, 0x8, 0xccd, 0x8e, 0xf444, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1633, 0x4, 0x4b, 0x4, 0xc0, 0x3, [{{0x9, 0x4, 0x8c, 0x81, 0x0, 0x2f, 0xf, 0xd5, 0x7, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "788c"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5, 0x8000, 0x80}, {0x6, 0x24, 0x1a, 0x2, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0xfff8}]}]}}, {{0x9, 0x4, 0xe5, 0x2, 0x10, 0xc5, 0x8c, 0xb8, 0x7f, [@generic={0x96, 0x22, "d9388283c99e5db4c698133bab4de813f2e09a5babffe4726abbdfc09aa8d29102bc6f9b4fb9f47067a247afb76dfe18fab06e3ea15742069e340591a603b6fdd4dda3e35b30bc36440bc895c60a9b9641eeeddf517be1c3e23cb84636d103a2b782b4d8a1c130c4a14be3212d3c593d7adc26fe5c13b3e69c7db9831d462b2b490c1ac98e536cbc81377757f7307f18eae469f0"}], [{{0x9, 0x5, 0x9, 0x8, 0x200, 0x80, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x56, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xcb, 0xfb, 0x0, [@generic={0xd2, 0x2, "b06e2079a995c1e41ebd14cab8e65b05ccefcdf083b093a106168569005d1004d7084ed0c6b067aa49fd3ddd5e0242606c3e8197a3a4f832731fe71aeb91ecb1643784ea6836edc40d6afa83a6bf27e44c5615ca5f55f2f7d5d6ed17616058e425ce3a6ad6f24d75977317c0ef0808bb03cf702ccea1ab7faefe1d72a73ba3aacb310b8060047c543da4a05ab0e9d289bc76c65ced6500aa20eed741f7140f3389660f06707e1d72f5e3449033612885ca74cec3675f4f0bba95f33ef5eab34c1b669cf3c0fe2fe43f5a93261f53419c"}, @generic={0x62, 0x23, "c68ee638131a5927ad488795020ff655d1a54005914b5b59bc444d2c6618ceaea4b6e0b3e47f9e5b96abb1f11e1ba316aca22a74a056bbcec7e44af6401a9b659baa92a8d24f94ba76d47edfd2a05a85a0fc90dd370f25879d79a1f27bb8308d"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x4, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x400}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x1f, 0x9, 0x62, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x4, 0x5}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x81, 0x61, 0xcf, [@generic={0x45, 0xe, "e3893524d8800abfa418186fc625506f4c73bf5288ef900737162649fc4436f4f27c750ced2f8c81d23b183e806b743a8daaa342ffba03cc07e624ca630f6c35a98b48"}, @generic={0x6f, 0x6, "4af202cadcf59e879bce23fc9fc5de9b7c3ece71e568e684250cf4d18c26715d3cbe38c8bc3bca16e6a9dd2a21a7fc82af895b382383fa6ae2cf31fd00e384def3b51bc3341a5b0dcca0ad333744bd8ae65678b22fdb7c16cbe7f7c2832309f002b7de3220f31dcf0952db515d"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xab, 0x7f, 0x7, [@generic={0x52, 0x6, "b22a7dca8b95e28d7aa9096785b2d6e150f09fdfff4762ad3ae933f1ec10ac47c7d657a7a7be1469dc1b643760ddb21ad4787c741ac33456db0bb50b2fc45535afa607e571dc312c269dcd048a467b75"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x20}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x9, 0x80, 0x8, [@generic={0x13, 0x0, "12792cf75c898b02fbef3d0f5e924d5c38"}, @generic={0x2d, 0x7, "9d752b418bc696d900b575adbbc2beca6df3b4e370480b60746fc0c5c1a3b24752c49757c2dba035d02441"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x400, 0x3f, 0x19, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3}]}}, {{0x9, 0x5, 0xe, 0x11, 0x40, 0x9, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5}, @generic={0x4a, 0x4, "588995009ab80ad71a96543d156253dd22a64894b75dbcf1fb45b1b34096c1a40f84447caba6dc5e10afc5d5ba7df15447ea51ebcb2c16e08ef325d6f34d5d53f61f665b83dd5bc6"}]}}, {{0x9, 0x5, 0x5, 0x18, 0x8, 0xc0, 0x20, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x2c}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0xfe, 0x7, 0x9, [@generic={0xee, 0x6, "ac29ad8f9e58b5b871d8cfc43a924b34f529d6fd00923beecd90d96c9e9feb4062c484d2329cc5396fa3a9bf588947a1f628c9995f173a116c7373ec058eea0c48d803130d7998bacdb1a2c66edd3788dc6347f3f30a0c8364e95d2a2a34ca4e07a82139d75532a68f655a6a3a20839e08b00281e7131bde8a2aef2c985b2d5c2d1df853b3ae927d6b516908deb5a43f6ee4370d7689c97a00094da353e3a94ea4c47d0d56cb351b7d63b35095bdd9364e87a5078f102c7e6d9b6048fdb08f37677287cc30aae080e9fde0be3d3a515238a29efe72a7adba60424ceb860abc75292e005173df8aa643a286a1"}, @generic={0x47, 0x9, "8ea154e23977190607edd090d7c5c101494b62416e3c52a107c1fd6ec0fee2cfec8a84be813400e06fa4a06e67c9794dc2d6ce83386bc186980d611dadb93b649b316cec33"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x8, 0x7, 0x3, [@generic={0x61, 0x14, "d544233e0d7c064ee46bf41a6fcaec86eb9d3e73bc80bbd16134ccc5229d05c305014c190e22d2c7826884e8c86e3fe1cfa761674aa5d926ee0e270ddd0690635d2ac6fa2c3d0601806f099c7ce85b1324575f1a0155e2f46303173ed60139"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x5, 0xf0, 0x5, [@generic={0xd5, 0x8, "01646a96ae3899355ee00f3ebad7d87ff555ccb6b0237d09c2abf10e61bacacd735b99c45258112689529452888d0393982eba19bc752630a9e57fec19d26e498b700cbe36f3b07c447b6482e15372014cb49f43db44fbb493f948355f8391c97f07faeeb5af49b918f0df567e9ef959acc3ef79e3430cc37bc77c17376209f85384ec39d7e9ae5cb462de37054374e40f7e6f418b211708b953de6d964543268615b3a8856ac14b07d78e1079af0b8f372657fbd5da90e11ca2961fe2a83e8499f027082119e218349042f0ed8e875f904834"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x9, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0xf800}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x81}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x5, 0x8, 0x80, [@generic={0x93, 0xe, "993abf88678f07eabf060882b2607ea35573af67f247af229b9c1898fbabcf87f5cb7e8c750bbb623b4197ecdb4bfab485ede8a441ef93685101d5b9960ad9c3298da73fb228aa7638acbb3daf356ba78cd15f38da526d55854b5ac97e221187a5e48301d0be8af686268854967dd2875c0b6941a19fed5a0b34ef48b08e7ca9f213b6eb925629dbbb19c632b1c66c0d4f"}, @generic={0xd7, 0x9, "913953bcd2356474db681843113ad02224322a643f1fdf16f71b646b25df5be11dd885a0a033fe7435801b4b81cce9b77cbdb763b155d3550aaf83c52ce153d67297496b8797af0e98b75fcff064377a041a2339a07dd8ae5794b579ad8bbe7e71ec65fb26df92c17e5a1dd494e533a23f267ef05add7097487358bdc67016297adee102a7b64b5a05962d71b4f3a030fd57e2666e06694c472390b2ff5e4fb4c3cf9b80747ab5cd41620ed4ead513546bd44402227ae581608058bcf6a40ef81a002d3efbea0aea67165bec6e4cb58be4cfeb93fe"}]}}]}}, {{0x9, 0x4, 0x1, 0x3a, 0xf, 0xb, 0xc6, 0x18, 0xf7, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, 'fiq'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0x200, 0xd}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @country_functional={0xc, 0x24, 0x7, 0x5, 0x2, [0x40, 0x0, 0x2]}, @country_functional={0xe, 0x24, 0x7, 0xbd, 0x1, [0x1ff, 0x7, 0xee, 0x3]}, @acm={0x4, 0x24, 0x2, 0x3}]}], [{{0x9, 0x5, 0xc, 0x4, 0x200, 0x6, 0x6, 0x8, [@generic={0xfd, 0x7, "ab0402bd2841ce891a854b775bd35a9fb6bd49bba7f60d2d9fa70f5dc319ca759866ac4cb90999e1e70999d9655fe11286fc4bdbb24e1bd68d6f2dbd0823142041e8e8e7c3e16314019db28ebd9f3f7d9acf08a29c90e752a37dca9663851fd6f3e70ad8774be9abe4f1a1cea8f7c6afe9e48f669785b86b47fc2d031ac73df68a09af8ef2bdf2b4cefe0c708268d1adae137e34083f4b5ecd9055a08bca8dcd90fb15e8ee416fee6aef6aba8c23c281452d744b32e2d3aa6a0c75a586e3836ebd81e1ba5e5ccd28a1d8bc0a83024a0b840f76797b079e7fdbe0acc9f7b3b57d1d0c5215b1d32fe896ce7f8053d6fba58d0dabf6abc231e4a0e252"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x228, 0x3, 0x1, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xc594}]}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0xe, 0x5, 0x7f, [@generic={0x15, 0x24, "5ec50812f8b9793babd9233f8cff507d00499d"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x31, 0x6, 0xb7, [@generic={0xa8, 0x22, "adfb4e2403d0bb3190b19c541741634d79b9f0c64d6b23c92773666f8e85dbef7d4f5f5124af66ab603f8e7b6556595aefb1e0c0afc247709dfe7ab4cbbcd4881be6cab1e778395333bf213df4aab7ec8c58dc59cd73081f6e61e87b198595fc368985137b385576cb9e8d1da43017263f14b0c0d5015a8d8f47e443152c89f7d794890d7161db1a46a99f3fe5bcf49b5983a81cef023bb0889bbf7a1f38dab2e73182186761"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x7d, 0x80, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x401}, @generic={0x16, 0x21, "077492218a865fca89879615b6a96789faa7990a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x5}, @generic={0x58, 0xc, "f6e650561ab2bce4661b3d8c914c71e6210d00382e9bb49f8aec49f5acf9e6ba3fae50abd8305ede6d681fbb268f143ea94cf614ec85851592cca8001f5c7370db4b174e55c27dca2f101cf142a07f38d391988baece"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x20, 0x7, 0x65, [@generic={0x40, 0x5, "0ebb1dacbaccc1daf08a8a290f3aca057a69ae41317366962bc5f84a07668489541268051091ffc68f98a2c724b4b3246d69bf4219894cb8ae00a7cc9ddb"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0xff, 0x7, 0xec, [@generic={0x33, 0xd, "1eb64a8943d93e4ebbf49130ed54aa5168b76a776df5492e7df3d76a03a369ca1007a2d95e74ef8d462812c0e4688a935d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x9}]}}, {{0x9, 0x5, 0x8c, 0xa, 0x200, 0x5, 0x45, 0x3f, [@generic={0x102, 0xe, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x400}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x0, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x7}, @generic={0x49, 0xa, "8affcaa1936032747cce85f147a3c8e7cb93815654e41d8e4666f28c78ec09f7fa98fe84caeb4ba626edc21386ae5f7da32a86e99097df65c2d21d58dbff2d7c11754506af4b41"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x7, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x5, 0x110}]}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0x0, 0x2, 0x2, [@generic={0x5e, 0x23, "52876a7836d41fdcc941e317727937553385832e702fd03e551f649fa8ba9b92d291fb0fd0af14bfeb51e06cbd93698bb75d1954889ab10f0e4481f8bcb189a01e673dbd3f425584c8e36a457f09d2119179bfcec2f91ee6098d4217"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0xde, 0x80, 0x2, [@generic={0x7b, 0x5, "9a98dd928856367d510420c1dc368b804453f882004139e7c79ac77859db8f9c2b1251f7e116b506720587ba3a7375faadb247e7f1bf817310e790056d8ff463049a7d34df8ddae1ca26c90aa1c3b97595abb18036b8bf186cf94509440285c72e3553ccecf1d0c033fab78ab742ca69cf93c923dbabeafd72"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x7}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x4, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x1ed4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7f}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x8, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x53, 0x8000}]}}]}}, {{0x9, 0x4, 0x69, 0x3f, 0xa, 0xff, 0xff, 0xff, 0x3f, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x40, 0x1, 0x0, 0x1f, "04ab1fed2d53f8"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x0, 0x80, "b4af77d100114bb7"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x8, 0x1, "", "289b32"}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "87d0191bd5"}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0x5, 0x4}, {0x6, 0x24, 0x1a, 0x4, 0x28}, [@mdlm_detail={0x35, 0x24, 0x13, 0x7, "5250efa165cdfb86d532e8b30031d949b73e40369303039fe34a82e77f7f45edfb0f20c0b6de2e466aba8493502fe8a32c"}, @mdlm_detail={0x6f, 0x24, 0x13, 0x4, "2db75712511168286113f65c7fc0f324b57f8432601752706e2d8838fee9a1486f099059003fb83285784c8c170d1e4ad635ec1ca13e33e6d2ae14ec1397ecc7155fb163c6aead4b7df72c432c80b78e40293c5f70c72e668538a72916e9c3713bd24cad4bdcbb575a85c0"}, @mdlm_detail={0x2e, 0x24, 0x13, 0x8, "ca500a4dabe4957a3f61b1c3d16b7a780bf78fba06923904f798e10c426d6793b29d3c0cb580a9bdf6cf"}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x3e, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1f}]}], [{{0x9, 0x5, 0x7, 0x4, 0x20, 0xa9, 0x63, 0x8, [@generic={0x43, 0x21, "60e227e073bdd367e8a4c4d202d8e8fe70af78cac83f2015f24aca8b791397ac5748f9e401b1379946f28c9d9d6fe53d733c65b6bd9b37fa11fe15fb514063db97"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x3, 0x7, 0x4, [@generic={0x4d, 0x23, "e1501209389817ed958e58d7f68120e5268b3ea977a6787eec106e2b47d407630eaa09358dbed2c64f04b972f39e96f81fbd7c7a234948be80a37afc2e943f833fee3ab67f7a21e50a3927"}, @generic={0xd7, 0x23, "adfdb659cebf92e16c04319ce428b542681c6586fb7164bb8204f4bc11fa0fc814079c6003d37b2bb7007d40716b4fc14bb1635c35c139d682b8fdf1167fe69a9d5c4a4d66c657ecf81c0e96cacb5d3420fde14733d9fb2f66bde1f53ba4a5ccadb364a79305394068c45b981a582105ca414f96407a7bd2b69e2373fe9b49d3a3170594ccc8bf8550701617bdf3a3f7f32e3afeb0e2607e39bfe32184208bbae5f9f267256984d38d169f6bdc8e87adf9faedf015f2d9e9fb01ada0af9442640865b8580b114b0edc095798735594b8c7e275901a"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x9, 0x9, 0x0, [@generic={0x62, 0x23, "2b5ff443edcfbce666f9acfad8734a62633d3660b1086d644ad7139f1d3ffa642d19500e583c823a026019d612795056394c54ff0abddea54354684d23d53ff5a3c3f80dfb78fd89c543494469782fa16a34563afdcb008f58932b8e13e7f47a"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x5, 0x36, 0x27, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9}]}}, {{0x9, 0x5, 0x85, 0x2, 0x40, 0x2, 0x6b, 0x81, [@generic={0xa1, 0x23, "ed81a859f6999396f39ca1acaae5a9afbaf31a7d93fd2a132ff0c1f374a516189b7eda1b6d8f59bad6368fa0a395400bebaa29c7f6831fe5c9caae47478e672a855fbaa660243ee2c61ffe11999067cb2159e45e1b863c4616dbf050928b2eae25ab0221b31c0346b8c8c133e0261732c349d7e34d1ec73a59c88d9c27cec64f3b2338027c4ce9b2b30840642e4ea29f0d6603b8f822296eae8c0eecf94ea5"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x40, 0x2, 0x4, [@generic={0x99, 0x9, "447936b0e6f3f81bf82d255f310068d22629202942b4e86dc149db7dd569a77390c507517dddb80b5ea93b4e9f02faf2616987305c6aee3241fcf2f4749c6538d4221725a1a705ac21081da52eb23673228ca51c5792e367390aa1367973a52eff2a0a313a87a021075d2ac0a4560594525b62fba08e1a139fcf28f6c60c1a1498014a95a3850accdfc3b79f5c39675026870c5b55f567"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x20, 0x6, 0x1, [@generic={0x75, 0xa, "24f14c52d852deb4ad2c1032cac0fe6ed2ad64c97a9a187bf04b09d019adb43a3da29905024b9c636a008f8eb8859fad0a394809f67acf1b4fe5cbae4316f4748028a2ac2e7ae047e88d6803276a11d74b0fe238d6077144ab5ef181e03b776ac8a92f093c5b805a270eb578c654746990bc5e"}, @generic={0xd4, 0x4, "7743455c1b3fd9ae82468327177e786c90200933c2bc7c29def24396a0cdfb54816e24035cd42a56a8955ab8da1e2ab6d0f76a794486ff0b4e26badd1c8d11c54c7c0dc953be6751b13a8c7b2745052263a1edb1bf22bd7877d0258899794adcd19aeeb1ef5afda555d1cee102f5e88b5a3e8cd7823dc65a9669c3a84479fd844be5d0ecc525807282c787c562a53a04865d2b1b0f2364fc37fd0219d537cd12d9fc790746fc39d8e929354079a02f2dcfef18be4ecba46ebb5fe6aab8eaa747a669a8d5313938e76eb5f99b8338522b8476"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x2, 0x2, 0x6, [@generic={0xd6, 0x0, "8920a0a6b96b483d703f14787d517c6304d4416eb73685bfa15ae1317082bce251e0b20b6c94cfdc0d8e61f6a1dc5c8238a9326e65ffb06d5728f47d94c5164cae9383355c3dfc7dd2b684fa8f07987719d2e74eae2d739c132d0b5af9451d23f5b85b6956b85ab21ac1bcd8923438646093e1255b87f64c99e74a29417ef6fdd9b894dfa19170c7e176eb3895d850c565e0c250f5e2f45ac173f5e2cc1a1f8ba91090911c2b15c4de2a8365f1c04da3568521e11c3d7995394797bd5a4299f19db418647f6489fe713590966f07d118fbc770db"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xf8, 0x3, 0x3, [@generic={0x68, 0xf, "e609dcdab8748afb399a652a513e5bdd4852714b890da37e790ce034e9a4824ba7003f7c39707531163c3000f9465433330f40fd56eed64a830ae084ec4a817d7e47388675c86ca0db8547f78726fe4cde8c4738d95211ac09447f5ecc8e3c780b0c4fc1869c"}, @uac_iso={0x7, 0x25, 0x1, 0x87, 0x80, 0x40}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x3, 0x0, 0x8, [@generic={0xd1, 0x23, "669b9873644ef86ddd4f515952c96b1323ee900745449f94b449bac2e11008361334e04fa4726124b95acd5238867ffa6210a5d24aada1543e83da8e55dc7aae5182258b804fc1fea2491cdd0cb4b6d06fd6f21af2b6d3c21de736d1a9f2d86c51de0b89112012bef30510f9ee2b2a676a5442108d2782b70dd03133c58d25c0b249ddbfd6bb848f6ef575d5f3ad8441c0a706431aefcb8e743603b41b3cf94accac39f383268fdd65949680b5fd35ec29d01827ccb7b827c9b778edca8efd85a884330efcf3ae90ccf11c68cec69d"}]}}]}}]}}]}}, &(0x7f0000001fc0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x4, 0xa0, 0x7, 0x10, 0xf7}, 0x2b, &(0x7f0000000140)={0x5, 0xf, 0x2b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x1, 0x84d}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x2, 0x80, 0xf6, 0x1f}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x6, 0x9, 0xc8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x60, 0x7, 0x5}]}, 0x6, [{0xab, &(0x7f0000000240)=@string={0xab, 0x3, "96fd08bf8a99b2e0d5b5c22c0abec076b3dbdc4e765ccc69306cb81d08207bef989b177b0f7405150a297252c41b6b449bddb99228b55aa3f4ee0d0562929ae402ce940254954f914f7010373706e1bc84f8316e47831d8002d5d968857e2489a1243469d5f6f2f1fdee3e4e5ece529d24915b9051568f38dfc68624e19e3cd1af85711eae278e20bf42f45539e94a82e3c1fce617d810cf26327e707fb91c11b78f6356ca00dd383d"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001f80)=@lang_id={0x4, 0x3, 0x408}}]}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000001b00)=@ready={0x0, 0x0, 0x8, "b623c463", {0x1, 0x8, 0x7, 0x0, 0x9}}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xa6, &(0x7f0000002040)=@generic={0x6, 0x0, 0x9e, "de282471", "4ca55602f05a8b9c9b88cd18faa4868aa990044e279751fe71de3263e383db56401e26c3759a456f841a20c4a714ec5243db0750a46a61cbaaad5e686a6fe83b7b5a75cbf54c91a2aeab18c6a5b63b295d5023cd158e9e4d493ec9abb7a28daf64d964b793b23b0c68bd339f8b24ed7264622e65befe861a93ad2119ee8ff42cd6fa4d993e5cfbdd71843eb24a96b4ca01d5ebddcb3106d4e82637df04f9"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:47:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001920400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x28}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x320) 17:47:47 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x34, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1472.359220][T28115] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x28b) 17:47:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002920400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x3}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:48 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x60, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003000000000000}]}, 0x320) 17:47:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x13}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x28c) [ 1472.490515][T28126] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1472.733628][T18143] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1473.093673][T18143] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1473.253811][T18143] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1473.262886][T18143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.271451][T18143] usb 6-1: Product: syz [ 1473.275846][T18143] usb 6-1: Manufacturer: syz [ 1473.280431][T18143] usb 6-1: SerialNumber: syz [ 1473.324422][T18143] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1473.893649][T18143] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1474.098600][T28114] UDC core: couldn't find an available UDC or it's busy: -16 [ 1474.106333][T28114] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1474.518998][T28114] UDC core: couldn't find an available UDC or it's busy: -16 [ 1474.526593][T28114] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1474.536121][T28114] UDC core: couldn't find an available UDC or it's busy: -16 [ 1474.544080][T28114] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1474.755466][T18144] usb 6-1: USB disconnect, device number 104 17:47:50 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010000de7e000009058b1e20"], 0x0) syz_usb_ep_read(r0, 0x0, 0x17, &(0x7f0000000340)=""/23) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "b273d32d", {0x3, 0x6, 0x0, 0x3f, 0x5e91, 0x2, 0x14}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) (async) r2 = syz_usb_connect(0x3, 0x1645, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0xd, 0x5, 0xcc, 0x8, 0xccd, 0x8e, 0xf444, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1633, 0x4, 0x4b, 0x4, 0xc0, 0x3, [{{0x9, 0x4, 0x8c, 0x81, 0x0, 0x2f, 0xf, 0xd5, 0x7, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "788c"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5, 0x8000, 0x80}, {0x6, 0x24, 0x1a, 0x2, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0xfff8}]}]}}, {{0x9, 0x4, 0xe5, 0x2, 0x10, 0xc5, 0x8c, 0xb8, 0x7f, [@generic={0x96, 0x22, "d9388283c99e5db4c698133bab4de813f2e09a5babffe4726abbdfc09aa8d29102bc6f9b4fb9f47067a247afb76dfe18fab06e3ea15742069e340591a603b6fdd4dda3e35b30bc36440bc895c60a9b9641eeeddf517be1c3e23cb84636d103a2b782b4d8a1c130c4a14be3212d3c593d7adc26fe5c13b3e69c7db9831d462b2b490c1ac98e536cbc81377757f7307f18eae469f0"}], [{{0x9, 0x5, 0x9, 0x8, 0x200, 0x80, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x56, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xcb, 0xfb, 0x0, [@generic={0xd2, 0x2, "b06e2079a995c1e41ebd14cab8e65b05ccefcdf083b093a106168569005d1004d7084ed0c6b067aa49fd3ddd5e0242606c3e8197a3a4f832731fe71aeb91ecb1643784ea6836edc40d6afa83a6bf27e44c5615ca5f55f2f7d5d6ed17616058e425ce3a6ad6f24d75977317c0ef0808bb03cf702ccea1ab7faefe1d72a73ba3aacb310b8060047c543da4a05ab0e9d289bc76c65ced6500aa20eed741f7140f3389660f06707e1d72f5e3449033612885ca74cec3675f4f0bba95f33ef5eab34c1b669cf3c0fe2fe43f5a93261f53419c"}, @generic={0x62, 0x23, "c68ee638131a5927ad488795020ff655d1a54005914b5b59bc444d2c6618ceaea4b6e0b3e47f9e5b96abb1f11e1ba316aca22a74a056bbcec7e44af6401a9b659baa92a8d24f94ba76d47edfd2a05a85a0fc90dd370f25879d79a1f27bb8308d"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x4, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x400}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x1f, 0x9, 0x62, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x4, 0x5}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x81, 0x61, 0xcf, [@generic={0x45, 0xe, "e3893524d8800abfa418186fc625506f4c73bf5288ef900737162649fc4436f4f27c750ced2f8c81d23b183e806b743a8daaa342ffba03cc07e624ca630f6c35a98b48"}, @generic={0x6f, 0x6, "4af202cadcf59e879bce23fc9fc5de9b7c3ece71e568e684250cf4d18c26715d3cbe38c8bc3bca16e6a9dd2a21a7fc82af895b382383fa6ae2cf31fd00e384def3b51bc3341a5b0dcca0ad333744bd8ae65678b22fdb7c16cbe7f7c2832309f002b7de3220f31dcf0952db515d"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xab, 0x7f, 0x7, [@generic={0x52, 0x6, "b22a7dca8b95e28d7aa9096785b2d6e150f09fdfff4762ad3ae933f1ec10ac47c7d657a7a7be1469dc1b643760ddb21ad4787c741ac33456db0bb50b2fc45535afa607e571dc312c269dcd048a467b75"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x20}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x9, 0x80, 0x8, [@generic={0x13, 0x0, "12792cf75c898b02fbef3d0f5e924d5c38"}, @generic={0x2d, 0x7, "9d752b418bc696d900b575adbbc2beca6df3b4e370480b60746fc0c5c1a3b24752c49757c2dba035d02441"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x400, 0x3f, 0x19, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3}]}}, {{0x9, 0x5, 0xe, 0x11, 0x40, 0x9, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5}, @generic={0x4a, 0x4, "588995009ab80ad71a96543d156253dd22a64894b75dbcf1fb45b1b34096c1a40f84447caba6dc5e10afc5d5ba7df15447ea51ebcb2c16e08ef325d6f34d5d53f61f665b83dd5bc6"}]}}, {{0x9, 0x5, 0x5, 0x18, 0x8, 0xc0, 0x20, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x2c}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0xfe, 0x7, 0x9, [@generic={0xee, 0x6, "ac29ad8f9e58b5b871d8cfc43a924b34f529d6fd00923beecd90d96c9e9feb4062c484d2329cc5396fa3a9bf588947a1f628c9995f173a116c7373ec058eea0c48d803130d7998bacdb1a2c66edd3788dc6347f3f30a0c8364e95d2a2a34ca4e07a82139d75532a68f655a6a3a20839e08b00281e7131bde8a2aef2c985b2d5c2d1df853b3ae927d6b516908deb5a43f6ee4370d7689c97a00094da353e3a94ea4c47d0d56cb351b7d63b35095bdd9364e87a5078f102c7e6d9b6048fdb08f37677287cc30aae080e9fde0be3d3a515238a29efe72a7adba60424ceb860abc75292e005173df8aa643a286a1"}, @generic={0x47, 0x9, "8ea154e23977190607edd090d7c5c101494b62416e3c52a107c1fd6ec0fee2cfec8a84be813400e06fa4a06e67c9794dc2d6ce83386bc186980d611dadb93b649b316cec33"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x8, 0x7, 0x3, [@generic={0x61, 0x14, "d544233e0d7c064ee46bf41a6fcaec86eb9d3e73bc80bbd16134ccc5229d05c305014c190e22d2c7826884e8c86e3fe1cfa761674aa5d926ee0e270ddd0690635d2ac6fa2c3d0601806f099c7ce85b1324575f1a0155e2f46303173ed60139"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x5, 0xf0, 0x5, [@generic={0xd5, 0x8, "01646a96ae3899355ee00f3ebad7d87ff555ccb6b0237d09c2abf10e61bacacd735b99c45258112689529452888d0393982eba19bc752630a9e57fec19d26e498b700cbe36f3b07c447b6482e15372014cb49f43db44fbb493f948355f8391c97f07faeeb5af49b918f0df567e9ef959acc3ef79e3430cc37bc77c17376209f85384ec39d7e9ae5cb462de37054374e40f7e6f418b211708b953de6d964543268615b3a8856ac14b07d78e1079af0b8f372657fbd5da90e11ca2961fe2a83e8499f027082119e218349042f0ed8e875f904834"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x9, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0xf800}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x81}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x5, 0x8, 0x80, [@generic={0x93, 0xe, "993abf88678f07eabf060882b2607ea35573af67f247af229b9c1898fbabcf87f5cb7e8c750bbb623b4197ecdb4bfab485ede8a441ef93685101d5b9960ad9c3298da73fb228aa7638acbb3daf356ba78cd15f38da526d55854b5ac97e221187a5e48301d0be8af686268854967dd2875c0b6941a19fed5a0b34ef48b08e7ca9f213b6eb925629dbbb19c632b1c66c0d4f"}, @generic={0xd7, 0x9, "913953bcd2356474db681843113ad02224322a643f1fdf16f71b646b25df5be11dd885a0a033fe7435801b4b81cce9b77cbdb763b155d3550aaf83c52ce153d67297496b8797af0e98b75fcff064377a041a2339a07dd8ae5794b579ad8bbe7e71ec65fb26df92c17e5a1dd494e533a23f267ef05add7097487358bdc67016297adee102a7b64b5a05962d71b4f3a030fd57e2666e06694c472390b2ff5e4fb4c3cf9b80747ab5cd41620ed4ead513546bd44402227ae581608058bcf6a40ef81a002d3efbea0aea67165bec6e4cb58be4cfeb93fe"}]}}]}}, {{0x9, 0x4, 0x1, 0x3a, 0xf, 0xb, 0xc6, 0x18, 0xf7, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, 'fiq'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0x200, 0xd}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @country_functional={0xc, 0x24, 0x7, 0x5, 0x2, [0x40, 0x0, 0x2]}, @country_functional={0xe, 0x24, 0x7, 0xbd, 0x1, [0x1ff, 0x7, 0xee, 0x3]}, @acm={0x4, 0x24, 0x2, 0x3}]}], [{{0x9, 0x5, 0xc, 0x4, 0x200, 0x6, 0x6, 0x8, [@generic={0xfd, 0x7, "ab0402bd2841ce891a854b775bd35a9fb6bd49bba7f60d2d9fa70f5dc319ca759866ac4cb90999e1e70999d9655fe11286fc4bdbb24e1bd68d6f2dbd0823142041e8e8e7c3e16314019db28ebd9f3f7d9acf08a29c90e752a37dca9663851fd6f3e70ad8774be9abe4f1a1cea8f7c6afe9e48f669785b86b47fc2d031ac73df68a09af8ef2bdf2b4cefe0c708268d1adae137e34083f4b5ecd9055a08bca8dcd90fb15e8ee416fee6aef6aba8c23c281452d744b32e2d3aa6a0c75a586e3836ebd81e1ba5e5ccd28a1d8bc0a83024a0b840f76797b079e7fdbe0acc9f7b3b57d1d0c5215b1d32fe896ce7f8053d6fba58d0dabf6abc231e4a0e252"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x228, 0x3, 0x1, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xc594}]}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0xe, 0x5, 0x7f, [@generic={0x15, 0x24, "5ec50812f8b9793babd9233f8cff507d00499d"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x31, 0x6, 0xb7, [@generic={0xa8, 0x22, "adfb4e2403d0bb3190b19c541741634d79b9f0c64d6b23c92773666f8e85dbef7d4f5f5124af66ab603f8e7b6556595aefb1e0c0afc247709dfe7ab4cbbcd4881be6cab1e778395333bf213df4aab7ec8c58dc59cd73081f6e61e87b198595fc368985137b385576cb9e8d1da43017263f14b0c0d5015a8d8f47e443152c89f7d794890d7161db1a46a99f3fe5bcf49b5983a81cef023bb0889bbf7a1f38dab2e73182186761"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x7d, 0x80, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x401}, @generic={0x16, 0x21, "077492218a865fca89879615b6a96789faa7990a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x5}, @generic={0x58, 0xc, "f6e650561ab2bce4661b3d8c914c71e6210d00382e9bb49f8aec49f5acf9e6ba3fae50abd8305ede6d681fbb268f143ea94cf614ec85851592cca8001f5c7370db4b174e55c27dca2f101cf142a07f38d391988baece"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x20, 0x7, 0x65, [@generic={0x40, 0x5, "0ebb1dacbaccc1daf08a8a290f3aca057a69ae41317366962bc5f84a07668489541268051091ffc68f98a2c724b4b3246d69bf4219894cb8ae00a7cc9ddb"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0xff, 0x7, 0xec, [@generic={0x33, 0xd, "1eb64a8943d93e4ebbf49130ed54aa5168b76a776df5492e7df3d76a03a369ca1007a2d95e74ef8d462812c0e4688a935d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x9}]}}, {{0x9, 0x5, 0x8c, 0xa, 0x200, 0x5, 0x45, 0x3f, [@generic={0x102, 0xe, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x400}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x0, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x7}, @generic={0x49, 0xa, "8affcaa1936032747cce85f147a3c8e7cb93815654e41d8e4666f28c78ec09f7fa98fe84caeb4ba626edc21386ae5f7da32a86e99097df65c2d21d58dbff2d7c11754506af4b41"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x7, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x5, 0x110}]}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0x0, 0x2, 0x2, [@generic={0x5e, 0x23, "52876a7836d41fdcc941e317727937553385832e702fd03e551f649fa8ba9b92d291fb0fd0af14bfeb51e06cbd93698bb75d1954889ab10f0e4481f8bcb189a01e673dbd3f425584c8e36a457f09d2119179bfcec2f91ee6098d4217"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0xde, 0x80, 0x2, [@generic={0x7b, 0x5, "9a98dd928856367d510420c1dc368b804453f882004139e7c79ac77859db8f9c2b1251f7e116b506720587ba3a7375faadb247e7f1bf817310e790056d8ff463049a7d34df8ddae1ca26c90aa1c3b97595abb18036b8bf186cf94509440285c72e3553ccecf1d0c033fab78ab742ca69cf93c923dbabeafd72"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x7}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x4, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x1ed4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7f}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x8, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x53, 0x8000}]}}]}}, {{0x9, 0x4, 0x69, 0x3f, 0xa, 0xff, 0xff, 0xff, 0x3f, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x40, 0x1, 0x0, 0x1f, "04ab1fed2d53f8"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x0, 0x80, "b4af77d100114bb7"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x8, 0x1, "", "289b32"}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "87d0191bd5"}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0x5, 0x4}, {0x6, 0x24, 0x1a, 0x4, 0x28}, [@mdlm_detail={0x35, 0x24, 0x13, 0x7, "5250efa165cdfb86d532e8b30031d949b73e40369303039fe34a82e77f7f45edfb0f20c0b6de2e466aba8493502fe8a32c"}, @mdlm_detail={0x6f, 0x24, 0x13, 0x4, "2db75712511168286113f65c7fc0f324b57f8432601752706e2d8838fee9a1486f099059003fb83285784c8c170d1e4ad635ec1ca13e33e6d2ae14ec1397ecc7155fb163c6aead4b7df72c432c80b78e40293c5f70c72e668538a72916e9c3713bd24cad4bdcbb575a85c0"}, @mdlm_detail={0x2e, 0x24, 0x13, 0x8, "ca500a4dabe4957a3f61b1c3d16b7a780bf78fba06923904f798e10c426d6793b29d3c0cb580a9bdf6cf"}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x3e, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1f}]}], [{{0x9, 0x5, 0x7, 0x4, 0x20, 0xa9, 0x63, 0x8, [@generic={0x43, 0x21, "60e227e073bdd367e8a4c4d202d8e8fe70af78cac83f2015f24aca8b791397ac5748f9e401b1379946f28c9d9d6fe53d733c65b6bd9b37fa11fe15fb514063db97"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x3, 0x7, 0x4, [@generic={0x4d, 0x23, "e1501209389817ed958e58d7f68120e5268b3ea977a6787eec106e2b47d407630eaa09358dbed2c64f04b972f39e96f81fbd7c7a234948be80a37afc2e943f833fee3ab67f7a21e50a3927"}, @generic={0xd7, 0x23, "adfdb659cebf92e16c04319ce428b542681c6586fb7164bb8204f4bc11fa0fc814079c6003d37b2bb7007d40716b4fc14bb1635c35c139d682b8fdf1167fe69a9d5c4a4d66c657ecf81c0e96cacb5d3420fde14733d9fb2f66bde1f53ba4a5ccadb364a79305394068c45b981a582105ca414f96407a7bd2b69e2373fe9b49d3a3170594ccc8bf8550701617bdf3a3f7f32e3afeb0e2607e39bfe32184208bbae5f9f267256984d38d169f6bdc8e87adf9faedf015f2d9e9fb01ada0af9442640865b8580b114b0edc095798735594b8c7e275901a"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x9, 0x9, 0x0, [@generic={0x62, 0x23, "2b5ff443edcfbce666f9acfad8734a62633d3660b1086d644ad7139f1d3ffa642d19500e583c823a026019d612795056394c54ff0abddea54354684d23d53ff5a3c3f80dfb78fd89c543494469782fa16a34563afdcb008f58932b8e13e7f47a"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x5, 0x36, 0x27, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9}]}}, {{0x9, 0x5, 0x85, 0x2, 0x40, 0x2, 0x6b, 0x81, [@generic={0xa1, 0x23, "ed81a859f6999396f39ca1acaae5a9afbaf31a7d93fd2a132ff0c1f374a516189b7eda1b6d8f59bad6368fa0a395400bebaa29c7f6831fe5c9caae47478e672a855fbaa660243ee2c61ffe11999067cb2159e45e1b863c4616dbf050928b2eae25ab0221b31c0346b8c8c133e0261732c349d7e34d1ec73a59c88d9c27cec64f3b2338027c4ce9b2b30840642e4ea29f0d6603b8f822296eae8c0eecf94ea5"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x40, 0x2, 0x4, [@generic={0x99, 0x9, "447936b0e6f3f81bf82d255f310068d22629202942b4e86dc149db7dd569a77390c507517dddb80b5ea93b4e9f02faf2616987305c6aee3241fcf2f4749c6538d4221725a1a705ac21081da52eb23673228ca51c5792e367390aa1367973a52eff2a0a313a87a021075d2ac0a4560594525b62fba08e1a139fcf28f6c60c1a1498014a95a3850accdfc3b79f5c39675026870c5b55f567"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x20, 0x6, 0x1, [@generic={0x75, 0xa, "24f14c52d852deb4ad2c1032cac0fe6ed2ad64c97a9a187bf04b09d019adb43a3da29905024b9c636a008f8eb8859fad0a394809f67acf1b4fe5cbae4316f4748028a2ac2e7ae047e88d6803276a11d74b0fe238d6077144ab5ef181e03b776ac8a92f093c5b805a270eb578c654746990bc5e"}, @generic={0xd4, 0x4, "7743455c1b3fd9ae82468327177e786c90200933c2bc7c29def24396a0cdfb54816e24035cd42a56a8955ab8da1e2ab6d0f76a794486ff0b4e26badd1c8d11c54c7c0dc953be6751b13a8c7b2745052263a1edb1bf22bd7877d0258899794adcd19aeeb1ef5afda555d1cee102f5e88b5a3e8cd7823dc65a9669c3a84479fd844be5d0ecc525807282c787c562a53a04865d2b1b0f2364fc37fd0219d537cd12d9fc790746fc39d8e929354079a02f2dcfef18be4ecba46ebb5fe6aab8eaa747a669a8d5313938e76eb5f99b8338522b8476"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x2, 0x2, 0x6, [@generic={0xd6, 0x0, "8920a0a6b96b483d703f14787d517c6304d4416eb73685bfa15ae1317082bce251e0b20b6c94cfdc0d8e61f6a1dc5c8238a9326e65ffb06d5728f47d94c5164cae9383355c3dfc7dd2b684fa8f07987719d2e74eae2d739c132d0b5af9451d23f5b85b6956b85ab21ac1bcd8923438646093e1255b87f64c99e74a29417ef6fdd9b894dfa19170c7e176eb3895d850c565e0c250f5e2f45ac173f5e2cc1a1f8ba91090911c2b15c4de2a8365f1c04da3568521e11c3d7995394797bd5a4299f19db418647f6489fe713590966f07d118fbc770db"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xf8, 0x3, 0x3, [@generic={0x68, 0xf, "e609dcdab8748afb399a652a513e5bdd4852714b890da37e790ce034e9a4824ba7003f7c39707531163c3000f9465433330f40fd56eed64a830ae084ec4a817d7e47388675c86ca0db8547f78726fe4cde8c4738d95211ac09447f5ecc8e3c780b0c4fc1869c"}, @uac_iso={0x7, 0x25, 0x1, 0x87, 0x80, 0x40}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x3, 0x0, 0x8, [@generic={0xd1, 0x23, "669b9873644ef86ddd4f515952c96b1323ee900745449f94b449bac2e11008361334e04fa4726124b95acd5238867ffa6210a5d24aada1543e83da8e55dc7aae5182258b804fc1fea2491cdd0cb4b6d06fd6f21af2b6d3c21de736d1a9f2d86c51de0b89112012bef30510f9ee2b2a676a5442108d2782b70dd03133c58d25c0b249ddbfd6bb848f6ef575d5f3ad8441c0a706431aefcb8e743603b41b3cf94accac39f383268fdd65949680b5fd35ec29d01827ccb7b827c9b778edca8efd85a884330efcf3ae90ccf11c68cec69d"}]}}]}}]}}]}}, &(0x7f0000001fc0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x4, 0xa0, 0x7, 0x10, 0xf7}, 0x2b, &(0x7f0000000140)={0x5, 0xf, 0x2b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x1, 0x84d}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x2, 0x80, 0xf6, 0x1f}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x6, 0x9, 0xc8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x60, 0x7, 0x5}]}, 0x6, [{0xab, &(0x7f0000000240)=@string={0xab, 0x3, "96fd08bf8a99b2e0d5b5c22c0abec076b3dbdc4e765ccc69306cb81d08207bef989b177b0f7405150a297252c41b6b449bddb99228b55aa3f4ee0d0562929ae402ce940254954f914f7010373706e1bc84f8316e47831d8002d5d968857e2489a1243469d5f6f2f1fdee3e4e5ece529d24915b9051568f38dfc68624e19e3cd1af85711eae278e20bf42f45539e94a82e3c1fce617d810cf26327e707fb91c11b78f6356ca00dd383d"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001f80)=@lang_id={0x4, 0x3, 0x408}}]}) (async) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000001b00)=@ready={0x0, 0x0, 0x8, "b623c463", {0x1, 0x8, 0x7, 0x0, 0x9}}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xa6, &(0x7f0000002040)=@generic={0x6, 0x0, 0x9e, "de282471", "4ca55602f05a8b9c9b88cd18faa4868aa990044e279751fe71de3263e383db56401e26c3759a456f841a20c4a714ec5243db0750a46a61cbaaad5e686a6fe83b7b5a75cbf54c91a2aeab18c6a5b63b295d5023cd158e9e4d493ec9abb7a28daf64d964b793b23b0c68bd339f8b24ed7264622e65befe861a93ad2119ee8ff42cd6fa4d993e5cfbdd71843eb24a96b4ca01d5ebddcb3106d4e82637df04f9"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:47:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x320) 17:47:50 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0xf0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x28}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x28d) 17:47:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003920400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1475.291798][T28143] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:50 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x300, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local={0xac, 0x3}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x28e) 17:47:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x320) 17:47:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000930400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1475.368672][T28150] UDC core: couldn't find an available UDC or it's busy: -16 [ 1475.418198][T28150] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1475.421488][T28160] UDC core: couldn't find an available UDC or it's busy: -16 [ 1475.447396][T28163] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:51 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x480, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1475.474122][T28159] UDC core: couldn't find an available UDC or it's busy: -16 [ 1475.488226][T28160] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1475.506418][T28159] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1475.633586][T18143] usb 6-1: Service connection timeout for: 258 [ 1475.639949][T18143] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1475.649496][T18143] ath9k_htc: Failed to initialize the device [ 1475.656233][T18144] usb 6-1: ath9k_htc: USB layer deinitialized [ 1476.023554][T18144] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1476.383658][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1476.543735][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1476.552821][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.562176][T18144] usb 6-1: Product: syz [ 1476.566744][T18144] usb 6-1: Manufacturer: syz [ 1476.580937][T18144] usb 6-1: SerialNumber: syz [ 1476.624695][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1477.203649][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1477.409960][T25435] usb 6-1: USB disconnect, device number 105 17:47:53 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010000de7e000009058b1e20"], 0x0) syz_usb_ep_read(r0, 0x0, 0x17, &(0x7f0000000340)=""/23) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "b273d32d", {0x3, 0x6, 0x0, 0x3f, 0x5e91, 0x2, 0x14}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) (async) r2 = syz_usb_connect(0x3, 0x1645, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0xd, 0x5, 0xcc, 0x8, 0xccd, 0x8e, 0xf444, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1633, 0x4, 0x4b, 0x4, 0xc0, 0x3, [{{0x9, 0x4, 0x8c, 0x81, 0x0, 0x2f, 0xf, 0xd5, 0x7, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "788c"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5, 0x8000, 0x80}, {0x6, 0x24, 0x1a, 0x2, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0xfff8}]}]}}, {{0x9, 0x4, 0xe5, 0x2, 0x10, 0xc5, 0x8c, 0xb8, 0x7f, [@generic={0x96, 0x22, "d9388283c99e5db4c698133bab4de813f2e09a5babffe4726abbdfc09aa8d29102bc6f9b4fb9f47067a247afb76dfe18fab06e3ea15742069e340591a603b6fdd4dda3e35b30bc36440bc895c60a9b9641eeeddf517be1c3e23cb84636d103a2b782b4d8a1c130c4a14be3212d3c593d7adc26fe5c13b3e69c7db9831d462b2b490c1ac98e536cbc81377757f7307f18eae469f0"}], [{{0x9, 0x5, 0x9, 0x8, 0x200, 0x80, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x56, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xcb, 0xfb, 0x0, [@generic={0xd2, 0x2, "b06e2079a995c1e41ebd14cab8e65b05ccefcdf083b093a106168569005d1004d7084ed0c6b067aa49fd3ddd5e0242606c3e8197a3a4f832731fe71aeb91ecb1643784ea6836edc40d6afa83a6bf27e44c5615ca5f55f2f7d5d6ed17616058e425ce3a6ad6f24d75977317c0ef0808bb03cf702ccea1ab7faefe1d72a73ba3aacb310b8060047c543da4a05ab0e9d289bc76c65ced6500aa20eed741f7140f3389660f06707e1d72f5e3449033612885ca74cec3675f4f0bba95f33ef5eab34c1b669cf3c0fe2fe43f5a93261f53419c"}, @generic={0x62, 0x23, "c68ee638131a5927ad488795020ff655d1a54005914b5b59bc444d2c6618ceaea4b6e0b3e47f9e5b96abb1f11e1ba316aca22a74a056bbcec7e44af6401a9b659baa92a8d24f94ba76d47edfd2a05a85a0fc90dd370f25879d79a1f27bb8308d"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x4, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x400}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x1f, 0x9, 0x62, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x4, 0x5}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x81, 0x61, 0xcf, [@generic={0x45, 0xe, "e3893524d8800abfa418186fc625506f4c73bf5288ef900737162649fc4436f4f27c750ced2f8c81d23b183e806b743a8daaa342ffba03cc07e624ca630f6c35a98b48"}, @generic={0x6f, 0x6, "4af202cadcf59e879bce23fc9fc5de9b7c3ece71e568e684250cf4d18c26715d3cbe38c8bc3bca16e6a9dd2a21a7fc82af895b382383fa6ae2cf31fd00e384def3b51bc3341a5b0dcca0ad333744bd8ae65678b22fdb7c16cbe7f7c2832309f002b7de3220f31dcf0952db515d"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xab, 0x7f, 0x7, [@generic={0x52, 0x6, "b22a7dca8b95e28d7aa9096785b2d6e150f09fdfff4762ad3ae933f1ec10ac47c7d657a7a7be1469dc1b643760ddb21ad4787c741ac33456db0bb50b2fc45535afa607e571dc312c269dcd048a467b75"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x20}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x9, 0x80, 0x8, [@generic={0x13, 0x0, "12792cf75c898b02fbef3d0f5e924d5c38"}, @generic={0x2d, 0x7, "9d752b418bc696d900b575adbbc2beca6df3b4e370480b60746fc0c5c1a3b24752c49757c2dba035d02441"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x400, 0x3f, 0x19, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3}]}}, {{0x9, 0x5, 0xe, 0x11, 0x40, 0x9, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5}, @generic={0x4a, 0x4, "588995009ab80ad71a96543d156253dd22a64894b75dbcf1fb45b1b34096c1a40f84447caba6dc5e10afc5d5ba7df15447ea51ebcb2c16e08ef325d6f34d5d53f61f665b83dd5bc6"}]}}, {{0x9, 0x5, 0x5, 0x18, 0x8, 0xc0, 0x20, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x2c}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0xfe, 0x7, 0x9, [@generic={0xee, 0x6, "ac29ad8f9e58b5b871d8cfc43a924b34f529d6fd00923beecd90d96c9e9feb4062c484d2329cc5396fa3a9bf588947a1f628c9995f173a116c7373ec058eea0c48d803130d7998bacdb1a2c66edd3788dc6347f3f30a0c8364e95d2a2a34ca4e07a82139d75532a68f655a6a3a20839e08b00281e7131bde8a2aef2c985b2d5c2d1df853b3ae927d6b516908deb5a43f6ee4370d7689c97a00094da353e3a94ea4c47d0d56cb351b7d63b35095bdd9364e87a5078f102c7e6d9b6048fdb08f37677287cc30aae080e9fde0be3d3a515238a29efe72a7adba60424ceb860abc75292e005173df8aa643a286a1"}, @generic={0x47, 0x9, "8ea154e23977190607edd090d7c5c101494b62416e3c52a107c1fd6ec0fee2cfec8a84be813400e06fa4a06e67c9794dc2d6ce83386bc186980d611dadb93b649b316cec33"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x8, 0x7, 0x3, [@generic={0x61, 0x14, "d544233e0d7c064ee46bf41a6fcaec86eb9d3e73bc80bbd16134ccc5229d05c305014c190e22d2c7826884e8c86e3fe1cfa761674aa5d926ee0e270ddd0690635d2ac6fa2c3d0601806f099c7ce85b1324575f1a0155e2f46303173ed60139"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x5, 0xf0, 0x5, [@generic={0xd5, 0x8, "01646a96ae3899355ee00f3ebad7d87ff555ccb6b0237d09c2abf10e61bacacd735b99c45258112689529452888d0393982eba19bc752630a9e57fec19d26e498b700cbe36f3b07c447b6482e15372014cb49f43db44fbb493f948355f8391c97f07faeeb5af49b918f0df567e9ef959acc3ef79e3430cc37bc77c17376209f85384ec39d7e9ae5cb462de37054374e40f7e6f418b211708b953de6d964543268615b3a8856ac14b07d78e1079af0b8f372657fbd5da90e11ca2961fe2a83e8499f027082119e218349042f0ed8e875f904834"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x9, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0xf800}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x81}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x5, 0x8, 0x80, [@generic={0x93, 0xe, "993abf88678f07eabf060882b2607ea35573af67f247af229b9c1898fbabcf87f5cb7e8c750bbb623b4197ecdb4bfab485ede8a441ef93685101d5b9960ad9c3298da73fb228aa7638acbb3daf356ba78cd15f38da526d55854b5ac97e221187a5e48301d0be8af686268854967dd2875c0b6941a19fed5a0b34ef48b08e7ca9f213b6eb925629dbbb19c632b1c66c0d4f"}, @generic={0xd7, 0x9, "913953bcd2356474db681843113ad02224322a643f1fdf16f71b646b25df5be11dd885a0a033fe7435801b4b81cce9b77cbdb763b155d3550aaf83c52ce153d67297496b8797af0e98b75fcff064377a041a2339a07dd8ae5794b579ad8bbe7e71ec65fb26df92c17e5a1dd494e533a23f267ef05add7097487358bdc67016297adee102a7b64b5a05962d71b4f3a030fd57e2666e06694c472390b2ff5e4fb4c3cf9b80747ab5cd41620ed4ead513546bd44402227ae581608058bcf6a40ef81a002d3efbea0aea67165bec6e4cb58be4cfeb93fe"}]}}]}}, {{0x9, 0x4, 0x1, 0x3a, 0xf, 0xb, 0xc6, 0x18, 0xf7, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, 'fiq'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0x200, 0xd}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @country_functional={0xc, 0x24, 0x7, 0x5, 0x2, [0x40, 0x0, 0x2]}, @country_functional={0xe, 0x24, 0x7, 0xbd, 0x1, [0x1ff, 0x7, 0xee, 0x3]}, @acm={0x4, 0x24, 0x2, 0x3}]}], [{{0x9, 0x5, 0xc, 0x4, 0x200, 0x6, 0x6, 0x8, [@generic={0xfd, 0x7, "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"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x228, 0x3, 0x1, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xc594}]}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0xe, 0x5, 0x7f, [@generic={0x15, 0x24, "5ec50812f8b9793babd9233f8cff507d00499d"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x31, 0x6, 0xb7, [@generic={0xa8, 0x22, "adfb4e2403d0bb3190b19c541741634d79b9f0c64d6b23c92773666f8e85dbef7d4f5f5124af66ab603f8e7b6556595aefb1e0c0afc247709dfe7ab4cbbcd4881be6cab1e778395333bf213df4aab7ec8c58dc59cd73081f6e61e87b198595fc368985137b385576cb9e8d1da43017263f14b0c0d5015a8d8f47e443152c89f7d794890d7161db1a46a99f3fe5bcf49b5983a81cef023bb0889bbf7a1f38dab2e73182186761"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x7d, 0x80, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x401}, @generic={0x16, 0x21, "077492218a865fca89879615b6a96789faa7990a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x5}, @generic={0x58, 0xc, "f6e650561ab2bce4661b3d8c914c71e6210d00382e9bb49f8aec49f5acf9e6ba3fae50abd8305ede6d681fbb268f143ea94cf614ec85851592cca8001f5c7370db4b174e55c27dca2f101cf142a07f38d391988baece"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x20, 0x7, 0x65, [@generic={0x40, 0x5, "0ebb1dacbaccc1daf08a8a290f3aca057a69ae41317366962bc5f84a07668489541268051091ffc68f98a2c724b4b3246d69bf4219894cb8ae00a7cc9ddb"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0xff, 0x7, 0xec, [@generic={0x33, 0xd, "1eb64a8943d93e4ebbf49130ed54aa5168b76a776df5492e7df3d76a03a369ca1007a2d95e74ef8d462812c0e4688a935d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x9}]}}, {{0x9, 0x5, 0x8c, 0xa, 0x200, 0x5, 0x45, 0x3f, [@generic={0x102, 0xe, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x400}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x0, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x7}, @generic={0x49, 0xa, "8affcaa1936032747cce85f147a3c8e7cb93815654e41d8e4666f28c78ec09f7fa98fe84caeb4ba626edc21386ae5f7da32a86e99097df65c2d21d58dbff2d7c11754506af4b41"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x7, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x5, 0x110}]}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0x0, 0x2, 0x2, [@generic={0x5e, 0x23, "52876a7836d41fdcc941e317727937553385832e702fd03e551f649fa8ba9b92d291fb0fd0af14bfeb51e06cbd93698bb75d1954889ab10f0e4481f8bcb189a01e673dbd3f425584c8e36a457f09d2119179bfcec2f91ee6098d4217"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0xde, 0x80, 0x2, [@generic={0x7b, 0x5, "9a98dd928856367d510420c1dc368b804453f882004139e7c79ac77859db8f9c2b1251f7e116b506720587ba3a7375faadb247e7f1bf817310e790056d8ff463049a7d34df8ddae1ca26c90aa1c3b97595abb18036b8bf186cf94509440285c72e3553ccecf1d0c033fab78ab742ca69cf93c923dbabeafd72"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x7}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x4, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x1ed4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7f}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x8, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x53, 0x8000}]}}]}}, {{0x9, 0x4, 0x69, 0x3f, 0xa, 0xff, 0xff, 0xff, 0x3f, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x40, 0x1, 0x0, 0x1f, "04ab1fed2d53f8"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x0, 0x80, "b4af77d100114bb7"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x8, 0x1, "", "289b32"}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "87d0191bd5"}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0x5, 0x4}, {0x6, 0x24, 0x1a, 0x4, 0x28}, [@mdlm_detail={0x35, 0x24, 0x13, 0x7, "5250efa165cdfb86d532e8b30031d949b73e40369303039fe34a82e77f7f45edfb0f20c0b6de2e466aba8493502fe8a32c"}, @mdlm_detail={0x6f, 0x24, 0x13, 0x4, "2db75712511168286113f65c7fc0f324b57f8432601752706e2d8838fee9a1486f099059003fb83285784c8c170d1e4ad635ec1ca13e33e6d2ae14ec1397ecc7155fb163c6aead4b7df72c432c80b78e40293c5f70c72e668538a72916e9c3713bd24cad4bdcbb575a85c0"}, @mdlm_detail={0x2e, 0x24, 0x13, 0x8, "ca500a4dabe4957a3f61b1c3d16b7a780bf78fba06923904f798e10c426d6793b29d3c0cb580a9bdf6cf"}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x3e, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1f}]}], [{{0x9, 0x5, 0x7, 0x4, 0x20, 0xa9, 0x63, 0x8, [@generic={0x43, 0x21, "60e227e073bdd367e8a4c4d202d8e8fe70af78cac83f2015f24aca8b791397ac5748f9e401b1379946f28c9d9d6fe53d733c65b6bd9b37fa11fe15fb514063db97"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x3, 0x7, 0x4, [@generic={0x4d, 0x23, "e1501209389817ed958e58d7f68120e5268b3ea977a6787eec106e2b47d407630eaa09358dbed2c64f04b972f39e96f81fbd7c7a234948be80a37afc2e943f833fee3ab67f7a21e50a3927"}, @generic={0xd7, 0x23, "adfdb659cebf92e16c04319ce428b542681c6586fb7164bb8204f4bc11fa0fc814079c6003d37b2bb7007d40716b4fc14bb1635c35c139d682b8fdf1167fe69a9d5c4a4d66c657ecf81c0e96cacb5d3420fde14733d9fb2f66bde1f53ba4a5ccadb364a79305394068c45b981a582105ca414f96407a7bd2b69e2373fe9b49d3a3170594ccc8bf8550701617bdf3a3f7f32e3afeb0e2607e39bfe32184208bbae5f9f267256984d38d169f6bdc8e87adf9faedf015f2d9e9fb01ada0af9442640865b8580b114b0edc095798735594b8c7e275901a"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x9, 0x9, 0x0, [@generic={0x62, 0x23, "2b5ff443edcfbce666f9acfad8734a62633d3660b1086d644ad7139f1d3ffa642d19500e583c823a026019d612795056394c54ff0abddea54354684d23d53ff5a3c3f80dfb78fd89c543494469782fa16a34563afdcb008f58932b8e13e7f47a"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x5, 0x36, 0x27, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9}]}}, {{0x9, 0x5, 0x85, 0x2, 0x40, 0x2, 0x6b, 0x81, [@generic={0xa1, 0x23, "ed81a859f6999396f39ca1acaae5a9afbaf31a7d93fd2a132ff0c1f374a516189b7eda1b6d8f59bad6368fa0a395400bebaa29c7f6831fe5c9caae47478e672a855fbaa660243ee2c61ffe11999067cb2159e45e1b863c4616dbf050928b2eae25ab0221b31c0346b8c8c133e0261732c349d7e34d1ec73a59c88d9c27cec64f3b2338027c4ce9b2b30840642e4ea29f0d6603b8f822296eae8c0eecf94ea5"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x40, 0x2, 0x4, [@generic={0x99, 0x9, "447936b0e6f3f81bf82d255f310068d22629202942b4e86dc149db7dd569a77390c507517dddb80b5ea93b4e9f02faf2616987305c6aee3241fcf2f4749c6538d4221725a1a705ac21081da52eb23673228ca51c5792e367390aa1367973a52eff2a0a313a87a021075d2ac0a4560594525b62fba08e1a139fcf28f6c60c1a1498014a95a3850accdfc3b79f5c39675026870c5b55f567"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x20, 0x6, 0x1, [@generic={0x75, 0xa, "24f14c52d852deb4ad2c1032cac0fe6ed2ad64c97a9a187bf04b09d019adb43a3da29905024b9c636a008f8eb8859fad0a394809f67acf1b4fe5cbae4316f4748028a2ac2e7ae047e88d6803276a11d74b0fe238d6077144ab5ef181e03b776ac8a92f093c5b805a270eb578c654746990bc5e"}, @generic={0xd4, 0x4, "7743455c1b3fd9ae82468327177e786c90200933c2bc7c29def24396a0cdfb54816e24035cd42a56a8955ab8da1e2ab6d0f76a794486ff0b4e26badd1c8d11c54c7c0dc953be6751b13a8c7b2745052263a1edb1bf22bd7877d0258899794adcd19aeeb1ef5afda555d1cee102f5e88b5a3e8cd7823dc65a9669c3a84479fd844be5d0ecc525807282c787c562a53a04865d2b1b0f2364fc37fd0219d537cd12d9fc790746fc39d8e929354079a02f2dcfef18be4ecba46ebb5fe6aab8eaa747a669a8d5313938e76eb5f99b8338522b8476"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x2, 0x2, 0x6, [@generic={0xd6, 0x0, "8920a0a6b96b483d703f14787d517c6304d4416eb73685bfa15ae1317082bce251e0b20b6c94cfdc0d8e61f6a1dc5c8238a9326e65ffb06d5728f47d94c5164cae9383355c3dfc7dd2b684fa8f07987719d2e74eae2d739c132d0b5af9451d23f5b85b6956b85ab21ac1bcd8923438646093e1255b87f64c99e74a29417ef6fdd9b894dfa19170c7e176eb3895d850c565e0c250f5e2f45ac173f5e2cc1a1f8ba91090911c2b15c4de2a8365f1c04da3568521e11c3d7995394797bd5a4299f19db418647f6489fe713590966f07d118fbc770db"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xf8, 0x3, 0x3, [@generic={0x68, 0xf, "e609dcdab8748afb399a652a513e5bdd4852714b890da37e790ce034e9a4824ba7003f7c39707531163c3000f9465433330f40fd56eed64a830ae084ec4a817d7e47388675c86ca0db8547f78726fe4cde8c4738d95211ac09447f5ecc8e3c780b0c4fc1869c"}, @uac_iso={0x7, 0x25, 0x1, 0x87, 0x80, 0x40}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x3, 0x0, 0x8, [@generic={0xd1, 0x23, "669b9873644ef86ddd4f515952c96b1323ee900745449f94b449bac2e11008361334e04fa4726124b95acd5238867ffa6210a5d24aada1543e83da8e55dc7aae5182258b804fc1fea2491cdd0cb4b6d06fd6f21af2b6d3c21de736d1a9f2d86c51de0b89112012bef30510f9ee2b2a676a5442108d2782b70dd03133c58d25c0b249ddbfd6bb848f6ef575d5f3ad8441c0a706431aefcb8e743603b41b3cf94accac39f383268fdd65949680b5fd35ec29d01827ccb7b827c9b778edca8efd85a884330efcf3ae90ccf11c68cec69d"}]}}]}}]}}]}}, &(0x7f0000001fc0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x4, 0xa0, 0x7, 0x10, 0xf7}, 0x2b, &(0x7f0000000140)={0x5, 0xf, 0x2b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x1, 0x84d}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x2, 0x80, 0xf6, 0x1f}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x6, 0x9, 0xc8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x60, 0x7, 0x5}]}, 0x6, [{0xab, &(0x7f0000000240)=@string={0xab, 0x3, "96fd08bf8a99b2e0d5b5c22c0abec076b3dbdc4e765ccc69306cb81d08207bef989b177b0f7405150a297252c41b6b449bddb99228b55aa3f4ee0d0562929ae402ce940254954f914f7010373706e1bc84f8316e47831d8002d5d968857e2489a1243469d5f6f2f1fdee3e4e5ece529d24915b9051568f38dfc68624e19e3cd1af85711eae278e20bf42f45539e94a82e3c1fce617d810cf26327e707fb91c11b78f6356ca00dd383d"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001f80)=@lang_id={0x4, 0x3, 0x408}}]}) (async) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000001b00)=@ready={0x0, 0x0, 0x8, "b623c463", {0x1, 0x8, 0x7, 0x0, 0x9}}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xa6, &(0x7f0000002040)=@generic={0x6, 0x0, 0x9e, "de282471", "4ca55602f05a8b9c9b88cd18faa4868aa990044e279751fe71de3263e383db56401e26c3759a456f841a20c4a714ec5243db0750a46a61cbaaad5e686a6fe83b7b5a75cbf54c91a2aeab18c6a5b63b295d5023cd158e9e4d493ec9abb7a28daf64d964b793b23b0c68bd339f8b24ed7264622e65befe861a93ad2119ee8ff42cd6fa4d993e5cfbdd71843eb24a96b4ca01d5ebddcb3106d4e82637df04f9"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:47:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x28f) 17:47:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local={0xac, 0x13}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x320) 17:47:53 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x600, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001930400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:53 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x700, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x290) 17:47:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local={0xac, 0x28}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000}]}, 0x320) [ 1477.977400][T28176] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002930400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:53 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0xa00, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1478.131601][T28189] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1478.273633][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1478.280624][T18144] ath9k_htc: Failed to initialize the device [ 1478.287266][T25435] usb 6-1: ath9k_htc: USB layer deinitialized [ 1478.674096][T25435] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1479.053836][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1479.253895][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1479.262980][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.271844][T25435] usb 6-1: Product: syz [ 1479.276377][T25435] usb 6-1: Manufacturer: syz [ 1479.280985][T25435] usb 6-1: SerialNumber: syz [ 1479.346216][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1479.993628][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1480.204105][T28178] UDC core: couldn't find an available UDC or it's busy: -16 [ 1480.211517][T28178] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1480.222675][T28178] UDC core: couldn't find an available UDC or it's busy: -16 [ 1480.223166][T28194] UDC core: couldn't find an available UDC or it's busy: -16 [ 1480.230504][T28178] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1480.247970][T28194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1480.454191][ T7624] usb 6-1: USB disconnect, device number 106 17:47:56 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "ea0500f7", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:47:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}]}, 0x320) 17:47:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x291) 17:47:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local={0xac, 0x14, 0x3}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003930400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:56 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0xb00, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1480.990134][T28204] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local={0xac, 0x14, 0x13}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:56 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0xe00, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x320) 17:47:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x292) 17:47:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000940400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local={0xac, 0x14, 0x28}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1481.140811][T28218] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1481.324073][T25435] usb 6-1: Service connection timeout for: 256 [ 1481.330280][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1481.340302][T25435] ath9k_htc: Failed to initialize the device [ 1481.347029][ T7624] usb 6-1: ath9k_htc: USB layer deinitialized [ 1481.743659][ T7624] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1482.133900][ T7624] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1482.293789][ T7624] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1482.310116][ T7624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.318245][ T7624] usb 6-1: Product: syz [ 1482.322417][ T7624] usb 6-1: Manufacturer: syz [ 1482.327279][ T7624] usb 6-1: SerialNumber: syz [ 1482.374562][ T7624] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1483.003851][ T7624] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1483.818526][T25435] usb 6-1: USB disconnect, device number 107 [ 1484.194563][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.200877][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 17:47:59 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "ea0500f7", {0x3, 0x100}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:47:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x320) 17:47:59 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x1f00, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x293) 17:47:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001940400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:47:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:47:59 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x2000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:47:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x294) [ 1484.366218][T28230] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:47:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, 0x320) 17:47:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:48:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002940400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:00 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x2800, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1484.527387][T28243] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1484.673609][ T7624] usb 6-1: Service connection timeout for: 258 [ 1484.679827][ T7624] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1484.688131][ T7624] ath9k_htc: Failed to initialize the device [ 1484.694548][T25435] usb 6-1: ath9k_htc: USB layer deinitialized [ 1485.063631][T25435] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1485.463881][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1485.643844][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1485.652923][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.661678][T25435] usb 6-1: Product: syz [ 1485.666187][T25435] usb 6-1: Manufacturer: syz [ 1485.670799][T25435] usb 6-1: SerialNumber: syz [ 1485.735433][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1486.343912][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1486.968112][ T7624] usb 6-1: USB disconnect, device number 108 17:48:03 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "ea0500f7", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:48:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}, 0x320) 17:48:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x295) 17:48:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:48:03 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x3075, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003940400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:03 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x3400, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:48:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x296) [ 1487.521702][T28254] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x320) 17:48:03 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x3f00, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000950400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1487.716005][T28269] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1487.794042][T25435] usb 6-1: Service connection timeout for: 257 [ 1487.800239][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1487.810432][T25435] ath9k_htc: Failed to initialize the device [ 1487.817162][ T7624] usb 6-1: ath9k_htc: USB layer deinitialized [ 1488.183689][ T7624] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1488.543630][ T7624] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1488.703768][ T7624] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1488.723530][ T7624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.731564][ T7624] usb 6-1: Product: syz [ 1488.736648][ T7624] usb 6-1: Manufacturer: syz [ 1488.741271][ T7624] usb 6-1: SerialNumber: syz [ 1488.804619][ T7624] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1489.373764][ T7624] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1489.796188][T25435] usb 6-1: USB disconnect, device number 109 17:48:05 executing program 5: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:48:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x6, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:48:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x297) 17:48:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x320) 17:48:05 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x3fff, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001950400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x298) 17:48:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x7, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:48:05 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x320) [ 1490.348048][T28279] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:05 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x6000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002950400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1490.545722][T28295] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1490.673589][ T7624] usb 6-1: Service connection timeout for: 256 [ 1490.680081][ T7624] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1490.689942][ T7624] ath9k_htc: Failed to initialize the device [ 1490.696641][T25435] usb 6-1: ath9k_htc: USB layer deinitialized 17:48:06 executing program 5: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) (async) 17:48:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x8, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:48:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x299) 17:48:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x320) 17:48:06 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x7530, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003950400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:06 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x8004, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x29a) 17:48:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x320) 17:48:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x28, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1490.931080][T28306] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000960400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:06 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0xf000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1491.067854][T28318] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:06 executing program 5: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) (async) 17:48:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x320) 17:48:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x29b) 17:48:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:48:06 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0xff3f, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001960400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x29c) 17:48:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x320) 17:48:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x600, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:48:07 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0xffff, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1491.526299][T28330] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002960400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x700, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1491.659793][T28343] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x29d) 17:48:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x320) 17:48:07 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x1f00, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:48:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003960400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:07 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x5e, &(0x7f0000000100)=@generic={0x5, 0x0, 0x56, "1e616012", "92600af8b0b885bacf2600ef7e4ebb6aa2633b24e2edfdd462fd53b76b734199241f43e191942f9300821338e1e56ff83dd2282ddc81ec716427353aed81c7142286fe171f83d9de76f2782d051baede4b0fed65c2f3"}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xe5, &(0x7f0000000240)=@generic={0x1, 0x0, 0xdd, "d79efe75", "bbc298071c2f6b35d4f16d79526dd161a3be30198345d1d4a22f4c337cff241b38448ee030e823b57ff681cbfd0faa21761cdb46c33815c6cf2534371a3ae138bcf12021ecb9da2fae9a7d4139e33915b7d6ce8d2e0ba5f8fa8b1a724ae5222167c07a89986e5dce286c1168c21a7884a134308e7048d700a428f1249b9ade66cd2b9646dea1b601c66b395b1bc56b21b391fa1673f91bb189511964ce778e05b3474854c2afb7661764322336822d4794a0387d90f7a22b9e0fc74bd101d453d4f8da5a38304c33761d147ebd4c4d1f2cdcd567b54403ae2a25fe111a"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:48:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x2800, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:48:07 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x2, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x29e) [ 1492.083777][T28354] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x320) 17:48:07 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000970400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x3075, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:48:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}]}, 0x320) 17:48:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x29f) 17:48:07 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x4, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1492.270914][T28370] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x3f00, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1492.393574][T18144] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1492.783766][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1492.964345][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1492.973730][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.981830][T18144] usb 6-1: Product: syz [ 1492.986624][T18144] usb 6-1: Manufacturer: syz [ 1492.991338][T18144] usb 6-1: SerialNumber: syz [ 1493.034795][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1493.653617][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1494.278182][T28357] UDC core: couldn't find an available UDC or it's busy: -16 [ 1494.286096][T28357] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1494.497764][T25435] usb 6-1: USB disconnect, device number 110 [ 1494.913596][T18144] usb 6-1: Service connection timeout for: 256 [ 1494.920210][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1494.928820][T18144] ath9k_htc: Failed to initialize the device [ 1494.935548][T25435] usb 6-1: ath9k_htc: USB layer deinitialized 17:48:10 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x5e, &(0x7f0000000100)=@generic={0x5, 0x0, 0x56, "1e616012", "92600af8b0b885bacf2600ef7e4ebb6aa2633b24e2edfdd462fd53b76b734199241f43e191942f9300821338e1e56ff83dd2282ddc81ec716427353aed81c7142286fe171f83d9de76f2782d051baede4b0fed65c2f3"}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xe5, &(0x7f0000000240)=@generic={0x1, 0x0, 0xdd, "d79efe75", "bbc298071c2f6b35d4f16d79526dd161a3be30198345d1d4a22f4c337cff241b38448ee030e823b57ff681cbfd0faa21761cdb46c33815c6cf2534371a3ae138bcf12021ecb9da2fae9a7d4139e33915b7d6ce8d2e0ba5f8fa8b1a724ae5222167c07a89986e5dce286c1168c21a7884a134308e7048d700a428f1249b9ade66cd2b9646dea1b601c66b395b1bc56b21b391fa1673f91bb189511964ce778e05b3474854c2afb7661764322336822d4794a0387d90f7a22b9e0fc74bd101d453d4f8da5a38304c33761d147ebd4c4d1f2cdcd567b54403ae2a25fe111a"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x5e, &(0x7f0000000100)=@generic={0x5, 0x0, 0x56, "1e616012", "92600af8b0b885bacf2600ef7e4ebb6aa2633b24e2edfdd462fd53b76b734199241f43e191942f9300821338e1e56ff83dd2282ddc81ec716427353aed81c7142286fe171f83d9de76f2782d051baede4b0fed65c2f3"}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xe5, &(0x7f0000000240)=@generic={0x1, 0x0, 0xdd, "d79efe75", "bbc298071c2f6b35d4f16d79526dd161a3be30198345d1d4a22f4c337cff241b38448ee030e823b57ff681cbfd0faa21761cdb46c33815c6cf2534371a3ae138bcf12021ecb9da2fae9a7d4139e33915b7d6ce8d2e0ba5f8fa8b1a724ae5222167c07a89986e5dce286c1168c21a7884a134308e7048d700a428f1249b9ade66cd2b9646dea1b601c66b395b1bc56b21b391fa1673f91bb189511964ce778e05b3474854c2afb7661764322336822d4794a0387d90f7a22b9e0fc74bd101d453d4f8da5a38304c33761d147ebd4c4d1f2cdcd567b54403ae2a25fe111a"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) (async) 17:48:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2a0) 17:48:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x320) 17:48:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001970400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:10 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x6, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4000, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 17:48:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x7530, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1495.043290][T28389] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:10 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x7, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2a1) 17:48:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x320) 17:48:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002970400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1495.190840][T28401] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1495.493763][T25435] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1495.903752][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1496.094004][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1496.103090][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.111825][T25435] usb 6-1: Product: syz [ 1496.116459][T25435] usb 6-1: Manufacturer: syz [ 1496.121066][T25435] usb 6-1: SerialNumber: syz [ 1496.185403][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1496.823716][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1497.444619][T28392] UDC core: couldn't find an available UDC or it's busy: -16 [ 1497.452178][T28392] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:48:13 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x5e, &(0x7f0000000100)=@generic={0x5, 0x0, 0x56, "1e616012", "92600af8b0b885bacf2600ef7e4ebb6aa2633b24e2edfdd462fd53b76b734199241f43e191942f9300821338e1e56ff83dd2282ddc81ec716427353aed81c7142286fe171f83d9de76f2782d051baede4b0fed65c2f3"}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xe5, &(0x7f0000000240)=@generic={0x1, 0x0, 0xdd, "d79efe75", "bbc298071c2f6b35d4f16d79526dd161a3be30198345d1d4a22f4c337cff241b38448ee030e823b57ff681cbfd0faa21761cdb46c33815c6cf2534371a3ae138bcf12021ecb9da2fae9a7d4139e33915b7d6ce8d2e0ba5f8fa8b1a724ae5222167c07a89986e5dce286c1168c21a7884a134308e7048d700a428f1249b9ade66cd2b9646dea1b601c66b395b1bc56b21b391fa1673f91bb189511964ce778e05b3474854c2afb7661764322336822d4794a0387d90f7a22b9e0fc74bd101d453d4f8da5a38304c33761d147ebd4c4d1f2cdcd567b54403ae2a25fe111a"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x5e, &(0x7f0000000100)=@generic={0x5, 0x0, 0x56, "1e616012", "92600af8b0b885bacf2600ef7e4ebb6aa2633b24e2edfdd462fd53b76b734199241f43e191942f9300821338e1e56ff83dd2282ddc81ec716427353aed81c7142286fe171f83d9de76f2782d051baede4b0fed65c2f3"}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xe5, &(0x7f0000000240)=@generic={0x1, 0x0, 0xdd, "d79efe75", "bbc298071c2f6b35d4f16d79526dd161a3be30198345d1d4a22f4c337cff241b38448ee030e823b57ff681cbfd0faa21761cdb46c33815c6cf2534371a3ae138bcf12021ecb9da2fae9a7d4139e33915b7d6ce8d2e0ba5f8fa8b1a724ae5222167c07a89986e5dce286c1168c21a7884a134308e7048d700a428f1249b9ade66cd2b9646dea1b601c66b395b1bc56b21b391fa1673f91bb189511964ce778e05b3474854c2afb7661764322336822d4794a0387d90f7a22b9e0fc74bd101d453d4f8da5a38304c33761d147ebd4c4d1f2cdcd567b54403ae2a25fe111a"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) (async) 17:48:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2a2) 17:48:13 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x8, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}]}, 0x320) 17:48:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003970400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) [ 1497.664044][T28392] UDC core: couldn't find an available UDC or it's busy: -16 [ 1497.671465][T28392] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1497.694251][ T7624] usb 6-1: USB disconnect, device number 111 17:48:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x320) 17:48:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x3, 0x5, 0x10}}}}}}, 0x0) [ 1497.736728][T28413] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:13 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xa, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2a3) 17:48:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}]}, 0x320) 17:48:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000980400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1497.919874][T28434] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1498.113583][T25435] usb 6-1: Service connection timeout for: 256 [ 1498.119904][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1498.128782][T25435] ath9k_htc: Failed to initialize the device [ 1498.135474][ T7624] usb 6-1: ath9k_htc: USB layer deinitialized [ 1498.533577][ T7624] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1498.903662][ T7624] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1499.083685][ T7624] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1499.092862][ T7624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.101145][ T7624] usb 6-1: Product: syz [ 1499.105550][ T7624] usb 6-1: Manufacturer: syz [ 1499.110244][ T7624] usb 6-1: SerialNumber: syz [ 1499.184589][ T7624] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1499.823759][ T7624] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1500.439053][T28424] UDC core: couldn't find an available UDC or it's busy: -16 [ 1500.446748][T28424] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:48:16 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xb, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2a4) 17:48:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0x10}}}}}}, 0x0) 17:48:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320}]}, 0x320) 17:48:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001980400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1500.659864][T28424] UDC core: couldn't find an available UDC or it's busy: -16 [ 1500.669023][T28424] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1500.684681][T18144] usb 6-1: USB disconnect, device number 112 17:48:16 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000700)={0x24, &(0x7f0000000100)={0x0, 0x22, 0x8b, {0x8b, 0x21, "4d544cecc1fc92beedf0c705fdd3a04954fd03b8a84d710594b1f65276fddf4e0ed05c32a8c4f0a48e1afe772beca0863d85b9964755541cce1118a70f8d221f8ae38d13f12a3ed3a51ef7d7fecadda79931a7c5eb2a2d2cdc089e2da9970e0165d84223a98a6ad0021aadedf9adacd1965fba77d5762e206cd7d54a6138498d612cfecb0d21be7d41"}}, &(0x7f0000000640)={0x0, 0x3, 0x78, @string={0x78, 0x3, "ff97ee5498fa3194b7f409bca028eb43fd19a78e449b530267a1cc89f7234a50177c839618fa2386a8b80387c911c0358ec7d0f2455438567f26ad661d7388d0dddd566c67968f954960e8968e418ba7ed103a0ac0de4b7fae78d2d4758e953d8512b7273a8810af209a7f1aefbd25d21aae747c393a"}}, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "0790209b"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_4={0x3, 0x2, 0x9, "c9716932"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x940}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000740)={0x80, 0xc, 0xc1, "3133589d2635df17ebcea2b7f15219ec947d61e9e12909b137fe5b1cdc0e7193e75d49d1af386e4072c970364c961c42f1980a6d8ebb85e8fc3569f9110539e5b3c02fe9aeeae41bbac5d60ba430e1bf1d21c24dd937b3886ea22788440df019557912d31c140f4bae22171940353fb17594460da82d79ba0bdf19485b0e604528cbb549482f011bbb9c8dcad9dd54d9d366d9150a8924b56c3d6422a4abcbd33555eb249b35e468c6d97ed078f99bf3ab6265d3d23a4a640b6dcad44015e11fa3"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000008c0)={0x20, 0x1, 0x42, "613989029d6bbe5bf856f2fbf4ce81f790d7ec97f2ebcb9d1b58cbf52904e93976515137d6ae702afd14db4d7341da295e99259ebf160934249db74e9dae4a85315b"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x8}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x3f0, &(0x7f0000000240)={[{0x40, 0x4e00, "e015b1daa133dcf957c5c0a97f10164e7b5b56aab258d517c35129e0bfdba46d2e5a3c1dacf567781c397b90a9b503dba6fecd0ad3ba7d29c63b79427e1796f5"}, {0x19, 0x4e00, "9084baddfc681be345f0a9e8b425dd00cda540498b1eadbdc9"}, {0xf2, 0x4e00, "c76540b9ef1036bed7c9388d42848c093ea3f013b0c35bfe97b396a226b3e1aeede8c1d72dd816f98664c4f241d4c6b5c8eb154f5467e225fac66cb72e8a88f55ebf9d9254e26ce8909b6dedd99be13d9e69db9ce762d54b6a730a452a4e5128d05791f1562feef9b4e51f22a9dfe825267bbddecd0698cba6c31b9850a46d0c2c4d9c8321446aaa4a153f0455793aa528ee619d4f83a33d9ffce9dd92868cf6958b7db98d227887bf64d5741fb16c52c67aec1ddf5eae0bd7d65f45e2417d78d57247a151ec7f2753577165a54fd2e9aa136d5661e508a76fc575018b688849fafcdd43d3c2a1a520ac7d22479269a96d29"}, {0x29, 0x4e00, "30b75ff121e3c6b20848a27014823db3dced28dfc7b7f5c679b6b1a3d0572579b2520e1064105822b8"}, {0x5, 0x4e00, "4c71fde5fa"}, {0x87, 0x4e00, "e7b72f1fb552413a7c699b6424b515f7de39c2fe6776f2fd95913fddbbd3e487fe659a314d05d4cf966f92401c81cf03e6b3458e4033ae289105c9821c08cf928bde3339dc678a4460b37a677539f6c32c20aa469e4aff1866d750d1d87f1e928c0dd88a316eb15639c6c8fdd1bc151239b02bed29aff91fb3b4edc52fe0d97bfd8088dcd0d6d8"}, {0x16, 0x4e00, "f749235025d1777008438370be61f1e7f57ba94d09f9"}, {0x7c, 0x4e00, "219123947adfdcc32f77f0ea7a8674790526985d0ab3a33f3dfabb99fd41009aa4c28af3b6c1c7b909c89ae80327cd79275d52b86793b5152646ae0a82da0b5892ce1b3b8b73b2c7b28662fe9909879f81b4de7b46f059768c473d867fb6cfff0378dd2c919d49adba4f4da4e4c8ad5ba23459e5f0cb84b994ff9173"}, {0x45, 0x4e00, "99b2bb352b194bbce3a67d4565babba089c848f0b9de0acfd5c25ed4d2fa0c9106c1bd7d7e1b83b83b32cfa9b996cccb2a912291cadb021b6cf34e9b3c3ea3110dbdb3846f"}, {0xe0, 0x4e00, "1ec6ce2fc366202de701b887d444425ff83a4b9786658f269e82faca4b99db024ada5c511ec8611643afc668f49321fa242a8ae74eda15a655bf7125ed63a5199e4a170d7039871b1092db22e5adbce41e4de9f07c14730bbef01ec31b659db284ee49682c5b59e981e43d39a0ab67863c4ebe4f9446547625a054388c32c6d7190007dba032cbe9e0891630692d611ecdf02b9d25ce034f8588aef3d925442096c243209fb594e765be766fc9eddeb7f92692a8b72c9078a669537c4fb27c2c83352e27bd6dbaa3f4a48ad49ffcde22935e53baff831897a9c96890ffe57f58"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:48:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x10}}}}}}, 0x0) 17:48:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2a5) [ 1500.745376][T28451] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:16 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xe, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}]}, 0x320) 17:48:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002980400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2a6) 17:48:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x4, 0x10}}}}}}, 0x0) 17:48:16 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x28, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2a7) [ 1500.931774][T28468] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003980400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}]}, 0x320) [ 1501.057822][T28476] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1501.073697][ T7624] usb 6-1: Service connection timeout for: 256 [ 1501.081764][ T7624] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1501.107539][ T7624] ath9k_htc: Failed to initialize the device [ 1501.114662][T18144] usb 6-1: ath9k_htc: USB layer deinitialized [ 1501.493601][T18144] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1501.853642][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1502.013624][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1502.022775][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.031183][T18144] usb 6-1: Product: syz [ 1502.035815][T18144] usb 6-1: Manufacturer: syz [ 1502.040518][T18144] usb 6-1: SerialNumber: syz [ 1502.104453][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1502.693659][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1503.303023][T28455] UDC core: couldn't find an available UDC or it's busy: -16 [ 1503.310824][T28455] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1503.320302][T28455] UDC core: couldn't find an available UDC or it's busy: -16 [ 1503.327932][T28455] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1503.542200][T18143] usb 6-1: USB disconnect, device number 113 17:48:19 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000700)={0x24, &(0x7f0000000100)={0x0, 0x22, 0x8b, {0x8b, 0x21, "4d544cecc1fc92beedf0c705fdd3a04954fd03b8a84d710594b1f65276fddf4e0ed05c32a8c4f0a48e1afe772beca0863d85b9964755541cce1118a70f8d221f8ae38d13f12a3ed3a51ef7d7fecadda79931a7c5eb2a2d2cdc089e2da9970e0165d84223a98a6ad0021aadedf9adacd1965fba77d5762e206cd7d54a6138498d612cfecb0d21be7d41"}}, &(0x7f0000000640)={0x0, 0x3, 0x78, @string={0x78, 0x3, "ff97ee5498fa3194b7f409bca028eb43fd19a78e449b530267a1cc89f7234a50177c839618fa2386a8b80387c911c0358ec7d0f2455438567f26ad661d7388d0dddd566c67968f954960e8968e418ba7ed103a0ac0de4b7fae78d2d4758e953d8512b7273a8810af209a7f1aefbd25d21aae747c393a"}}, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "0790209b"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_4={0x3, 0x2, 0x9, "c9716932"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x940}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000740)={0x80, 0xc, 0xc1, "3133589d2635df17ebcea2b7f15219ec947d61e9e12909b137fe5b1cdc0e7193e75d49d1af386e4072c970364c961c42f1980a6d8ebb85e8fc3569f9110539e5b3c02fe9aeeae41bbac5d60ba430e1bf1d21c24dd937b3886ea22788440df019557912d31c140f4bae22171940353fb17594460da82d79ba0bdf19485b0e604528cbb549482f011bbb9c8dcad9dd54d9d366d9150a8924b56c3d6422a4abcbd33555eb249b35e468c6d97ed078f99bf3ab6265d3d23a4a640b6dcad44015e11fa3"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000008c0)={0x20, 0x1, 0x42, "613989029d6bbe5bf856f2fbf4ce81f790d7ec97f2ebcb9d1b58cbf52904e93976515137d6ae702afd14db4d7341da295e99259ebf160934249db74e9dae4a85315b"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x8}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x3f0, &(0x7f0000000240)={[{0x40, 0x4e00, "e015b1daa133dcf957c5c0a97f10164e7b5b56aab258d517c35129e0bfdba46d2e5a3c1dacf567781c397b90a9b503dba6fecd0ad3ba7d29c63b79427e1796f5"}, {0x19, 0x4e00, "9084baddfc681be345f0a9e8b425dd00cda540498b1eadbdc9"}, {0xf2, 0x4e00, "c76540b9ef1036bed7c9388d42848c093ea3f013b0c35bfe97b396a226b3e1aeede8c1d72dd816f98664c4f241d4c6b5c8eb154f5467e225fac66cb72e8a88f55ebf9d9254e26ce8909b6dedd99be13d9e69db9ce762d54b6a730a452a4e5128d05791f1562feef9b4e51f22a9dfe825267bbddecd0698cba6c31b9850a46d0c2c4d9c8321446aaa4a153f0455793aa528ee619d4f83a33d9ffce9dd92868cf6958b7db98d227887bf64d5741fb16c52c67aec1ddf5eae0bd7d65f45e2417d78d57247a151ec7f2753577165a54fd2e9aa136d5661e508a76fc575018b688849fafcdd43d3c2a1a520ac7d22479269a96d29"}, {0x29, 0x4e00, "30b75ff121e3c6b20848a27014823db3dced28dfc7b7f5c679b6b1a3d0572579b2520e1064105822b8"}, {0x5, 0x4e00, "4c71fde5fa"}, {0x87, 0x4e00, "e7b72f1fb552413a7c699b6424b515f7de39c2fe6776f2fd95913fddbbd3e487fe659a314d05d4cf966f92401c81cf03e6b3458e4033ae289105c9821c08cf928bde3339dc678a4460b37a677539f6c32c20aa469e4aff1866d750d1d87f1e928c0dd88a316eb15639c6c8fdd1bc151239b02bed29aff91fb3b4edc52fe0d97bfd8088dcd0d6d8"}, {0x16, 0x4e00, "f749235025d1777008438370be61f1e7f57ba94d09f9"}, {0x7c, 0x4e00, "219123947adfdcc32f77f0ea7a8674790526985d0ab3a33f3dfabb99fd41009aa4c28af3b6c1c7b909c89ae80327cd79275d52b86793b5152646ae0a82da0b5892ce1b3b8b73b2c7b28662fe9909879f81b4de7b46f059768c473d867fb6cfff0378dd2c919d49adba4f4da4e4c8ad5ba23459e5f0cb84b994ff9173"}, {0x45, 0x4e00, "99b2bb352b194bbce3a67d4565babba089c848f0b9de0acfd5c25ed4d2fa0c9106c1bd7d7e1b83b83b32cfa9b996cccb2a912291cadb021b6cf34e9b3c3ea3110dbdb3846f"}, {0xe0, 0x4e00, "1ec6ce2fc366202de701b887d444425ff83a4b9786658f269e82faca4b99db024ada5c511ec8611643afc668f49321fa242a8ae74eda15a655bf7125ed63a5199e4a170d7039871b1092db22e5adbce41e4de9f07c14730bbef01ec31b659db284ee49682c5b59e981e43d39a0ab67863c4ebe4f9446547625a054388c32c6d7190007dba032cbe9e0891630692d611ecdf02b9d25ce034f8588aef3d925442096c243209fb594e765be766fc9eddeb7f92692a8b72c9078a669537c4fb27c2c83352e27bd6dbaa3f4a48ad49ffcde22935e53baff831897a9c96890ffe57f58"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000700)={0x24, &(0x7f0000000100)={0x0, 0x22, 0x8b, {0x8b, 0x21, "4d544cecc1fc92beedf0c705fdd3a04954fd03b8a84d710594b1f65276fddf4e0ed05c32a8c4f0a48e1afe772beca0863d85b9964755541cce1118a70f8d221f8ae38d13f12a3ed3a51ef7d7fecadda79931a7c5eb2a2d2cdc089e2da9970e0165d84223a98a6ad0021aadedf9adacd1965fba77d5762e206cd7d54a6138498d612cfecb0d21be7d41"}}, &(0x7f0000000640)={0x0, 0x3, 0x78, @string={0x78, 0x3, "ff97ee5498fa3194b7f409bca028eb43fd19a78e449b530267a1cc89f7234a50177c839618fa2386a8b80387c911c0358ec7d0f2455438567f26ad661d7388d0dddd566c67968f954960e8968e418ba7ed103a0ac0de4b7fae78d2d4758e953d8512b7273a8810af209a7f1aefbd25d21aae747c393a"}}, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "0790209b"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_4={0x3, 0x2, 0x9, "c9716932"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x940}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000740)={0x80, 0xc, 0xc1, "3133589d2635df17ebcea2b7f15219ec947d61e9e12909b137fe5b1cdc0e7193e75d49d1af386e4072c970364c961c42f1980a6d8ebb85e8fc3569f9110539e5b3c02fe9aeeae41bbac5d60ba430e1bf1d21c24dd937b3886ea22788440df019557912d31c140f4bae22171940353fb17594460da82d79ba0bdf19485b0e604528cbb549482f011bbb9c8dcad9dd54d9d366d9150a8924b56c3d6422a4abcbd33555eb249b35e468c6d97ed078f99bf3ab6265d3d23a4a640b6dcad44015e11fa3"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000008c0)={0x20, 0x1, 0x42, "613989029d6bbe5bf856f2fbf4ce81f790d7ec97f2ebcb9d1b58cbf52904e93976515137d6ae702afd14db4d7341da295e99259ebf160934249db74e9dae4a85315b"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x8}}) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x3f0, &(0x7f0000000240)={[{0x40, 0x4e00, "e015b1daa133dcf957c5c0a97f10164e7b5b56aab258d517c35129e0bfdba46d2e5a3c1dacf567781c397b90a9b503dba6fecd0ad3ba7d29c63b79427e1796f5"}, {0x19, 0x4e00, "9084baddfc681be345f0a9e8b425dd00cda540498b1eadbdc9"}, {0xf2, 0x4e00, "c76540b9ef1036bed7c9388d42848c093ea3f013b0c35bfe97b396a226b3e1aeede8c1d72dd816f98664c4f241d4c6b5c8eb154f5467e225fac66cb72e8a88f55ebf9d9254e26ce8909b6dedd99be13d9e69db9ce762d54b6a730a452a4e5128d05791f1562feef9b4e51f22a9dfe825267bbddecd0698cba6c31b9850a46d0c2c4d9c8321446aaa4a153f0455793aa528ee619d4f83a33d9ffce9dd92868cf6958b7db98d227887bf64d5741fb16c52c67aec1ddf5eae0bd7d65f45e2417d78d57247a151ec7f2753577165a54fd2e9aa136d5661e508a76fc575018b688849fafcdd43d3c2a1a520ac7d22479269a96d29"}, {0x29, 0x4e00, "30b75ff121e3c6b20848a27014823db3dced28dfc7b7f5c679b6b1a3d0572579b2520e1064105822b8"}, {0x5, 0x4e00, "4c71fde5fa"}, {0x87, 0x4e00, "e7b72f1fb552413a7c699b6424b515f7de39c2fe6776f2fd95913fddbbd3e487fe659a314d05d4cf966f92401c81cf03e6b3458e4033ae289105c9821c08cf928bde3339dc678a4460b37a677539f6c32c20aa469e4aff1866d750d1d87f1e928c0dd88a316eb15639c6c8fdd1bc151239b02bed29aff91fb3b4edc52fe0d97bfd8088dcd0d6d8"}, {0x16, 0x4e00, "f749235025d1777008438370be61f1e7f57ba94d09f9"}, {0x7c, 0x4e00, "219123947adfdcc32f77f0ea7a8674790526985d0ab3a33f3dfabb99fd41009aa4c28af3b6c1c7b909c89ae80327cd79275d52b86793b5152646ae0a82da0b5892ce1b3b8b73b2c7b28662fe9909879f81b4de7b46f059768c473d867fb6cfff0378dd2c919d49adba4f4da4e4c8ad5ba23459e5f0cb84b994ff9173"}, {0x45, 0x4e00, "99b2bb352b194bbce3a67d4565babba089c848f0b9de0acfd5c25ed4d2fa0c9106c1bd7d7e1b83b83b32cfa9b996cccb2a912291cadb021b6cf34e9b3c3ea3110dbdb3846f"}, {0xe0, 0x4e00, "1ec6ce2fc366202de701b887d444425ff83a4b9786658f269e82faca4b99db024ada5c511ec8611643afc668f49321fa242a8ae74eda15a655bf7125ed63a5199e4a170d7039871b1092db22e5adbce41e4de9f07c14730bbef01ec31b659db284ee49682c5b59e981e43d39a0ab67863c4ebe4f9446547625a054388c32c6d7190007dba032cbe9e0891630692d611ecdf02b9d25ce034f8588aef3d925442096c243209fb594e765be766fc9eddeb7f92692a8b72c9078a669537c4fb27c2c83352e27bd6dbaa3f4a48ad49ffcde22935e53baff831897a9c96890ffe57f58"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) (async) 17:48:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10}}}}}}, 0x0) 17:48:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2a8) 17:48:19 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x34, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}]}, 0x320) 17:48:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190000990400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:19 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x60, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10}}}}}}, 0x0) 17:48:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x320) 17:48:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2a9) [ 1504.099831][T28485] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190001990400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:19 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1504.265057][T28503] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1504.433574][T18144] usb 6-1: Service connection timeout for: 258 [ 1504.439852][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1504.449022][T18144] ath9k_htc: Failed to initialize the device [ 1504.455672][T18143] usb 6-1: ath9k_htc: USB layer deinitialized [ 1504.823529][T18143] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1505.183784][T18143] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1505.343800][T18143] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1505.352879][T18143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.361434][T18143] usb 6-1: Product: syz [ 1505.365969][T18143] usb 6-1: Manufacturer: syz [ 1505.370575][T18143] usb 6-1: SerialNumber: syz [ 1505.424486][T18143] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1506.003626][T18143] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1506.608286][T28501] UDC core: couldn't find an available UDC or it's busy: -16 [ 1506.623653][T28501] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1506.631575][T28501] UDC core: couldn't find an available UDC or it's busy: -16 [ 1506.639822][T28501] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1506.852800][T28501] UDC core: couldn't find an available UDC or it's busy: -16 [ 1506.853608][T28509] UDC core: couldn't find an available UDC or it's busy: -16 [ 1506.861958][T28510] UDC core: couldn't find an available UDC or it's busy: -16 [ 1506.876597][T28501] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1506.884801][T28510] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1506.893106][T28509] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:48:22 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000700)={0x24, &(0x7f0000000100)={0x0, 0x22, 0x8b, {0x8b, 0x21, "4d544cecc1fc92beedf0c705fdd3a04954fd03b8a84d710594b1f65276fddf4e0ed05c32a8c4f0a48e1afe772beca0863d85b9964755541cce1118a70f8d221f8ae38d13f12a3ed3a51ef7d7fecadda79931a7c5eb2a2d2cdc089e2da9970e0165d84223a98a6ad0021aadedf9adacd1965fba77d5762e206cd7d54a6138498d612cfecb0d21be7d41"}}, &(0x7f0000000640)={0x0, 0x3, 0x78, @string={0x78, 0x3, "ff97ee5498fa3194b7f409bca028eb43fd19a78e449b530267a1cc89f7234a50177c839618fa2386a8b80387c911c0358ec7d0f2455438567f26ad661d7388d0dddd566c67968f954960e8968e418ba7ed103a0ac0de4b7fae78d2d4758e953d8512b7273a8810af209a7f1aefbd25d21aae747c393a"}}, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "0790209b"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_4={0x3, 0x2, 0x9, "c9716932"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x940}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000740)={0x80, 0xc, 0xc1, "3133589d2635df17ebcea2b7f15219ec947d61e9e12909b137fe5b1cdc0e7193e75d49d1af386e4072c970364c961c42f1980a6d8ebb85e8fc3569f9110539e5b3c02fe9aeeae41bbac5d60ba430e1bf1d21c24dd937b3886ea22788440df019557912d31c140f4bae22171940353fb17594460da82d79ba0bdf19485b0e604528cbb549482f011bbb9c8dcad9dd54d9d366d9150a8924b56c3d6422a4abcbd33555eb249b35e468c6d97ed078f99bf3ab6265d3d23a4a640b6dcad44015e11fa3"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000008c0)={0x20, 0x1, 0x42, "613989029d6bbe5bf856f2fbf4ce81f790d7ec97f2ebcb9d1b58cbf52904e93976515137d6ae702afd14db4d7341da295e99259ebf160934249db74e9dae4a85315b"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x8}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x3f0, &(0x7f0000000240)={[{0x40, 0x4e00, "e015b1daa133dcf957c5c0a97f10164e7b5b56aab258d517c35129e0bfdba46d2e5a3c1dacf567781c397b90a9b503dba6fecd0ad3ba7d29c63b79427e1796f5"}, {0x19, 0x4e00, "9084baddfc681be345f0a9e8b425dd00cda540498b1eadbdc9"}, {0xf2, 0x4e00, "c76540b9ef1036bed7c9388d42848c093ea3f013b0c35bfe97b396a226b3e1aeede8c1d72dd816f98664c4f241d4c6b5c8eb154f5467e225fac66cb72e8a88f55ebf9d9254e26ce8909b6dedd99be13d9e69db9ce762d54b6a730a452a4e5128d05791f1562feef9b4e51f22a9dfe825267bbddecd0698cba6c31b9850a46d0c2c4d9c8321446aaa4a153f0455793aa528ee619d4f83a33d9ffce9dd92868cf6958b7db98d227887bf64d5741fb16c52c67aec1ddf5eae0bd7d65f45e2417d78d57247a151ec7f2753577165a54fd2e9aa136d5661e508a76fc575018b688849fafcdd43d3c2a1a520ac7d22479269a96d29"}, {0x29, 0x4e00, "30b75ff121e3c6b20848a27014823db3dced28dfc7b7f5c679b6b1a3d0572579b2520e1064105822b8"}, {0x5, 0x4e00, "4c71fde5fa"}, {0x87, 0x4e00, "e7b72f1fb552413a7c699b6424b515f7de39c2fe6776f2fd95913fddbbd3e487fe659a314d05d4cf966f92401c81cf03e6b3458e4033ae289105c9821c08cf928bde3339dc678a4460b37a677539f6c32c20aa469e4aff1866d750d1d87f1e928c0dd88a316eb15639c6c8fdd1bc151239b02bed29aff91fb3b4edc52fe0d97bfd8088dcd0d6d8"}, {0x16, 0x4e00, "f749235025d1777008438370be61f1e7f57ba94d09f9"}, {0x7c, 0x4e00, "219123947adfdcc32f77f0ea7a8674790526985d0ab3a33f3dfabb99fd41009aa4c28af3b6c1c7b909c89ae80327cd79275d52b86793b5152646ae0a82da0b5892ce1b3b8b73b2c7b28662fe9909879f81b4de7b46f059768c473d867fb6cfff0378dd2c919d49adba4f4da4e4c8ad5ba23459e5f0cb84b994ff9173"}, {0x45, 0x4e00, "99b2bb352b194bbce3a67d4565babba089c848f0b9de0acfd5c25ed4d2fa0c9106c1bd7d7e1b83b83b32cfa9b996cccb2a912291cadb021b6cf34e9b3c3ea3110dbdb3846f"}, {0xe0, 0x4e00, "1ec6ce2fc366202de701b887d444425ff83a4b9786658f269e82faca4b99db024ada5c511ec8611643afc668f49321fa242a8ae74eda15a655bf7125ed63a5199e4a170d7039871b1092db22e5adbce41e4de9f07c14730bbef01ec31b659db284ee49682c5b59e981e43d39a0ab67863c4ebe4f9446547625a054388c32c6d7190007dba032cbe9e0891630692d611ecdf02b9d25ce034f8588aef3d925442096c243209fb594e765be766fc9eddeb7f92692a8b72c9078a669537c4fb27c2c83352e27bd6dbaa3f4a48ad49ffcde22935e53baff831897a9c96890ffe57f58"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000700)={0x24, &(0x7f0000000100)={0x0, 0x22, 0x8b, {0x8b, 0x21, "4d544cecc1fc92beedf0c705fdd3a04954fd03b8a84d710594b1f65276fddf4e0ed05c32a8c4f0a48e1afe772beca0863d85b9964755541cce1118a70f8d221f8ae38d13f12a3ed3a51ef7d7fecadda79931a7c5eb2a2d2cdc089e2da9970e0165d84223a98a6ad0021aadedf9adacd1965fba77d5762e206cd7d54a6138498d612cfecb0d21be7d41"}}, &(0x7f0000000640)={0x0, 0x3, 0x78, @string={0x78, 0x3, "ff97ee5498fa3194b7f409bca028eb43fd19a78e449b530267a1cc89f7234a50177c839618fa2386a8b80387c911c0358ec7d0f2455438567f26ad661d7388d0dddd566c67968f954960e8968e418ba7ed103a0ac0de4b7fae78d2d4758e953d8512b7273a8810af209a7f1aefbd25d21aae747c393a"}}, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "0790209b"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_4={0x3, 0x2, 0x9, "c9716932"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x940}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000740)={0x80, 0xc, 0xc1, "3133589d2635df17ebcea2b7f15219ec947d61e9e12909b137fe5b1cdc0e7193e75d49d1af386e4072c970364c961c42f1980a6d8ebb85e8fc3569f9110539e5b3c02fe9aeeae41bbac5d60ba430e1bf1d21c24dd937b3886ea22788440df019557912d31c140f4bae22171940353fb17594460da82d79ba0bdf19485b0e604528cbb549482f011bbb9c8dcad9dd54d9d366d9150a8924b56c3d6422a4abcbd33555eb249b35e468c6d97ed078f99bf3ab6265d3d23a4a640b6dcad44015e11fa3"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000008c0)={0x20, 0x1, 0x42, "613989029d6bbe5bf856f2fbf4ce81f790d7ec97f2ebcb9d1b58cbf52904e93976515137d6ae702afd14db4d7341da295e99259ebf160934249db74e9dae4a85315b"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x8}}) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x3f0, &(0x7f0000000240)={[{0x40, 0x4e00, "e015b1daa133dcf957c5c0a97f10164e7b5b56aab258d517c35129e0bfdba46d2e5a3c1dacf567781c397b90a9b503dba6fecd0ad3ba7d29c63b79427e1796f5"}, {0x19, 0x4e00, "9084baddfc681be345f0a9e8b425dd00cda540498b1eadbdc9"}, {0xf2, 0x4e00, "c76540b9ef1036bed7c9388d42848c093ea3f013b0c35bfe97b396a226b3e1aeede8c1d72dd816f98664c4f241d4c6b5c8eb154f5467e225fac66cb72e8a88f55ebf9d9254e26ce8909b6dedd99be13d9e69db9ce762d54b6a730a452a4e5128d05791f1562feef9b4e51f22a9dfe825267bbddecd0698cba6c31b9850a46d0c2c4d9c8321446aaa4a153f0455793aa528ee619d4f83a33d9ffce9dd92868cf6958b7db98d227887bf64d5741fb16c52c67aec1ddf5eae0bd7d65f45e2417d78d57247a151ec7f2753577165a54fd2e9aa136d5661e508a76fc575018b688849fafcdd43d3c2a1a520ac7d22479269a96d29"}, {0x29, 0x4e00, "30b75ff121e3c6b20848a27014823db3dced28dfc7b7f5c679b6b1a3d0572579b2520e1064105822b8"}, {0x5, 0x4e00, "4c71fde5fa"}, {0x87, 0x4e00, "e7b72f1fb552413a7c699b6424b515f7de39c2fe6776f2fd95913fddbbd3e487fe659a314d05d4cf966f92401c81cf03e6b3458e4033ae289105c9821c08cf928bde3339dc678a4460b37a677539f6c32c20aa469e4aff1866d750d1d87f1e928c0dd88a316eb15639c6c8fdd1bc151239b02bed29aff91fb3b4edc52fe0d97bfd8088dcd0d6d8"}, {0x16, 0x4e00, "f749235025d1777008438370be61f1e7f57ba94d09f9"}, {0x7c, 0x4e00, "219123947adfdcc32f77f0ea7a8674790526985d0ab3a33f3dfabb99fd41009aa4c28af3b6c1c7b909c89ae80327cd79275d52b86793b5152646ae0a82da0b5892ce1b3b8b73b2c7b28662fe9909879f81b4de7b46f059768c473d867fb6cfff0378dd2c919d49adba4f4da4e4c8ad5ba23459e5f0cb84b994ff9173"}, {0x45, 0x4e00, "99b2bb352b194bbce3a67d4565babba089c848f0b9de0acfd5c25ed4d2fa0c9106c1bd7d7e1b83b83b32cfa9b996cccb2a912291cadb021b6cf34e9b3c3ea3110dbdb3846f"}, {0xe0, 0x4e00, "1ec6ce2fc366202de701b887d444425ff83a4b9786658f269e82faca4b99db024ada5c511ec8611643afc668f49321fa242a8ae74eda15a655bf7125ed63a5199e4a170d7039871b1092db22e5adbce41e4de9f07c14730bbef01ec31b659db284ee49682c5b59e981e43d39a0ab67863c4ebe4f9446547625a054388c32c6d7190007dba032cbe9e0891630692d611ecdf02b9d25ce034f8588aef3d925442096c243209fb594e765be766fc9eddeb7f92692a8b72c9078a669537c4fb27c2c83352e27bd6dbaa3f4a48ad49ffcde22935e53baff831897a9c96890ffe57f58"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) (async) 17:48:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2aa) 17:48:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x320) 17:48:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10}}}}}}, 0x0) 17:48:22 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x3, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190002990400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1506.911938][ T7624] usb 6-1: USB disconnect, device number 114 17:48:22 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1506.955179][T28520] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x320) 17:48:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2ab) 17:48:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190003990400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x2}}}}}}, 0x0) [ 1507.105288][T28534] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1507.713498][T18143] usb 6-1: Service connection timeout for: 258 [ 1507.719972][T18143] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1507.728583][T18143] ath9k_htc: Failed to initialize the device [ 1507.735282][ T7624] usb 6-1: ath9k_htc: USB layer deinitialized [ 1508.103701][ T7624] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1508.534261][ T7624] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1508.693891][ T7624] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1508.702974][ T7624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.711630][ T7624] usb 6-1: Product: syz [ 1508.716190][ T7624] usb 6-1: Manufacturer: syz [ 1508.720797][ T7624] usb 6-1: SerialNumber: syz [ 1508.774365][ T7624] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1509.383728][ T7624] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1509.988325][T28524] UDC core: couldn't find an available UDC or it's busy: -16 [ 1509.996202][T28524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1510.006624][T28524] UDC core: couldn't find an available UDC or it's busy: -16 [ 1510.014270][T28524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:48:25 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) 17:48:25 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900009a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2ac) 17:48:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x320) 17:48:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x3}}}}}}, 0x0) [ 1510.227042][T28540] UDC core: couldn't find an available UDC or it's busy: -16 [ 1510.238129][T28540] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1510.258999][T25435] usb 6-1: USB disconnect, device number 115 17:48:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x4}}}}}}, 0x0) [ 1510.292540][T28549] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x320) 17:48:25 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x7, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2ad) 17:48:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900019a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x6}}}}}}, 0x0) [ 1510.412459][T28562] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1511.073690][ T7624] usb 6-1: Service connection timeout for: 258 [ 1511.080028][ T7624] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1511.090664][ T7624] ath9k_htc: Failed to initialize the device [ 1511.097358][T25435] usb 6-1: ath9k_htc: USB layer deinitialized [ 1511.487209][T25435] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1511.853799][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1512.024314][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1512.036922][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.055039][T25435] usb 6-1: Product: syz [ 1512.063807][T25435] usb 6-1: Manufacturer: syz [ 1512.077601][T25435] usb 6-1: SerialNumber: syz [ 1512.124511][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1512.763658][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1513.386032][ T7624] usb 6-1: USB disconnect, device number 116 17:48:29 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) (async) 17:48:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x320) 17:48:29 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x8, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2ae) 17:48:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900029a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x7}}}}}}, 0x0) 17:48:29 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0xa, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x320) 17:48:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x8}}}}}}, 0x0) [ 1513.932551][T28581] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2af) 17:48:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900039a0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x28}}}}}}, 0x0) [ 1514.085233][T28593] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1514.281059][T25435] usb 6-1: Service connection timeout for: 257 [ 1514.287638][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1514.295924][T25435] ath9k_htc: Failed to initialize the device [ 1514.302187][ T7624] usb 6-1: ath9k_htc: USB layer deinitialized [ 1514.663764][ T7624] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1515.023850][ T7624] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1515.183828][ T7624] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1515.192904][ T7624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.201330][ T7624] usb 6-1: Product: syz [ 1515.205822][ T7624] usb 6-1: Manufacturer: syz [ 1515.210429][ T7624] usb 6-1: SerialNumber: syz [ 1515.254178][ T7624] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1515.833621][T12624] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1516.437559][T28583] UDC core: couldn't find an available UDC or it's busy: -16 [ 1516.445799][T28583] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1516.656443][T18144] usb 6-1: USB disconnect, device number 117 17:48:32 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) 17:48:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x320) 17:48:32 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2b0) 17:48:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x300}}}}}}, 0x0) 17:48:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900009b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900}]}, 0x320) 17:48:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x600}}}}}}, 0x0) 17:48:32 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1517.209323][T28606] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2b1) 17:48:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900019b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x700}}}}}}, 0x0) [ 1517.314832][T12624] usb 6-1: Service connection timeout for: 257 [ 1517.321852][T12624] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1517.353258][T28618] dccp_invalid_packet: P.Data Offset(68) too large [ 1517.361574][T12624] ath9k_htc: Failed to initialize the device [ 1517.362189][T28619] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1517.378554][T18144] usb 6-1: ath9k_htc: USB layer deinitialized [ 1517.753560][T18144] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1518.153673][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1518.323878][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1518.333231][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.341984][T18144] usb 6-1: Product: syz [ 1518.347869][T18144] usb 6-1: Manufacturer: syz [ 1518.352660][T18144] usb 6-1: SerialNumber: syz [ 1518.397308][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1519.063682][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1519.667186][T18143] usb 6-1: USB disconnect, device number 118 17:48:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2b2) 17:48:35 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100, 0x0, 0x80}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:48:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x320) 17:48:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x1f00}}}}}}, 0x0) 17:48:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900029b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:35 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x2800}}}}}}, 0x0) 17:48:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x320) 17:48:35 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x2b, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1520.226701][T28631] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2b3) 17:48:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003}]}, 0x320) 17:48:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900039b0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x3075}}}}}}, 0x0) [ 1520.418829][T28648] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1520.514005][T18144] usb 6-1: Service connection timeout for: 257 [ 1520.520678][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1520.530108][T18144] ath9k_htc: Failed to initialize the device [ 1520.537058][T18143] usb 6-1: ath9k_htc: USB layer deinitialized [ 1520.923512][T18143] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1521.303934][T18143] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1521.473838][T18143] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1521.483010][T18143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.491865][T18143] usb 6-1: Product: syz [ 1521.496549][T18143] usb 6-1: Manufacturer: syz [ 1521.501234][T18143] usb 6-1: SerialNumber: syz [ 1521.554882][T18143] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1522.143629][T18143] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1522.956856][T18144] usb 6-1: USB disconnect, device number 119 [ 1523.393664][T18143] usb 6-1: Service connection timeout for: 256 [ 1523.399871][T18143] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1523.408313][T18143] ath9k_htc: Failed to initialize the device [ 1523.414877][T18144] usb 6-1: ath9k_htc: USB layer deinitialized 17:48:38 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100, 0x0, 0x80}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100, 0x0, 0x80}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) (async) 17:48:38 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2b4) 17:48:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x3f00}}}}}}, 0x0) 17:48:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x320) 17:48:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900009c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:39 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x4000}}}}}}, 0x0) [ 1523.514268][T28659] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900019c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2b5) 17:48:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x320) 17:48:39 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x32, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1523.652424][T28666] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1523.893598][T18144] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1524.263755][T18144] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1524.424909][T18144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1524.435520][T18144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.444272][T18144] usb 6-1: Product: syz [ 1524.448627][T18144] usb 6-1: Manufacturer: syz [ 1524.453316][T18144] usb 6-1: SerialNumber: syz [ 1524.494937][T18144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1525.073714][T18144] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1525.883973][T28660] UDC core: couldn't find an available UDC or it's busy: -16 [ 1525.891487][T28660] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1526.105753][T12624] usb 6-1: USB disconnect, device number 120 [ 1526.353610][T18144] usb 6-1: Service connection timeout for: 256 [ 1526.360019][T18144] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1526.368705][T18144] ath9k_htc: Failed to initialize the device [ 1526.375549][T12624] usb 6-1: ath9k_htc: USB layer deinitialized 17:48:42 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100, 0x0, 0x80}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) 17:48:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x7530}}}}}}, 0x0) 17:48:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803}]}, 0x320) 17:48:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2b6) 17:48:42 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900029c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) [ 1526.646018][T28684] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:42 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x3a, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2b7) 17:48:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x320) 17:48:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900039c0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2b8) [ 1526.806829][T28698] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1526.973746][T25435] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1527.343619][T25435] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1527.503728][T25435] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1527.517534][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.526313][T25435] usb 6-1: Product: syz [ 1527.530839][T25435] usb 6-1: Manufacturer: syz [ 1527.536313][T25435] usb 6-1: SerialNumber: syz [ 1527.585563][T25435] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1528.163612][T25435] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1528.790358][ T7624] usb 6-1: USB disconnect, device number 121 17:48:44 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "a25460d1", {0x3, 0x102, 0x0, 0x0, 0x553, 0x1}}) 17:48:44 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x3c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x0, 0x0, 0x2}}}}}}, 0x0) 17:48:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x320) 17:48:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2b9) 17:48:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900009d0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:44 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1529.322536][T28710] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:48:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2ba) 17:48:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x320) 17:48:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x0, 0x0, 0x3}}}}}}, 0x0) 17:48:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900019d0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) [ 1529.393720][T25435] usb 6-1: Service connection timeout for: 256 [ 1529.402421][T25435] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1529.421290][T25435] ath9k_htc: Failed to initialize the device [ 1529.428218][ T7624] usb 6-1: ath9k_htc: USB layer deinitialized 17:48:45 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x13}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) [ 1529.501198][T28723] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1529.823579][ T7624] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1530.213772][ T7624] usb 6-1: config index 0 descriptor too short (expected 64866, got 72) [ 1530.374338][ T7624] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1530.383679][ T7624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.391684][ T7624] usb 6-1: Product: syz [ 1530.396457][ T7624] usb 6-1: Manufacturer: syz [ 1530.401069][ T7624] usb 6-1: SerialNumber: syz [ 1530.464746][ T7624] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1531.103682][ T7624] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1532.117714][T18144] usb 6-1: USB disconnect, device number 122 [ 1532.136148][ C0] INFO: trying to register non-static key. [ 1532.141960][ C0] The code is fine but needs lockdep annotation, or maybe [ 1532.149049][ C0] you didn't initialize this object before use? [ 1532.155267][ C0] turning off the locking correctness validator. [ 1532.161571][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.17.0-rc2-syzkaller #0 [ 1532.169537][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1532.179585][ C0] Call Trace: [ 1532.182852][ C0] [ 1532.185690][ C0] dump_stack_lvl+0xcd/0x134 [ 1532.190281][ C0] register_lock_class+0xd28/0x1030 [ 1532.195483][ C0] ? mark_lock+0xef/0x17b0 [ 1532.199897][ C0] ? is_dynamic_key+0x1a0/0x1a0 [ 1532.204741][ C0] ? lock_chain_count+0x20/0x20 [ 1532.209590][ C0] __lock_acquire+0x106/0x5470 [ 1532.214357][ C0] ? lock_chain_count+0x20/0x20 [ 1532.219223][ C0] ? __lock_acquire+0x1655/0x5470 [ 1532.224239][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1532.230238][ C0] lock_acquire+0x1ab/0x510 [ 1532.234744][ C0] ? skb_queue_tail+0x21/0x140 [ 1532.239505][ C0] ? lock_release+0x720/0x720 [ 1532.244177][ C0] ? find_held_lock+0x2d/0x110 [ 1532.248939][ C0] ? ath9k_htc_txstatus+0x4c0/0x4c0 [ 1532.254183][ C0] _raw_spin_lock_irqsave+0x39/0x50 [ 1532.259379][ C0] ? skb_queue_tail+0x21/0x140 [ 1532.264145][ C0] skb_queue_tail+0x21/0x140 [ 1532.268728][ C0] ath9k_htc_txep+0x287/0x400 [ 1532.273397][ C0] ath9k_htc_txcompletion_cb+0x1cd/0x2f0 [ 1532.279116][ C0] hif_usb_regout_cb+0x115/0x1c0 [ 1532.284047][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 1532.289450][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 1532.294634][ C0] dummy_timer+0x11f9/0x32b0 [ 1532.299278][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1532.305254][ C0] ? dummy_dequeue+0x500/0x500 [ 1532.310018][ C0] ? dummy_dequeue+0x500/0x500 [ 1532.314774][ C0] call_timer_fn+0x1a5/0x6b0 [ 1532.319361][ C0] ? add_timer_on+0x4a0/0x4a0 [ 1532.324043][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 1532.328884][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1532.334072][ C0] ? dummy_dequeue+0x500/0x500 [ 1532.338833][ C0] __run_timers.part.0+0x67c/0xa30 [ 1532.343948][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 1532.348703][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1532.353911][ C0] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1532.359541][ C0] run_timer_softirq+0xb3/0x1d0 [ 1532.364382][ C0] __do_softirq+0x29b/0x9c2 [ 1532.368880][ C0] __irq_exit_rcu+0x123/0x180 [ 1532.373560][ C0] irq_exit_rcu+0x5/0x20 [ 1532.377824][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 1532.383461][ C0] [ 1532.386380][ C0] [ 1532.389312][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1532.395287][ C0] RIP: 0010:acpi_idle_do_entry+0x1c6/0x250 [ 1532.401200][ C0] Code: 89 de e8 ad 78 2b f8 84 db 75 ac e8 c4 74 2b f8 e8 cf b9 31 f8 eb 0c e8 b8 74 2b f8 0f 00 2d 81 86 c4 00 e8 ac 74 2b f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 27 77 2b f8 48 85 db [ 1532.420892][ C0] RSP: 0018:ffffffff8b807d60 EFLAGS: 00000293 [ 1532.426954][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1532.434916][ C0] RDX: ffffffff8b8bc6c0 RSI: ffffffff894cfaa4 RDI: 0000000000000000 [ 1532.442881][ C0] RBP: ffff8880118f2864 R08: 0000000000000001 R09: 0000000000000001 [ 1532.450845][ C0] R10: ffffffff817eb498 R11: 0000000000000000 R12: 0000000000000001 [ 1532.458805][ C0] R13: ffff8880118f2800 R14: ffff8880118f2864 R15: ffff888146889004 [ 1532.466771][ C0] ? trace_hardirqs_on+0x38/0x1c0 [ 1532.471795][ C0] ? acpi_idle_do_entry+0x1c4/0x250 [ 1532.476990][ C0] acpi_idle_enter+0x361/0x500 [ 1532.481822][ C0] cpuidle_enter_state+0x1b1/0xc80 [ 1532.487016][ C0] cpuidle_enter+0x4a/0xa0 [ 1532.491433][ C0] do_idle+0x3e8/0x590 [ 1532.495593][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 1532.500612][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 1532.506902][ C0] cpu_startup_entry+0x14/0x20 [ 1532.511668][ C0] start_kernel+0x47a/0x49b [ 1532.516167][ C0] secondary_startup_64_no_verify+0xc3/0xcb [ 1532.522081][ C0] [ 1532.525118][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1532.536819][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1532.545214][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.17.0-rc2-syzkaller #0 [ 1532.553182][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1532.563320][ C0] RIP: 0010:skb_queue_tail+0x9e/0x140 [ 1532.568688][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 80 00 00 00 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4f 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc [ 1532.588286][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00010046 [ 1532.594343][ C0] RAX: dffffc0000000000 RBX: ffff888073b23838 RCX: ffffffff815dc630 [ 1532.602304][ C0] RDX: 0000000000000000 RSI: 0000000000000012 RDI: ffff88807cf5ea08 [ 1532.610266][ C0] RBP: ffff88807cf5ea00 R08: 0000000000000001 R09: 0000000000000003 [ 1532.618226][ C0] R10: fffff52000000f29 R11: 0000000000000000 R12: 0000000000000000 [ 1532.626191][ C0] R13: ffff888073b23850 R14: 000000010001e0ba R15: ffffffff8519bc10 [ 1532.634181][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 1532.643135][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1532.649745][ C0] CR2: 00007f09ef600090 CR3: 0000000013b89000 CR4: 00000000003506f0 [ 1532.657741][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 17:48:48 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "080200"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "eedb1ad5", {0x3, 0x100}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "b06787c8", {0x3, 0x101}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "a25460d1", {0x3, 0x102, 0x0, 0x0, 0x553, 0x1}}) 17:48:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}, 0x0) 17:48:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x2bb) 17:48:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x68}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}]}, 0x320) 17:48:48 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x28}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x9, "bc496745b9b7c8"}]}}}}}}}, 0x0) 17:48:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff060000000100000056000000250000001900029d0400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 17:48:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffff87, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x0, 0x0, 0x6}}}}}}, 0x0) [ 1532.665733][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1532.673729][ C0] Call Trace: [ 1532.677025][ C0] [ 1532.679882][ C0] ath9k_htc_txep+0x287/0x400 [ 1532.684587][ C0] ath9k_htc_txcompletion_cb+0x1cd/0x2f0 [ 1532.690249][ C0] hif_usb_regout_cb+0x115/0x1c0 [ 1532.695224][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 1532.700625][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 1532.705835][ C0] dummy_timer+0x11f9/0x32b0 [ 1532.710437][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1532.716433][ C0] ? dummy_dequeue+0x500/0x500 [ 1532.721197][ C0] ? dummy_dequeue+0x500/0x500 [ 1532.725960][ C0] call_timer_fn+0x1a5/0x6b0 [ 1532.730551][ C0] ? add_timer_on+0x4a0/0x4a0 [ 1532.735224][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 1532.740078][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1532.745281][ C0] ? dummy_dequeue+0x500/0x500 [ 1532.750044][ C0] __run_timers.part.0+0x67c/0xa30 [ 1532.755182][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 1532.759946][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1532.765239][ C0] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1532.770882][ C0] run_timer_softirq+0xb3/0x1d0 [ 1532.775734][ C0] __do_softirq+0x29b/0x9c2 [ 1532.780237][ C0] __irq_exit_rcu+0x123/0x180 [ 1532.784922][ C0] irq_exit_rcu+0x5/0x20 [ 1532.789167][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 1532.794805][ C0] [ 1532.797727][ C0] [ 1532.800650][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1532.806638][ C0] RIP: 0010:acpi_idle_do_entry+0x1c6/0x250 [ 1532.812448][ C0] Code: 89 de e8 ad 78 2b f8 84 db 75 ac e8 c4 74 2b f8 e8 cf b9 31 f8 eb 0c e8 b8 74 2b f8 0f 00 2d 81 86 c4 00 e8 ac 74 2b f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 27 77 2b f8 48 85 db [ 1532.832074][ C0] RSP: 0018:ffffffff8b807d60 EFLAGS: 00000293 [ 1532.838134][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1532.846108][ C0] RDX: ffffffff8b8bc6c0 RSI: ffffffff894cfaa4 RDI: 0000000000000000 [ 1532.854073][ C0] RBP: ffff8880118f2864 R08: 0000000000000001 R09: 0000000000000001 [ 1532.862038][ C0] R10: ffffffff817eb498 R11: 0000000000000000 R12: 0000000000000001 [ 1532.870003][ C0] R13: ffff8880118f2800 R14: ffff8880118f2864 R15: ffff888146889004 [ 1532.877973][ C0] ? trace_hardirqs_on+0x38/0x1c0 [ 1532.883001][ C0] ? acpi_idle_do_entry+0x1c4/0x250 [ 1532.888204][ C0] acpi_idle_enter+0x361/0x500 [ 1532.892977][ C0] cpuidle_enter_state+0x1b1/0xc80 [ 1532.898094][ C0] cpuidle_enter+0x4a/0xa0 [ 1532.902512][ C0] do_idle+0x3e8/0x590 [ 1532.906582][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 1532.911610][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 1532.917860][ C0] cpu_startup_entry+0x14/0x20 [ 1532.922629][ C0] start_kernel+0x47a/0x49b [ 1532.927133][ C0] secondary_startup_64_no_verify+0xc3/0xcb [ 1532.933033][ C0] [ 1532.936043][ C0] Modules linked in: [ 1532.939933][ C0] ---[ end trace 0000000000000000 ]--- [ 1532.945375][ C0] RIP: 0010:skb_queue_tail+0x9e/0x140 [ 1532.950751][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 80 00 00 00 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4f 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc [ 1532.970356][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00010046 [ 1532.976432][ C0] RAX: dffffc0000000000 RBX: ffff888073b23838 RCX: ffffffff815dc630 [ 1532.984410][ C0] RDX: 0000000000000000 RSI: 0000000000000012 RDI: ffff88807cf5ea08 [ 1532.992386][ C0] RBP: ffff88807cf5ea00 R08: 0000000000000001 R09: 0000000000000003 [ 1533.000351][ C0] R10: fffff52000000f29 R11: 0000000000000000 R12: 0000000000000000 [ 1533.008314][ C0] R13: ffff888073b23850 R14: 000000010001e0ba R15: ffffffff8519bc10 [ 1533.016283][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 1533.025208][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1533.031792][ C0] CR2: 00007f09ef600090 CR3: 0000000013b89000 CR4: 00000000003506f0 [ 1533.039763][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1533.047729][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1533.055697][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1533.063035][ C0] Kernel Offset: disabled [ 1533.067352][ C0] Rebooting in 86400 seconds..