cess `syz-executor.2'. [ 292.199246][ T7421] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 292.759227][ T7421] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 292.768571][ T7421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.776814][ T7421] usb 2-1: Product: syz [ 292.781345][ T7421] usb 2-1: Manufacturer: syz [ 292.785961][ T7421] usb 2-1: SerialNumber: syz [ 292.844007][ T7421] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 293.469165][ T7421] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 293.893765][ T4514] usb 2-1: USB disconnect, device number 6 05:48:03 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) 05:48:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:03 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b000100766574"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:03 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 294.440289][ T9482] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 294.494378][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:04 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 05:48:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 294.694967][ T9506] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 294.747099][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 294.775764][ T7421] usb 2-1: Service connection timeout for: 256 [ 294.782614][ T7421] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 294.815173][ T7421] ath9k_htc: Failed to initialize the device [ 294.836436][ T4514] usb 2-1: ath9k_htc: USB layer deinitialized [ 295.207056][ T4514] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 295.739297][ T4514] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 295.748380][ T4514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.756681][ T4514] usb 2-1: Product: syz [ 295.760910][ T4514] usb 2-1: Manufacturer: syz [ 295.765488][ T4514] usb 2-1: SerialNumber: syz [ 295.809875][ T4514] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 296.379223][ T4514] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 296.795075][ T3682] usb 2-1: USB disconnect, device number 7 05:48:06 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) 05:48:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 05:48:06 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) [ 297.334315][ T9516] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 297.428632][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:07 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 297.602012][ T9542] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.616502][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.639528][ T4514] usb 2-1: Service connection timeout for: 256 [ 297.645733][ T4514] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 297.690643][ T4514] ath9k_htc: Failed to initialize the device [ 297.697052][ T3682] usb 2-1: ath9k_htc: USB layer deinitialized [ 298.059128][ T3682] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 298.589210][ T3682] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 298.598412][ T3682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.606896][ T3682] usb 2-1: Product: syz [ 298.612729][ T3682] usb 2-1: Manufacturer: syz [ 298.617343][ T3682] usb 2-1: SerialNumber: syz [ 298.659809][ T3682] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 299.239297][ T4505] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 299.646696][ T7421] usb 2-1: USB disconnect, device number 8 05:48:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc44", 0xc0}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:09 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:09 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}], 0x1}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}], 0x1}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc44", 0xc0}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 300.219996][ T9554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:09 executing program 4: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 300.309864][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:09 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}], 0x1}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc44", 0xc0}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 300.430349][ T9576] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:09 executing program 4: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 300.519261][ T4505] usb 2-1: Service connection timeout for: 256 [ 300.529534][ T4505] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 300.552663][ T4505] ath9k_htc: Failed to initialize the device [ 300.565220][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 300.593688][ T7421] usb 2-1: ath9k_htc: USB layer deinitialized [ 300.989117][ T7421] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 301.529320][ T7421] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 301.538503][ T7421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.547676][ T7421] usb 2-1: Product: syz [ 301.551941][ T7421] usb 2-1: Manufacturer: syz [ 301.556584][ T7421] usb 2-1: SerialNumber: syz [ 301.610824][ T7421] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 302.269223][ T7421] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 302.702507][ T3682] usb 2-1: USB disconnect, device number 9 05:48:12 executing program 4: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {0x0}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec", 0xe0}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:12 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:12 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:12 executing program 4: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 303.251459][ T9594] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec", 0xe0}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {0x0}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 303.324296][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 303.329068][ T7421] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive 05:48:12 executing program 4: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:12 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) [ 303.375412][ T7421] ath9k_htc: Failed to initialize the device [ 303.406708][ T3682] usb 2-1: ath9k_htc: USB layer deinitialized 05:48:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {0x0}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec", 0xe0}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:13 executing program 4: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) [ 303.520015][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 303.789267][ T3682] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 304.309266][ T3682] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 304.318349][ T3682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.326696][ T3682] usb 2-1: Product: syz [ 304.331737][ T3682] usb 2-1: Manufacturer: syz [ 304.336339][ T3682] usb 2-1: SerialNumber: syz [ 304.389830][ T3682] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 304.979262][ T3682] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 305.407170][ T7421] usb 2-1: USB disconnect, device number 10 05:48:15 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:15 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:15 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec5c6593df0073d73cc08c353ebaa9abb1", 0xf0}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:15 executing program 0: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 05:48:15 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:15 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 305.954710][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec5c6593df0073d73cc08c353ebaa9abb1", 0xf0}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:15 executing program 0: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) [ 306.039634][ T3682] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 306.046812][ T3682] ath9k_htc: Failed to initialize the device [ 306.068077][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.082383][ T7421] usb 2-1: ath9k_htc: USB layer deinitialized [ 306.489196][ T7421] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 307.039287][ T7421] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 307.048622][ T7421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.056868][ T7421] usb 2-1: Product: syz [ 307.061136][ T7421] usb 2-1: Manufacturer: syz [ 307.065730][ T7421] usb 2-1: SerialNumber: syz [ 307.110680][ T7421] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 307.709190][ T7421] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 308.143702][ T4514] usb 2-1: USB disconnect, device number 11 05:48:18 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:18 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:18 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec5c6593df0073d73cc08c353ebaa9abb1", 0xf0}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:18 executing program 0: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 05:48:18 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) [ 308.681185][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec5c6593df0073d73cc08c353ebaa9abb1840b2da5d06b8c05", 0xf8}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b945745", 0x40}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 308.769094][ T7421] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 308.782551][ T7421] ath9k_htc: Failed to initialize the device 05:48:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) [ 308.812261][ T4514] usb 2-1: ath9k_htc: USB layer deinitialized [ 308.824554][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:18 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:18 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec5c6593df0073d73cc08c353ebaa9abb1840b2da5d06b8c05", 0xf8}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b945745", 0x40}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:18 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b945745", 0x40}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 309.293084][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec5c6593df0073d73cc08c353ebaa9abb1840b2da5d06b8c05", 0xf8}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) [ 309.394283][ T9712] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 309.424824][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:19 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0xfc}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:19 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d99", 0x60}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 309.828708][ T9727] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0xfc}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d99", 0x60}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 309.871916][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:19 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:19 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d99", 0x60}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0xfc}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 310.421918][ T9764] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0xfe}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58", 0x70}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:20 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:20 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0xfe}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:20 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58", 0x70}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 311.034541][ T9791] __nla_validate_parse: 3 callbacks suppressed [ 311.034557][ T9791] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58", 0x70}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec5c6593df0073d73cc08c353ebaa9abb1840b2da5d06b8c051ccdbe9ecaec", 0xfe}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) [ 311.121079][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:20 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 311.228592][ T9812] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 311.240814][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:21 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182", 0x78}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0xff}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:21 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182", 0x78}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 311.677191][ T9821] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 311.704963][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:21 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182", 0x78}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 311.828448][ T9838] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 311.870727][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:21 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:21 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43", 0x7c}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 312.200137][ T9851] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 312.223421][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0xff}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:21 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43", 0x7c}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:22 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 312.509458][ T7421] usb 2-1: new high-speed USB device number 12 using dummy_hcd 05:48:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43", 0x7c}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) [ 313.129687][ T7421] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 313.138749][ T7421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.146826][ T7421] usb 2-1: Product: syz [ 313.151042][ T7421] usb 2-1: Manufacturer: syz [ 313.155640][ T7421] usb 2-1: SerialNumber: syz [ 313.211672][ T7421] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 313.869141][ T7421] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 314.293955][ T3693] usb 2-1: USB disconnect, device number 12 05:48:24 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 05:48:24 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10d", 0x7e}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0xff}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 05:48:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10d", 0x7e}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:24 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x0, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 314.919165][ T7421] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 314.926215][ T7421] ath9k_htc: Failed to initialize the device 05:48:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) [ 314.962265][ T3693] usb 2-1: ath9k_htc: USB layer deinitialized 05:48:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10d", 0x7e}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) [ 315.339114][ T3693] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 315.909289][ T3693] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 315.918384][ T3693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.927014][ T3693] usb 2-1: Product: syz [ 315.931521][ T3693] usb 2-1: Manufacturer: syz [ 315.936148][ T3693] usb 2-1: SerialNumber: syz [ 315.980031][ T3693] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 316.569273][ T3693] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 316.919927][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.926297][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.000867][ T7419] usb 2-1: USB disconnect, device number 13 05:48:26 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x10000}], 0x0, &(0x7f0000000380)=ANY=[]) 05:48:26 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x0, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb", 0x7f}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0x100}], 0x1}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 317.520445][ T9912] loop4: detected capacity change from 0 to 1024 [ 317.544301][ T9918] __nla_validate_parse: 8 callbacks suppressed [ 317.544318][ T9918] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 317.599322][ T9912] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 317.639308][ T3693] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 317.640296][ T9912] EXT4-fs (loop4): unmounting filesystem. [ 317.648829][ T3693] ath9k_htc: Failed to initialize the device [ 317.668112][ T7419] usb 2-1: ath9k_htc: USB layer deinitialized 05:48:27 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4f, 0x92, 0xb9, 0x8, 0x1557, 0x7720, 0xb7eb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x85, 0xe6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 317.729577][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:27 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x0, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 317.905789][ T9935] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.049124][ T7419] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 318.063881][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.109099][ T4514] usb 5-1: new high-speed USB device number 4 using dummy_hcd 05:48:27 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 318.225409][ T9940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0x100}], 0x1}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 318.331256][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.359272][ T4514] usb 5-1: Using ep0 maxpacket: 8 [ 318.487150][ T4514] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 318.519972][ T4514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.548419][ T4514] usb 5-1: config 0 descriptor?? [ 318.580034][ T7419] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 318.599954][ T7419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.618186][ T7419] usb 2-1: Product: syz [ 318.627407][ T7419] usb 2-1: Manufacturer: syz [ 318.637186][ T7419] usb 2-1: SerialNumber: syz [ 318.690151][ T7419] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 319.039344][ T4514] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 319.049464][ T4514] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 319.060189][ T4514] asix: probe of 5-1:0.0 failed with error -71 [ 319.069778][ T4514] usb 5-1: USB disconnect, device number 4 [ 319.269273][ T7419] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 319.685181][ T7421] usb 2-1: USB disconnect, device number 14 05:48:29 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb", 0x7f}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:29 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0x100}], 0x1}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:29 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000002680)={0x1}) 05:48:29 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) dup3(r0, r1, 0x0) [ 320.218497][ T9954] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:29 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) dup3(r0, r1, 0x0) [ 320.353514][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 320.363187][ T7419] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 320.373428][ T7419] ath9k_htc: Failed to initialize the device [ 320.396690][ T7421] usb 2-1: ath9k_htc: USB layer deinitialized 05:48:29 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) dup3(r0, r1, 0x0) 05:48:29 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:30 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) dup3(r0, r1, 0x0) 05:48:30 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) dup3(r0, 0xffffffffffffffff, 0x0) [ 320.601055][ T9972] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 320.723966][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 320.789159][ T7421] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 321.319230][ T7421] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 321.328416][ T7421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.337945][ T7421] usb 2-1: Product: syz [ 321.342598][ T7421] usb 2-1: Manufacturer: syz [ 321.347890][ T7421] usb 2-1: SerialNumber: syz [ 321.390030][ T7421] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 322.029270][ T7421] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 322.652652][ T7419] usb 2-1: USB disconnect, device number 15 [ 323.089195][ T7421] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 323.096281][ T7421] ath9k_htc: Failed to initialize the device [ 323.104291][ T7419] usb 2-1: ath9k_htc: USB layer deinitialized 05:48:32 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:32 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) dup3(r0, 0xffffffffffffffff, 0x0) 05:48:32 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb", 0x7f}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:32 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) dup3(r0, 0xffffffffffffffff, 0x0) [ 323.205920][ T9986] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:32 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) dup3(0xffffffffffffffff, r0, 0x0) [ 323.307862][ T9992] bridge0: port 3(macvlan2) entered blocking state [ 323.318453][ T9992] bridge0: port 3(macvlan2) entered disabled state 05:48:32 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) dup3(0xffffffffffffffff, r0, 0x0) [ 323.365267][ T9992] device macvlan2 entered promiscuous mode [ 323.382686][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:32 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 05:48:32 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:33 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x22001, 0x0) dup3(r0, r1, 0x0) [ 323.598362][T10003] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.649149][ T7419] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 323.679672][T10003] bridge0: port 4(macvlan3) entered blocking state [ 323.686858][T10003] bridge0: port 4(macvlan3) entered disabled state [ 323.696368][T10003] device macvlan3 entered promiscuous mode [ 323.705818][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.219286][ T7419] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 324.228386][ T7419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.237319][ T7419] usb 2-1: Product: syz [ 324.241863][ T7419] usb 2-1: Manufacturer: syz [ 324.246471][ T7419] usb 2-1: SerialNumber: syz [ 324.300159][ T7419] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 324.909134][ T7419] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 325.543595][ T4514] usb 2-1: USB disconnect, device number 16 [ 325.969381][ T7419] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 325.976624][ T7419] ath9k_htc: Failed to initialize the device [ 325.984426][ T4514] usb 2-1: ath9k_htc: USB layer deinitialized 05:48:35 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:35 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x22001, 0x0) dup3(r0, r1, 0x0) 05:48:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:35 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x1}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:35 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x22001, 0x0) dup3(r0, r1, 0x0) [ 326.081313][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:35 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r0, r1, 0x0) [ 326.173171][T10015] bridge0: port 5(macvlan4) entered blocking state [ 326.197166][T10015] bridge0: port 5(macvlan4) entered disabled state 05:48:35 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r0, r1, 0x0) [ 326.232151][T10015] device macvlan4 entered promiscuous mode 05:48:35 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r0, r1, 0x0) [ 326.274583][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:35 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000002c0)) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:35 executing program 4: socket$igmp(0x2, 0x3, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 05:48:35 executing program 4: socket$igmp(0x2, 0x3, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) dup3(0xffffffffffffffff, r0, 0x0) [ 326.461534][T10032] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 326.499215][ T4514] usb 2-1: new high-speed USB device number 17 using dummy_hcd 05:48:36 executing program 4: socket$igmp(0x2, 0x3, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) dup3(0xffffffffffffffff, r0, 0x0) [ 326.566286][T10034] bridge0: port 6(macvlan5) entered blocking state [ 326.587331][T10034] bridge0: port 6(macvlan5) entered disabled state [ 326.623222][T10034] device macvlan5 entered promiscuous mode [ 326.637502][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 05:48:36 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) [ 327.038261][ T4514] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 327.052325][ T4514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.062603][ T4514] usb 2-1: Product: syz [ 327.066887][ T4514] usb 2-1: Manufacturer: syz [ 327.071996][ T4514] usb 2-1: SerialNumber: syz [ 327.119933][ T4514] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 327.699177][ T4514] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 328.321287][ T4505] usb 2-1: USB disconnect, device number 17 [ 328.759100][ T4514] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 328.766257][ T4514] ath9k_htc: Failed to initialize the device [ 328.774754][ T4505] usb 2-1: ath9k_htc: USB layer deinitialized 05:48:38 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:38 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000002c0)) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x1}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:38 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 05:48:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 05:48:38 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) [ 328.887069][T10052] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 05:48:38 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) [ 329.022755][T10058] bridge0: port 7(macvlan6) entered blocking state [ 329.042374][T10058] bridge0: port 7(macvlan6) entered disabled state [ 329.064474][T10058] device macvlan6 entered promiscuous mode [ 329.072746][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:38 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000002c0)) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 329.176000][T10069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 329.212640][T10069] bridge0: port 8(macvlan7) entered blocking state 05:48:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 329.222170][T10069] bridge0: port 8(macvlan7) entered disabled state [ 329.230727][T10069] device macvlan7 entered promiscuous mode [ 329.239415][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:38 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 329.279305][ T4505] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 329.319394][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 329.366057][T10074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 329.399294][T10074] bridge0: port 9(macvlan8) entered blocking state [ 329.406350][T10074] bridge0: port 9(macvlan8) entered disabled state [ 329.415267][T10074] device macvlan8 entered promiscuous mode [ 329.427607][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 329.819343][ T4505] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.828408][ T4505] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.839229][ T4505] usb 2-1: Product: syz [ 329.844161][ T4505] usb 2-1: Manufacturer: syz [ 329.848745][ T4505] usb 2-1: SerialNumber: syz [ 329.879311][ T26] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.888495][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.897668][ T4505] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 329.905854][ T26] usb 5-1: Product: syz [ 329.912740][ T26] usb 5-1: Manufacturer: syz [ 329.917382][ T26] usb 5-1: SerialNumber: syz [ 329.960215][ T26] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 330.479156][ T4505] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 330.529248][ T26] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 330.894714][ T3685] usb 2-1: USB disconnect, device number 18 [ 331.145359][ T7421] usb 5-1: USB disconnect, device number 5 05:48:40 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) syz_open_pts(r0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 05:48:40 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x1}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:40 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec5c6593df0073d73cc08c353ebaa9abb1840b2da5d06b8c051ccdbe9ecaec08f1", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 331.432077][T10079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) syz_open_pts(r0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) [ 331.506550][T10079] bridge0: port 10(macvlan9) entered blocking state [ 331.516213][T10079] bridge0: port 10(macvlan9) entered disabled state [ 331.535740][T10079] device macvlan9 entered promiscuous mode [ 331.544831][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:41 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) syz_open_pts(r0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 05:48:41 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) [ 331.693387][T10095] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 331.719131][ T4505] usb 2-1: Service connection timeout for: 256 [ 331.726257][ T4505] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 331.754315][ T4505] ath9k_htc: Failed to initialize the device [ 331.776936][ T3685] usb 2-1: ath9k_htc: USB layer deinitialized 05:48:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) [ 331.800559][ T26] usb 5-1: Service connection timeout for: 256 [ 331.806849][ T26] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 331.820859][ T26] ath9k_htc: Failed to initialize the device [ 331.828090][ T7421] usb 5-1: ath9k_htc: USB layer deinitialized [ 331.838228][T10098] bridge0: port 11(macvlan10) entered blocking state [ 331.852750][T10098] bridge0: port 11(macvlan10) entered disabled state [ 331.861364][T10098] device macvlan10 entered promiscuous mode [ 331.868078][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) 05:48:41 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 332.149048][ T3685] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 332.249139][ T7421] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 332.729505][ T3685] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 332.738579][ T3685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.746668][ T3685] usb 2-1: Product: syz [ 332.754884][ T3685] usb 2-1: Manufacturer: syz [ 332.759655][ T3685] usb 2-1: SerialNumber: syz [ 332.820109][ T3685] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 332.839171][ T7421] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 332.852821][ T7421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.861889][ T7421] usb 5-1: Product: syz [ 332.866149][ T7421] usb 5-1: Manufacturer: syz [ 332.874429][ T7421] usb 5-1: SerialNumber: syz [ 332.920550][ T7421] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 333.459296][ T3685] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 333.590695][ T7421] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 333.874447][ T26] usb 2-1: USB disconnect, device number 19 [ 334.214079][ T4514] usb 5-1: USB disconnect, device number 6 05:48:43 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x41, &(0x7f0000000700)=@generic={0x0, 0x0, 0x39, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415"}) 05:48:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) 05:48:43 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 334.406870][T10116] __nla_validate_parse: 2 callbacks suppressed [ 334.406886][T10116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:44 executing program 0: socket$vsock_stream(0x11, 0x1, 0x0) 05:48:44 executing program 0: r0 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001340), 0x200000, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000180)='\x9fM\x1f\xeb\xbd\xecz\x84\xd5\xef\xaa\xeb{\x87\xf2]\xf4\xfe\xd04\\\x8e\'\xbd\xc6V\x9eH\xe6\xc2\xba1\xa8\xaaiA', 0x0, r1) 05:48:44 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 334.567381][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 334.646827][T10133] binder: 10132:10133 ioctl 40046205 0 returned -22 05:48:44 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) 05:48:44 executing program 0: socketpair(0xf, 0x3, 0x0, &(0x7f0000003140)) 05:48:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:44 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) [ 334.759158][ T3685] usb 2-1: Service connection timeout for: 256 [ 334.769991][ T3685] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 334.776960][T10137] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 334.784601][ T3685] ath9k_htc: Failed to initialize the device [ 334.802281][ T26] usb 2-1: ath9k_htc: USB layer deinitialized [ 334.839355][ T7421] usb 5-1: Service connection timeout for: 256 [ 334.851585][ T7421] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 334.869547][ T7421] ath9k_htc: Failed to initialize the device [ 334.876314][ T4514] usb 5-1: ath9k_htc: USB layer deinitialized [ 334.956843][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 335.169119][ T26] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 335.239280][ T4514] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 335.699313][ T26] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 335.708617][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.716965][ T26] usb 2-1: Product: syz [ 335.722616][ T26] usb 2-1: Manufacturer: syz [ 335.727370][ T26] usb 2-1: SerialNumber: syz [ 335.780132][ T26] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 335.789207][ T4514] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 335.801535][ T4514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.810847][ T4514] usb 5-1: Product: syz [ 335.815258][ T4514] usb 5-1: Manufacturer: syz [ 335.820107][ T4514] usb 5-1: SerialNumber: syz [ 335.861936][ T4514] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 336.379089][ T26] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 336.429192][ T4514] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 336.798231][ T7421] usb 2-1: USB disconnect, device number 20 [ 337.066496][ T3693] usb 5-1: USB disconnect, device number 7 05:48:46 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 05:48:46 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000080)) 05:48:46 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 337.318273][T10150] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:46 executing program 0: syz_clone(0x22348080, 0x0, 0x0, 0x0, 0x0, 0x0) 05:48:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x10132) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) [ 337.374913][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:46 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:47 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) 05:48:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x10132) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) [ 337.518398][T10165] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 337.557880][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 337.639762][ T26] usb 2-1: Service connection timeout for: 256 [ 337.653316][ T26] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 337.671054][ T26] ath9k_htc: Failed to initialize the device 05:48:47 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 337.686123][ T7421] usb 2-1: ath9k_htc: USB layer deinitialized [ 337.717852][T10172] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 337.728918][ T4514] usb 5-1: Service connection timeout for: 256 [ 337.736842][ T4514] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 337.745401][ T4514] ath9k_htc: Failed to initialize the device [ 337.755824][ T3693] usb 5-1: ath9k_htc: USB layer deinitialized 05:48:47 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x0, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 337.786296][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 338.109101][ T7421] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 338.119326][ T3693] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 338.629337][ T7421] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 338.638607][ T7421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.647096][ T3693] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 338.656207][ T7421] usb 2-1: Product: syz [ 338.660490][ T7421] usb 2-1: Manufacturer: syz [ 338.665095][ T7421] usb 2-1: SerialNumber: syz [ 338.670262][ T3693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.678259][ T3693] usb 5-1: Product: syz [ 338.683266][ T3693] usb 5-1: Manufacturer: syz [ 338.687908][ T3693] usb 5-1: SerialNumber: syz [ 338.730665][ T7421] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 338.740105][ T3693] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 339.309201][ T7421] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 339.319243][ T3685] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 339.916108][ T4514] usb 2-1: USB disconnect, device number 21 [ 339.940859][ T3693] usb 5-1: USB disconnect, device number 8 05:48:49 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 05:48:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 05:48:49 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef7605052", 0x9}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:49 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) 05:48:49 executing program 0: shmget(0x2, 0x5000, 0x0, &(0x7f0000ff9000/0x5000)=nil) [ 340.457725][T10181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef7605052", 0x9}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0xa, &(0x7f0000000040)=0x7000000, 0x4) [ 340.560379][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 340.599487][ T3685] usb 5-1: Service connection timeout for: 256 05:48:50 executing program 0: mkdir(&(0x7f0000001e40)='./file0\x00', 0x0) [ 340.605873][ T7421] usb 2-1: Service connection timeout for: 256 [ 340.615948][ T7421] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 340.624379][ T3685] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services 05:48:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef7605052", 0x9}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:50 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 340.652749][ T7421] ath9k_htc: Failed to initialize the device [ 340.659910][ T3685] ath9k_htc: Failed to initialize the device [ 340.685278][ T4514] usb 2-1: ath9k_htc: USB layer deinitialized [ 340.685485][ T3693] usb 5-1: ath9k_htc: USB layer deinitialized [ 340.753828][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 340.815474][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 341.059162][ T3693] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 341.089157][ T4514] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 341.589176][ T3693] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 341.598705][ T3693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.606886][ T3693] usb 5-1: Product: syz [ 341.611398][ T3693] usb 5-1: Manufacturer: syz [ 341.616084][ T3693] usb 5-1: SerialNumber: syz [ 341.629473][ T4514] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 341.638541][ T4514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.651569][ T4514] usb 2-1: Product: syz [ 341.655757][ T4514] usb 2-1: Manufacturer: syz [ 341.660692][ T3693] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 341.663378][ T4514] usb 2-1: SerialNumber: syz [ 341.730264][ T4514] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 342.249176][ T3693] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 342.349358][ T4514] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 342.662914][ T3685] usb 5-1: USB disconnect, device number 9 [ 342.958013][ T7421] usb 2-1: USB disconnect, device number 22 05:48:52 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 05:48:52 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@kfunc]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:48:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5d", 0xd}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:52 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:52 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) [ 343.486618][ T3693] usb 5-1: Service connection timeout for: 256 [ 343.504992][ T3693] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 343.526991][T10218] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000240)={0x1}) 05:48:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5d", 0xd}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 343.530512][ T3693] ath9k_htc: Failed to initialize the device [ 343.554833][ T3685] usb 5-1: ath9k_htc: USB layer deinitialized [ 343.594644][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5451, 0x0) 05:48:53 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001240)='net/ip_tables_matches\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000340)) [ 343.639971][ T4514] usb 2-1: Service connection timeout for: 256 [ 343.646491][ T4514] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 343.674906][ T4514] ath9k_htc: Failed to initialize the device 05:48:53 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5d", 0xd}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec5c6593df0073d73cc08c353ebaa9abb1840b2da5d06b8c051ccdbe9ecaec08f1", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 343.701455][ T7421] usb 2-1: ath9k_htc: USB layer deinitialized [ 343.778394][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 343.824073][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 343.959318][ T3685] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 344.099118][ T7421] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 344.569291][ T3685] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 344.579233][ T3685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.587424][ T3685] usb 5-1: Product: syz [ 344.591958][ T3685] usb 5-1: Manufacturer: syz [ 344.596589][ T3685] usb 5-1: SerialNumber: syz [ 344.651088][ T3685] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 344.710234][ T7421] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 344.719390][ T7421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.727415][ T7421] usb 2-1: Product: syz [ 344.732460][ T7421] usb 2-1: Manufacturer: syz [ 344.737528][ T7421] usb 2-1: SerialNumber: syz [ 344.790180][ T7421] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 345.269298][ T141] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 345.369170][ T7421] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 345.676871][ T3685] usb 5-1: USB disconnect, device number 10 [ 345.979554][ T3693] usb 2-1: USB disconnect, device number 23 05:48:55 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000700)=@generic={0x0, 0x0, 0x0, "748e0f4e"}) 05:48:55 executing program 0: semctl$GETNCNT(0x0, 0x4, 0xe, 0x0) 05:48:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa02", 0xf}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:55 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:55 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) 05:48:56 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x200015, 0x1, 0x1, 0x0, 0xb4}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@userptr={0x100, 0x3, 0x4, 0x2, 0x6, {0x77359400}, {0x1, 0xc, 0xff, 0x7, 0x9f, 0x3, "a5f3446e"}, 0x7fffffff, 0x2, {&(0x7f0000000140)}, 0xa6}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000200)={0x7, @remote}) [ 346.516269][T10249] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 346.530502][ T141] usb 5-1: Service connection timeout for: 256 [ 346.536738][ T141] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 346.562506][ T141] ath9k_htc: Failed to initialize the device [ 346.593750][ T3685] usb 5-1: ath9k_htc: USB layer deinitialized [ 346.600478][ T7421] usb 2-1: Service connection timeout for: 256 [ 346.608297][ T7421] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 346.620090][ T7421] ath9k_htc: Failed to initialize the device 05:48:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa02", 0xf}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 346.639109][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 346.653127][ T3693] usb 2-1: ath9k_htc: USB layer deinitialized 05:48:56 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa02", 0xf}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 346.770784][T10262] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x85, 0x0, &(0x7f0000000040)) [ 346.822454][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273", 0x10}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 347.009413][ T3685] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 347.029229][ T3693] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 347.559477][ T3685] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 347.569781][ T3685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.578127][ T3685] usb 5-1: Product: syz [ 347.586745][ T3693] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 347.596151][ T3685] usb 5-1: Manufacturer: syz [ 347.600932][ T3685] usb 5-1: SerialNumber: syz [ 347.606610][ T3693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.614776][ T3693] usb 2-1: Product: syz [ 347.618952][ T3693] usb 2-1: Manufacturer: syz [ 347.624739][ T3693] usb 2-1: SerialNumber: syz [ 347.660098][ T3685] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 347.669984][ T3693] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 348.309308][ T7421] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 348.318383][ T3693] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 348.719119][ T26] usb 5-1: USB disconnect, device number 11 [ 348.917324][ T3685] usb 2-1: USB disconnect, device number 24 05:48:58 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000700)=@generic={0x0, 0x0, 0x0, "748e0f4e"}) 05:48:58 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e21, 0x0, @loopback}, @in={0x2, 0x4e24, @remote}], 0x2c) 05:48:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273", 0x10}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:48:58 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) 05:48:58 executing program 0: keyctl$session_to_parent(0x15) 05:48:59 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) [ 349.470570][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 349.547914][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 349.559647][ T3693] usb 5-1: Service connection timeout for: 256 [ 349.565861][ T3693] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 349.573838][ T7421] usb 2-1: Service connection timeout for: 256 [ 349.588756][ T7421] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 05:48:59 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 349.606543][ T3693] ath9k_htc: Failed to initialize the device [ 349.613426][ T7421] ath9k_htc: Failed to initialize the device [ 349.619969][ T26] usb 5-1: ath9k_htc: USB layer deinitialized [ 349.620127][ T3685] usb 2-1: ath9k_htc: USB layer deinitialized [ 349.715006][T10293] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 349.745249][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:59 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:48:59 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) [ 349.865180][T10295] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 349.916883][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:48:59 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00'], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 349.999092][ T3685] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 350.009189][ T26] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 350.529212][ T3685] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 350.538296][ T3685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.551564][ T3685] usb 2-1: Product: syz [ 350.555742][ T3685] usb 2-1: Manufacturer: syz [ 350.562023][ T3685] usb 2-1: SerialNumber: syz [ 350.589356][ T26] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 350.598434][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.607016][ T26] usb 5-1: Product: syz [ 350.611599][ T26] usb 5-1: Manufacturer: syz [ 350.612336][ T3685] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 350.616864][ T26] usb 5-1: SerialNumber: syz [ 350.690167][ T26] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 351.209193][ T141] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 351.299192][ T26] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 351.722799][ T3693] usb 5-1: USB disconnect, device number 12 [ 351.820965][ T4505] usb 2-1: USB disconnect, device number 25 05:49:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="98", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='f', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) 05:49:01 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00'], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:01 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000700)=@generic={0x0, 0x0, 0x0, "748e0f4e"}) 05:49:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef7605052", 0x9}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:01 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) 05:49:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273", 0x10}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef7605052", 0x9}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 352.345757][T10307] __nla_validate_parse: 2 callbacks suppressed [ 352.345776][T10307] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 352.359248][ T26] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 352.368405][ T26] ath9k_htc: Failed to initialize the device [ 352.382945][ T3693] usb 5-1: ath9k_htc: USB layer deinitialized 05:49:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="98", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='f', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) [ 352.439233][ T141] usb 2-1: Service connection timeout for: 256 [ 352.445490][ T141] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 352.449428][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 352.477586][ T141] ath9k_htc: Failed to initialize the device [ 352.487210][ T4505] usb 2-1: ath9k_htc: USB layer deinitialized 05:49:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef7605052", 0x9}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:02 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x5, 0x0, 0x0, 0xb3550aa4ba878354, 0x8d}, 0x9c) 05:49:02 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00'], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5d", 0xd}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 352.643700][T10325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 352.723626][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5d", 0xd}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:02 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 352.779298][ T3693] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 352.860854][ T4505] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 352.908944][T10336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 353.022071][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 353.399927][ T4505] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 353.410777][ T4505] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.419326][ T3693] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 353.427262][ T4505] usb 2-1: Product: syz [ 353.437725][ T3693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.446702][ T4505] usb 2-1: Manufacturer: syz [ 353.448277][ T3693] usb 5-1: Product: syz [ 353.455626][ T3693] usb 5-1: Manufacturer: syz [ 353.467368][ T3693] usb 5-1: SerialNumber: syz [ 353.471533][ T4505] usb 2-1: SerialNumber: syz [ 353.520147][ T4505] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 353.529993][ T3693] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 354.139309][ T4505] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 354.169330][ T3693] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 354.594026][ T3685] usb 5-1: USB disconnect, device number 13 [ 354.759584][ T141] usb 2-1: USB disconnect, device number 26 05:49:04 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x25, &(0x7f0000000700)=@generic={0x0, 0x0, 0x1d, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831ff"}) 05:49:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5d", 0xd}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:04 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:04 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x5, 0x0, 0x0, 0xb3550aa4ba878354, 0x8d}, 0x9c) 05:49:04 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) [ 355.239251][ T3693] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 355.246345][ T3693] ath9k_htc: Failed to initialize the device [ 355.254042][ T3685] usb 5-1: ath9k_htc: USB layer deinitialized 05:49:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 355.308333][T10343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa02", 0xf}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 355.399158][ T4505] usb 2-1: Service connection timeout for: 256 [ 355.411069][ T4505] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 05:49:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec5c6593df0073d73cc08c353ebaa9abb1840b2da5d06b8c051ccdbe9ecaec08f1", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 355.480063][ T4505] ath9k_htc: Failed to initialize the device [ 355.494718][ T141] usb 2-1: ath9k_htc: USB layer deinitialized 05:49:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa02", 0xf}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 355.592006][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 355.709164][ T3685] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 355.889077][ T141] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 356.299322][ T3685] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 356.308415][ T3685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.316938][ T3685] usb 5-1: Product: syz [ 356.321543][ T3685] usb 5-1: Manufacturer: syz [ 356.326146][ T3685] usb 5-1: SerialNumber: syz [ 356.380069][ T3685] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 356.469420][ T141] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 356.478635][ T141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.492751][ T141] usb 2-1: Product: syz [ 356.497209][ T141] usb 2-1: Manufacturer: syz [ 356.502954][ T141] usb 2-1: SerialNumber: syz [ 356.550285][ T141] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 357.029421][ T3685] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 357.239889][ T141] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 357.445077][ T26] usb 5-1: USB disconnect, device number 14 [ 357.857448][ T4505] usb 2-1: USB disconnect, device number 27 [ 358.119243][ T3685] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 358.126261][ T3685] ath9k_htc: Failed to initialize the device [ 358.134185][ T26] usb 5-1: ath9k_htc: USB layer deinitialized 05:49:07 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x25, &(0x7f0000000700)=@generic={0x0, 0x0, 0x1d, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831ff"}) 05:49:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa02", 0xf}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:07 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:07 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x5, 0x0, 0x0, 0xb3550aa4ba878354, 0x8d}, 0x9c) 05:49:07 executing program 4: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) 05:49:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273", 0x10}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 358.397105][T10376] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 358.519307][ T141] usb 2-1: Service connection timeout for: 256 [ 358.526578][ T141] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 358.553416][ T141] ath9k_htc: Failed to initialize the device [ 358.567969][ T4505] usb 2-1: ath9k_htc: USB layer deinitialized 05:49:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 358.628232][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:08 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 358.916181][T10398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 358.939263][ T4505] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 358.986560][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 359.027203][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 359.480645][ T4505] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 359.490010][ T4505] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.498103][ T4505] usb 2-1: Product: syz [ 359.502679][ T4505] usb 2-1: Manufacturer: syz [ 359.507361][ T4505] usb 2-1: SerialNumber: syz [ 359.559940][ T4505] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 360.129272][ T4505] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 360.734559][ T141] usb 2-1: USB disconnect, device number 28 05:49:10 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x25, &(0x7f0000000700)=@generic={0x0, 0x0, 0x1d, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831ff"}) 05:49:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec5c6593df0073d73cc08c353ebaa9abb1840b2da5d06b8c051ccdbe9ecaec08f1", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:10 executing program 4: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) 05:49:10 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:10 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x5, 0x0, 0x0, 0xb3550aa4ba878354, 0x8d}, 0x9c) 05:49:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273", 0x10}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 361.274062][T10406] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.345248][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 361.399669][ T4505] usb 2-1: Service connection timeout for: 256 [ 361.414871][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.425701][ T4505] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 361.457466][ T4505] ath9k_htc: Failed to initialize the device [ 361.483031][ T141] usb 2-1: ath9k_htc: USB layer deinitialized 05:49:11 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:11 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 361.674378][T10421] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:11 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:11 executing program 4: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) [ 361.834183][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.890563][ T141] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 362.449319][ T141] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 362.459105][ T141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.467102][ T141] usb 2-1: Product: syz [ 362.472369][ T141] usb 2-1: Manufacturer: syz [ 362.477001][ T141] usb 2-1: SerialNumber: syz [ 362.530153][ T141] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 363.169498][ T141] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 363.778432][ T26] usb 2-1: USB disconnect, device number 29 05:49:13 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x33, &(0x7f0000000700)=@generic={0x0, 0x0, 0x2b, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789"}) 05:49:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:13 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273", 0x10}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:13 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x5, 0x0, 0x0, 0xb3550aa4ba878354, 0x8d}, 0x9c) 05:49:13 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) [ 364.307813][T10434] __nla_validate_parse: 1 callbacks suppressed [ 364.307829][T10434] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec5c6593df0073d73cc08c353ebaa9abb1840b2da5d06b8c051ccdbe9ecaec08f1", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 364.348143][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.372561][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:13 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 364.439264][ T141] usb 2-1: Service connection timeout for: 256 [ 364.452349][ T141] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 364.504766][ T141] ath9k_htc: Failed to initialize the device [ 364.534451][ T26] usb 2-1: ath9k_htc: USB layer deinitialized 05:49:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec5c6593df0073d73cc08c353ebaa9abb1840b2da5d06b8c051ccdbe9ecaec08f1", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 364.568283][T10450] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.660136][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.692424][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:14 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:14 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) [ 364.899435][ T26] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 364.920204][T10457] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.972836][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.000478][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.429560][ T26] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 365.446010][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.454728][ T26] usb 2-1: Product: syz [ 365.458912][ T26] usb 2-1: Manufacturer: syz [ 365.471949][ T26] usb 2-1: SerialNumber: syz [ 365.521022][ T26] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 366.089259][ T26] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 366.696178][ T141] usb 2-1: USB disconnect, device number 30 05:49:16 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x33, &(0x7f0000000700)=@generic={0x0, 0x0, 0x2b, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789"}) 05:49:16 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:16 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x5, 0x0, 0x0, 0xb3550aa4ba878354, 0x8d}, 0x9c) 05:49:16 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) 05:49:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 367.260136][T10466] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.319145][ T26] usb 2-1: Service connection timeout for: 256 [ 367.326324][ T26] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 367.344259][ T26] ath9k_htc: Failed to initialize the device 05:49:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 367.369454][ T141] usb 2-1: ath9k_htc: USB layer deinitialized 05:49:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:16 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 367.739329][ T141] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 368.279317][ T141] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 368.288413][ T141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.296764][ T141] usb 2-1: Product: syz [ 368.301167][ T141] usb 2-1: Manufacturer: syz [ 368.305768][ T141] usb 2-1: SerialNumber: syz [ 368.350041][ T141] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 368.999156][ T141] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 369.606900][ T7421] usb 2-1: USB disconnect, device number 31 05:49:19 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x33, &(0x7f0000000700)=@generic={0x0, 0x0, 0x2b, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789"}) 05:49:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:19 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) 05:49:19 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:19 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x5, 0x0, 0x0, 0xb3550aa4ba878354, 0x8d}, 0x9c) [ 370.162481][T10494] __nla_validate_parse: 3 callbacks suppressed [ 370.162497][T10494] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 370.235089][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 370.279159][ T141] usb 2-1: Service connection timeout for: 256 [ 370.288820][ T141] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 05:49:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 370.320148][ T141] ath9k_htc: Failed to initialize the device [ 370.346579][ T7421] usb 2-1: ath9k_htc: USB layer deinitialized 05:49:19 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 370.419419][ T26] usb 5-1: new high-speed USB device number 15 using dummy_hcd 05:49:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 370.531370][T10510] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 370.598841][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 370.749067][ T7421] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 370.950206][ T26] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 370.959824][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.968362][ T26] usb 5-1: Product: syz [ 370.974289][ T26] usb 5-1: Manufacturer: syz [ 370.979548][ T26] usb 5-1: SerialNumber: syz [ 371.059950][ T26] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 371.389375][ T7421] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 371.399731][ T7421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.407913][ T7421] usb 2-1: Product: syz [ 371.412332][ T7421] usb 2-1: Manufacturer: syz [ 371.417296][ T7421] usb 2-1: SerialNumber: syz [ 371.480707][ T7421] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 371.649316][ T26] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 372.071931][ T4505] usb 5-1: USB disconnect, device number 15 [ 372.179194][ T7421] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 372.679350][ T26] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 372.686652][ T26] ath9k_htc: Failed to initialize the device [ 372.693734][ T4505] usb 5-1: ath9k_htc: USB layer deinitialized [ 372.784038][ T3682] usb 2-1: USB disconnect, device number 32 05:49:22 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3a, &(0x7f0000000700)=@generic={0x0, 0x0, 0x32, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3"}) 05:49:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:22 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:22 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x5, 0x0, 0x0, 0xb3550aa4ba878354, 0x8d}, 0x9c) 05:49:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, 0x0, 0x0) 05:49:22 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) 05:49:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 373.369508][T10525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 373.399270][ T7421] usb 2-1: Service connection timeout for: 256 [ 373.421549][ T7421] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 373.481888][ T7421] ath9k_htc: Failed to initialize the device [ 373.491997][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 373.515358][ T3682] usb 2-1: ath9k_htc: USB layer deinitialized 05:49:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:23 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 373.589236][ T26] usb 5-1: new high-speed USB device number 16 using dummy_hcd 05:49:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 373.684931][T10536] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 373.757702][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 373.879818][ T3682] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 374.109260][ T26] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 374.119282][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.127415][ T26] usb 5-1: Product: syz [ 374.140910][ T26] usb 5-1: Manufacturer: syz [ 374.160164][ T26] usb 5-1: SerialNumber: syz [ 374.229907][ T26] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 374.419254][ T3682] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 374.428424][ T3682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.437273][ T3682] usb 2-1: Product: syz [ 374.441849][ T3682] usb 2-1: Manufacturer: syz [ 374.446482][ T3682] usb 2-1: SerialNumber: syz [ 374.490310][ T3682] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 374.829161][ T26] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 375.059188][ T4505] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 375.253665][ T7421] usb 5-1: USB disconnect, device number 16 [ 375.670073][ T3685] usb 2-1: USB disconnect, device number 33 [ 375.879202][ T26] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 375.886382][ T26] ath9k_htc: Failed to initialize the device [ 375.893740][ T7421] usb 5-1: ath9k_htc: USB layer deinitialized 05:49:25 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3a, &(0x7f0000000700)=@generic={0x0, 0x0, 0x32, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3"}) 05:49:25 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d8287281d28371852dbdeb80bc039737e72c203d5300648b26d1f05288ee9c81f2f76de27142b4c548df0fd814909c7551ef092c0465e7f2d2b2e22e14a12fc449cfee9eca0f458c7bbade15c92c273fe2dc3abe1b8f5c5b05dd49f6f3c6004ec5c6593df0073d73cc08c353ebaa9abb1840b2da5d06b8c051ccdbe9ecaec08f1", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, 0x0, 0x0) 05:49:25 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x5, 0x0, 0x0, 0xb3550aa4ba878354, 0x8d}, 0x9c) 05:49:25 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) [ 376.209520][T10550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 376.279420][ T4505] usb 2-1: Service connection timeout for: 256 [ 376.280144][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 376.285684][ T4505] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 376.286066][ T4505] ath9k_htc: Failed to initialize the device [ 376.298357][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:25 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 376.361969][ T3685] usb 2-1: ath9k_htc: USB layer deinitialized [ 376.481870][T10561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 376.491392][ T7421] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 376.540564][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 376.576659][T10561] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:26 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 376.749229][ T3685] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 376.766894][T10564] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 376.829276][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 376.849277][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:26 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="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", 0x100}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, 0x0, 0x0) [ 376.992108][T10567] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 377.104346][T10567] bridge0: port 12(macvlan11) entered blocking state [ 377.119269][ T7421] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 377.128397][ T7421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.159537][T10567] bridge0: port 12(macvlan11) entered disabled state [ 377.171575][ T7421] usb 5-1: Product: syz [ 377.179893][T10567] device macvlan11 entered promiscuous mode [ 377.187979][ T7421] usb 5-1: Manufacturer: syz [ 377.198370][ T7421] usb 5-1: SerialNumber: syz 05:49:26 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x5, 0x0, 0x0, 0xb3550aa4ba878354, 0x8d}, 0x9c) [ 377.286206][ T7421] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 377.333789][ T3685] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 377.352778][ T3685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.361219][ T3685] usb 2-1: Product: syz [ 377.365689][ T3685] usb 2-1: Manufacturer: syz [ 377.376057][ T3685] usb 2-1: SerialNumber: syz [ 377.424260][ T3685] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 377.999240][ T7421] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 378.129439][ T3685] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 378.360409][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.366759][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.422717][ T3693] usb 5-1: USB disconnect, device number 17 [ 378.740569][ T3682] usb 2-1: USB disconnect, device number 34 [ 379.089440][ T7421] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 379.096482][ T7421] ath9k_htc: Failed to initialize the device [ 379.103844][ T3693] usb 5-1: ath9k_htc: USB layer deinitialized 05:49:28 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3a, &(0x7f0000000700)=@generic={0x0, 0x0, 0x32, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3"}) 05:49:28 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:49:28 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x1}) 05:49:28 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x5, 0x0, 0x0, 0xb3550aa4ba878354, 0x8d}, 0x9c) 05:49:28 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) 05:49:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x3}, 0x90) [ 379.334504][T10586] bridge0: port 13(macvlan12) entered blocking state [ 379.343336][T10586] bridge0: port 13(macvlan12) entered disabled state [ 379.355083][T10586] device macvlan12 entered promiscuous mode 05:49:28 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 379.399154][ T3685] usb 2-1: Service connection timeout for: 256 [ 379.409135][ T3685] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 379.435023][ T3685] ath9k_htc: Failed to initialize the device [ 379.459263][ T3682] usb 2-1: ath9k_htc: USB layer deinitialized 05:49:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x10, 0x0, &(0x7f0000000040)) 05:49:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x10, 0x0, &(0x7f0000000040)) 05:49:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000080)=0x4) [ 379.668276][T10597] bridge0: port 14(macvlan13) entered blocking state [ 379.679334][ T3693] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 379.679780][T10597] bridge0: port 14(macvlan13) entered disabled state [ 379.706811][T10597] device macvlan13 entered promiscuous mode [ 379.765248][T10604] sctp: [Deprecated]: syz-executor.5 (pid 10604) Use of int in max_burst socket option. [ 379.765248][T10604] Use struct sctp_assoc_value instead 05:49:29 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 379.830858][ T3682] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 380.279320][ T3693] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 380.288758][ T3693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.299319][ T3693] usb 5-1: Product: syz [ 380.303648][ T3693] usb 5-1: Manufacturer: syz [ 380.308340][ T3693] usb 5-1: SerialNumber: syz [ 380.363840][ T3693] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 380.379387][ T3682] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 380.388648][ T3682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.398384][ T3682] usb 2-1: Product: syz [ 380.402809][ T3682] usb 2-1: Manufacturer: syz [ 380.407537][ T3682] usb 2-1: SerialNumber: syz [ 380.450191][ T3682] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 381.019280][ T26] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 381.069268][ T3693] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 381.625021][ T4505] usb 2-1: USB disconnect, device number 35 [ 381.692052][ T3682] usb 5-1: USB disconnect, device number 18 05:49:31 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3e, &(0x7f0000000700)=@generic={0x0, 0x0, 0x36, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda46110"}) 05:49:31 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 05:49:31 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, 0x0, 0x0) 05:49:31 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) [ 382.119084][ T3693] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 382.126253][ T3693] ath9k_htc: Failed to initialize the device 05:49:31 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) [ 382.180304][ T3682] usb 5-1: ath9k_htc: USB layer deinitialized [ 382.190322][T10612] __nla_validate_parse: 8 callbacks suppressed [ 382.190337][T10612] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 382.279429][ T26] usb 2-1: Service connection timeout for: 256 [ 382.295963][ T26] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 382.360076][ T26] ath9k_htc: Failed to initialize the device [ 382.413173][ T4505] usb 2-1: ath9k_htc: USB layer deinitialized [ 382.441037][T10623] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:31 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) [ 382.490838][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:32 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 382.700628][T10629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 382.740444][ T3682] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 382.798148][T10630] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 382.809215][ T4505] usb 2-1: new high-speed USB device number 36 using dummy_hcd 05:49:32 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) [ 382.858382][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:32 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, 0x0, 0x0) 05:49:32 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) [ 383.083156][T10639] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.141922][T10639] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.170126][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.269496][ T3682] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 383.291722][ T3682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.300480][ T3682] usb 5-1: Product: syz [ 383.305271][ T3682] usb 5-1: Manufacturer: syz [ 383.310376][ T3682] usb 5-1: SerialNumber: syz [ 383.340041][ T4505] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 383.350696][ T4505] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.359990][ T3682] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 383.396295][ T4505] usb 2-1: Product: syz [ 383.402799][ T4505] usb 2-1: Manufacturer: syz [ 383.418160][ T4505] usb 2-1: SerialNumber: syz [ 383.481411][ T4505] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 383.989450][ T3682] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 384.079372][ T26] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 384.624074][ T4516] usb 5-1: USB disconnect, device number 19 [ 384.696206][ T141] usb 2-1: USB disconnect, device number 36 [ 385.079221][ T3682] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 385.086515][ T3682] ath9k_htc: Failed to initialize the device [ 385.093344][ T4516] usb 5-1: ath9k_htc: USB layer deinitialized 05:49:34 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3e, &(0x7f0000000700)=@generic={0x0, 0x0, 0x36, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda46110"}) 05:49:34 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:49:34 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:34 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:49:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a6c5352eaef760505273d63f5daa0273cf", 0x11}, {&(0x7f0000000340)="4cd3d620a93f4794c32381bd7ad8b9ae1b58f054175ce522cfab3eb28d5c65845a1147b78a4d05624b510be4b0dd277b18bd6b11cf022c2aa275321e2b94574551295c1348967269784b2fa2590b7273dd9599407cf615da69013221efc10d9955ebfd1491cf9294afaf950c78620f58ac98984183a71182a5b12c43b10dfb3d", 0x80}], 0x2}}], 0x1, 0x8000) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/27, 0xfffffd3c}], 0x1}, 0x0) sendmsg$alg(r1, 0x0, 0x0) 05:49:34 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) [ 385.235381][T10653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 385.329400][ T26] usb 2-1: Service connection timeout for: 256 [ 385.336482][ T26] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 385.363522][ T26] ath9k_htc: Failed to initialize the device [ 385.373862][ T141] usb 2-1: ath9k_htc: USB layer deinitialized 05:49:34 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 385.679314][ T4516] usb 5-1: new high-speed USB device number 20 using dummy_hcd 05:49:35 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c000100", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 385.759174][ T141] usb 2-1: new high-speed USB device number 37 using dummy_hcd 05:49:35 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 05:49:35 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:49:35 executing program 3: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x16be02, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000100)={0x7}, 0x20000107) [ 386.094422][T10668] dlm: non-version read from control device 0 05:49:35 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c000100", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 386.269321][ T4516] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 386.289419][ T141] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 386.297041][ T4516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.316600][ T141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.325133][ T141] usb 2-1: Product: syz [ 386.329693][ T141] usb 2-1: Manufacturer: syz [ 386.334602][ T141] usb 2-1: SerialNumber: syz [ 386.358834][ T4516] usb 5-1: Product: syz [ 386.369859][ T4516] usb 5-1: Manufacturer: syz [ 386.374698][ T4516] usb 5-1: SerialNumber: syz [ 386.380229][ T141] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 386.440372][ T4516] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 387.039197][ T141] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 387.149303][ T3682] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 387.651729][ T26] usb 2-1: USB disconnect, device number 37 [ 387.766342][ T4516] usb 5-1: USB disconnect, device number 20 05:49:37 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3e, &(0x7f0000000700)=@generic={0x0, 0x0, 0x36, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda46110"}) 05:49:37 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:49:37 executing program 3: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x16be02, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000100)={0x7}, 0x20000107) 05:49:37 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c000100", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:37 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r3, r4, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) [ 388.165531][T10683] __nla_validate_parse: 13 callbacks suppressed [ 388.165547][T10683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:37 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) [ 388.199155][ T3682] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 388.199329][ T3682] ath9k_htc: Failed to initialize the device [ 388.199648][ T4516] usb 5-1: ath9k_htc: USB layer deinitialized 05:49:37 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e00", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 388.248852][T10687] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.248870][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.279429][ T141] usb 2-1: Service connection timeout for: 256 [ 388.279456][ T141] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 388.279820][ T141] ath9k_htc: Failed to initialize the device [ 388.280076][ T26] usb 2-1: ath9k_htc: USB layer deinitialized [ 388.281653][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.523613][T10697] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:38 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e00", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 388.637463][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.637480][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.645259][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.729237][ T26] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 388.789302][ T4516] usb 5-1: new high-speed USB device number 21 using dummy_hcd 05:49:38 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e00", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 388.919253][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.973713][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:38 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r3, r4, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) 05:49:38 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:49:38 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e0004000280", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 389.309461][ T26] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 389.332038][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.349017][ T26] usb 2-1: Product: syz [ 389.359394][ T4516] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 389.384137][ T4516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.396248][ T26] usb 2-1: Manufacturer: syz [ 389.429210][ T26] usb 2-1: SerialNumber: syz [ 389.442797][ T4516] usb 5-1: Product: syz [ 389.481714][ T4516] usb 5-1: Manufacturer: syz [ 389.519994][ T26] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 389.539224][ T4516] usb 5-1: SerialNumber: syz [ 389.640426][ T4516] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 390.209337][ T4512] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 390.309305][ T4505] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 390.716033][ T141] usb 5-1: USB disconnect, device number 21 [ 390.816785][ T3685] usb 2-1: USB disconnect, device number 38 05:49:40 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x40, &(0x7f0000000700)=@generic={0x0, 0x0, 0x38, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c4"}) 05:49:40 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e0004000280", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:40 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r3, r4, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) 05:49:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000240)='./file0\x00') mount$bind(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@v2, 0x14, 0x0) 05:49:40 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) 05:49:40 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 391.479265][ T4512] usb 2-1: Service connection timeout for: 256 [ 391.487165][ T4512] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 05:49:41 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e0004000280", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 391.559088][ T4505] usb 5-1: Service connection timeout for: 256 [ 391.571262][ T4505] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 391.604521][ T4512] ath9k_htc: Failed to initialize the device [ 391.665345][ T4505] ath9k_htc: Failed to initialize the device [ 391.679476][ T3685] usb 2-1: ath9k_htc: USB layer deinitialized [ 391.730719][ T141] usb 5-1: ath9k_htc: USB layer deinitialized 05:49:41 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e00040002800800", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 392.069090][ T3685] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 392.119091][ T141] usb 5-1: new high-speed USB device number 22 using dummy_hcd 05:49:41 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:49:41 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:49:41 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e00040002800800", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000240)='./file0\x00') mount$bind(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@v2, 0x14, 0x0) [ 392.629365][ T3685] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 392.659217][ T3685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.667669][ T3685] usb 2-1: Product: syz [ 392.689361][ T141] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 392.698731][ T3685] usb 2-1: Manufacturer: syz [ 392.729921][ T141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.750566][ T3685] usb 2-1: SerialNumber: syz [ 392.819778][ T141] usb 5-1: Product: syz [ 392.849861][ T3685] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 392.871072][ T141] usb 5-1: Manufacturer: syz [ 392.899051][ T141] usb 5-1: SerialNumber: syz [ 392.949830][ T141] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 393.669359][ T14] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 393.679160][ T3724] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 394.074491][ T7421] usb 5-1: USB disconnect, device number 22 [ 394.293033][ T141] usb 2-1: USB disconnect, device number 39 05:49:44 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x40, &(0x7f0000000700)=@generic={0x0, 0x0, 0x38, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c4"}) 05:49:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e00040002800800", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:44 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:49:44 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:49:44 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000e00000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x7d80f000) 05:49:44 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x48, &(0x7f0000000700)=@generic={0x0, 0x0, 0x40, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec8281"}) 05:49:44 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0xb, @vbi}) [ 394.850296][T10755] __nla_validate_parse: 21 callbacks suppressed [ 394.850311][T10755] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 394.929131][ T3724] usb 2-1: Service connection timeout for: 256 [ 394.935459][ T14] usb 5-1: Service connection timeout for: 256 [ 394.955308][ T3724] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 394.963572][ T14] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 394.985155][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.010576][ T3724] ath9k_htc: Failed to initialize the device [ 395.018234][ T14] ath9k_htc: Failed to initialize the device 05:49:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)) [ 395.032554][T10769] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.057392][ T141] usb 2-1: ath9k_htc: USB layer deinitialized [ 395.068029][ T7421] usb 5-1: ath9k_htc: USB layer deinitialized 05:49:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)) 05:49:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 05:49:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e0004000280080005", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 395.413378][T10777] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.434055][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.434710][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:45 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e0004000280080005", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 395.459195][ T141] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 395.459325][ T7421] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 395.612050][T10779] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.651574][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.652254][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 396.049916][ T7421] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 396.059166][ T7421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.067194][ T7421] usb 5-1: Product: syz [ 396.071558][ T141] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 396.080637][ T7421] usb 5-1: Manufacturer: syz [ 396.085221][ T7421] usb 5-1: SerialNumber: syz [ 396.089869][ T141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.097856][ T141] usb 2-1: Product: syz [ 396.105601][ T141] usb 2-1: Manufacturer: syz [ 396.110410][ T141] usb 2-1: SerialNumber: syz [ 396.149968][ T7421] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 396.159849][ T141] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 396.839440][ T3724] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 396.849060][ T141] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 397.256182][ T4505] usb 5-1: USB disconnect, device number 23 [ 397.443982][ T3682] usb 2-1: USB disconnect, device number 40 05:49:47 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x40, &(0x7f0000000700)=@generic={0x0, 0x0, 0x38, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c4"}) 05:49:47 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:49:47 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e0004000280080005", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:47 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:49:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 05:49:47 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) [ 397.998819][T10788] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 398.119198][ T141] usb 5-1: Service connection timeout for: 256 [ 398.119223][ T141] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 398.119302][ T3724] usb 2-1: Service connection timeout for: 256 05:49:47 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 398.119318][ T3724] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 398.119565][ T3724] ath9k_htc: Failed to initialize the device [ 398.119681][ T3682] usb 2-1: ath9k_htc: USB layer deinitialized [ 398.120071][ T141] ath9k_htc: Failed to initialize the device [ 398.120861][ T4505] usb 5-1: ath9k_htc: USB layer deinitialized [ 398.469148][ T4505] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 398.469260][ T3682] usb 2-1: new high-speed USB device number 41 using dummy_hcd 05:49:48 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 05:49:48 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) socket$bt_rfcomm(0x1f, 0x3, 0x3) openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:49:48 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:48 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 398.989402][ T4505] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 398.989424][ T4505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.989435][ T4505] usb 5-1: Product: syz [ 398.989443][ T4505] usb 5-1: Manufacturer: syz [ 398.989451][ T4505] usb 5-1: SerialNumber: syz [ 398.989551][ T3682] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 398.989565][ T3682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.989575][ T3682] usb 2-1: Product: syz [ 398.989583][ T3682] usb 2-1: Manufacturer: syz [ 398.989590][ T3682] usb 2-1: SerialNumber: syz [ 399.029823][ T4505] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 399.030809][ T3682] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 399.589355][ T3682] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 399.598394][ T4505] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 400.196662][ T14] usb 2-1: USB disconnect, device number 41 [ 400.218613][ T4512] usb 5-1: USB disconnect, device number 24 05:49:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:49:50 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:50 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) socket$bt_rfcomm(0x1f, 0x3, 0x3) openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:49:50 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:49:50 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) [ 400.735085][T10814] __nla_validate_parse: 11 callbacks suppressed [ 400.735102][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:50 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) 05:49:50 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) [ 400.839109][ T3682] usb 5-1: Service connection timeout for: 256 [ 400.839183][ T4505] usb 2-1: Service connection timeout for: 256 [ 400.851660][ T3682] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 400.871277][ T3682] ath9k_htc: Failed to initialize the device [ 400.903477][ T4505] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 400.919329][ T4512] usb 5-1: ath9k_htc: USB layer deinitialized [ 400.926464][ T4505] ath9k_htc: Failed to initialize the device [ 400.932946][ T14] usb 2-1: ath9k_htc: USB layer deinitialized 05:49:50 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 400.967152][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:50 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) 05:49:50 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:50 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) [ 401.266317][T10835] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 401.299051][ T4512] usb 5-1: new high-speed USB device number 25 using dummy_hcd 05:49:50 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 401.373082][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:49:51 executing program 1: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) 05:49:51 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) socket$bt_rfcomm(0x1f, 0x3, 0x3) openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:49:51 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 401.678084][T10845] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 401.752938][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 401.829275][ T4512] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 401.856867][ T4512] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.874977][ T4512] usb 5-1: Product: syz [ 401.881539][ T4512] usb 5-1: Manufacturer: syz [ 401.886275][ T4512] usb 5-1: SerialNumber: syz [ 401.930373][ T4512] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 402.509142][ T26] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 403.115459][ T3682] usb 5-1: USB disconnect, device number 25 05:49:53 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 05:49:53 executing program 1: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) 05:49:53 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:49:53 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:53 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r3, 0xffffffffffffffff, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:49:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:49:53 executing program 1: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) 05:49:53 executing program 1: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) [ 403.694474][T10863] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 403.776617][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 403.799231][ T26] usb 5-1: Service connection timeout for: 256 [ 403.815036][ T26] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services 05:49:53 executing program 1: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) [ 403.869537][ T26] ath9k_htc: Failed to initialize the device [ 403.923852][ T3682] usb 5-1: ath9k_htc: USB layer deinitialized 05:49:53 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:53 executing program 1: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) [ 404.069771][T10879] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:53 executing program 1: syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) [ 404.151015][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 404.319077][ T3682] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 404.849338][ T3682] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 404.858407][ T3682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.866605][ T3682] usb 5-1: Product: syz [ 404.870898][ T3682] usb 5-1: Manufacturer: syz [ 404.875494][ T3682] usb 5-1: SerialNumber: syz [ 404.921095][ T3682] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 405.489256][ T4512] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 406.094456][ T3682] usb 5-1: USB disconnect, device number 26 05:49:56 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000700)=@generic={0x0, 0x0, 0x0, "748e0f4e"}) 05:49:56 executing program 1: syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) 05:49:56 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:49:56 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r3, 0xffffffffffffffff, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:49:56 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:49:56 executing program 1: syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) 05:49:56 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) [ 406.662321][T10892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:56 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) 05:49:56 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) [ 406.759148][ T4512] usb 5-1: Service connection timeout for: 256 [ 406.766780][ T4512] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 406.789287][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:56 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 406.845043][ T4512] ath9k_htc: Failed to initialize the device 05:49:56 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) [ 406.888657][ T3682] usb 5-1: ath9k_htc: USB layer deinitialized [ 407.113658][T10913] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 407.230181][T10913] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 407.257328][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 407.259248][ T3682] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 407.829205][ T3682] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 407.838281][ T3682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.847231][ T3682] usb 5-1: Product: syz [ 407.852257][ T3682] usb 5-1: Manufacturer: syz [ 407.856878][ T3682] usb 5-1: SerialNumber: syz [ 407.900647][ T3682] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 408.469142][ T3682] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 409.076732][ T14] usb 5-1: USB disconnect, device number 27 05:49:59 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000700)=@generic={0x0, 0x0, 0x0, "748e0f4e"}) 05:49:59 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) 05:49:59 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r3, 0xffffffffffffffff, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:49:59 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f00000000c0)) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:49:59 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:49:59 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) [ 409.638009][T10924] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 409.719601][ T3682] usb 5-1: Service connection timeout for: 256 [ 409.735344][ T3682] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services 05:49:59 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa3096a, 0x0, '\x00', @p_u16=0x0}}) [ 409.784225][ T3682] ath9k_htc: Failed to initialize the device 05:49:59 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 409.835153][ T14] usb 5-1: ath9k_htc: USB layer deinitialized [ 409.865554][T10929] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 409.908320][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:49:59 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:49:59 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 410.203093][T10941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 410.219196][ T14] usb 5-1: new high-speed USB device number 28 using dummy_hcd 05:49:59 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 410.336378][T10941] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 410.789150][ T14] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 410.798466][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.806593][ T14] usb 5-1: Product: syz [ 410.810909][ T14] usb 5-1: Manufacturer: syz [ 410.815605][ T14] usb 5-1: SerialNumber: syz [ 410.879902][ T14] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 411.550626][ T7421] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 412.162389][ T141] usb 5-1: USB disconnect, device number 28 05:50:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f00000000c0)) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:02 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, '\x00', @p_u16=0x0}}) 05:50:02 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(0xffffffffffffffff, r4, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:02 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000700)=@generic={0x0, 0x0, 0x0, "748e0f4e"}) 05:50:02 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:02 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) creat(&(0x7f00000001c0)='./file0\x00', 0x12) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000240), 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000480)=""/89, 0x59}, {&(0x7f0000000840)=""/156, 0x9c}, {&(0x7f00000005c0)=""/4, 0x4}], 0x5}}, {{&(0x7f0000000700)=@sco={0x1f, @none}, 0x80, 0x0}, 0x5}, {{&(0x7f0000000e40)=@sco, 0x80, &(0x7f0000001040)=[{&(0x7f0000000ec0)=""/74, 0x4a}, {&(0x7f0000000f40)=""/230, 0xe6}], 0x2, &(0x7f0000001080)=""/186, 0xba}, 0x4}], 0x3, 0x100, 0x0) pipe2$9p(0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) [ 412.713611][T10950] __nla_validate_parse: 1 callbacks suppressed [ 412.713627][T10950] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 412.777938][T10950] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 412.839268][ T7421] usb 5-1: Service connection timeout for: 256 [ 412.847212][ T7421] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 412.860891][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 412.904836][ T7421] ath9k_htc: Failed to initialize the device [ 412.939496][ T141] usb 5-1: ath9k_htc: USB layer deinitialized 05:50:03 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000180)=""/37, 0x25}], 0x1) 05:50:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f00000000c0)) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:03 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(0xffffffffffffffff, r4, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:03 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:03 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 414.002449][T10976] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 414.112628][T10981] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 414.139710][ T141] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 414.157648][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:03 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 414.427778][T10985] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 414.534653][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 414.683845][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:04 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000400), &(0x7f0000000480)=0x80) 05:50:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) [ 414.749369][ T141] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 414.780627][ T141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.858375][ T141] usb 5-1: Product: syz [ 414.899433][ T141] usb 5-1: Manufacturer: syz [ 414.916771][ T141] usb 5-1: SerialNumber: syz [ 414.982012][ T141] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 415.639357][ T141] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 05:50:05 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x28, &(0x7f0000000700)=@generic={0x0, 0x0, 0x20, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd4918"}) 05:50:05 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(0xffffffffffffffff, r4, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:05 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:05 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:05 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) [ 415.753190][ T7421] usb 5-1: USB disconnect, device number 29 05:50:05 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 415.838091][T10999] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:05 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:05 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:05 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:05 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00'}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:05 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 416.679644][ T141] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 416.687186][ T141] ath9k_htc: Failed to initialize the device [ 416.694318][ T7421] usb 5-1: ath9k_htc: USB layer deinitialized [ 417.099311][ T7421] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 417.679313][ T7421] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 417.688500][ T7421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.696829][ T7421] usb 5-1: Product: syz [ 417.701117][ T7421] usb 5-1: Manufacturer: syz [ 417.705779][ T7421] usb 5-1: SerialNumber: syz [ 417.750201][ T7421] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 418.319162][ T7421] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 418.933876][ T4505] usb 5-1: USB disconnect, device number 30 05:50:08 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x28, &(0x7f0000000700)=@generic={0x0, 0x0, 0x20, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd4918"}) 05:50:08 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00'}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:08 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:08 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:08 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 419.479951][T11030] __nla_validate_parse: 8 callbacks suppressed [ 419.479967][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:09 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00'}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 419.559346][ T7421] usb 5-1: Service connection timeout for: 256 [ 419.572637][ T7421] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 419.586722][ T7421] ath9k_htc: Failed to initialize the device [ 419.599538][ T4505] usb 5-1: ath9k_htc: USB layer deinitialized 05:50:09 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 419.674672][T11037] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 419.691480][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:09 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:09 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:09 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 419.999685][ T4505] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 420.063602][T11046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:09 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 420.156367][T11046] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 420.187620][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 420.589401][ T4505] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 420.598651][ T4505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.607389][ T4505] usb 5-1: Product: syz [ 420.612105][ T4505] usb 5-1: Manufacturer: syz [ 420.617320][ T4505] usb 5-1: SerialNumber: syz [ 420.659974][ T4505] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 421.229183][ T4505] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 421.837901][ T3681] usb 5-1: USB disconnect, device number 31 05:50:11 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x28, &(0x7f0000000700)=@generic={0x0, 0x0, 0x20, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd4918"}) 05:50:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:11 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:11 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:11 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:11 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:11 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) [ 422.394696][T11060] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 422.519382][ T4505] usb 5-1: Service connection timeout for: 256 [ 422.530687][ T4505] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 422.582716][ T4505] ath9k_htc: Failed to initialize the device [ 422.622021][ T3681] usb 5-1: ath9k_htc: USB layer deinitialized 05:50:12 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) [ 422.635344][T11065] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 422.679310][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:12 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:12 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 422.912788][T11076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 423.039102][ T3681] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 423.057621][T11079] bridge0: port 15(macvlan14) entered blocking state [ 423.104673][T11079] bridge0: port 15(macvlan14) entered disabled state [ 423.128069][T11079] device macvlan14 entered promiscuous mode [ 423.570118][ T3681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 423.579419][ T3681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.587415][ T3681] usb 5-1: Product: syz [ 423.591819][ T3681] usb 5-1: Manufacturer: syz [ 423.596428][ T3681] usb 5-1: SerialNumber: syz [ 423.639993][ T3681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 424.209260][ T3681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 424.816421][ T7421] usb 5-1: USB disconnect, device number 32 05:50:14 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x38, &(0x7f0000000700)=@generic={0x0, 0x0, 0x30, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c"}) 05:50:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:14 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:14 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:14 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:14 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:14 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) [ 425.398706][T11086] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 425.479261][ T3681] usb 5-1: Service connection timeout for: 256 [ 425.486953][ T3681] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 425.595711][ T3681] ath9k_htc: Failed to initialize the device 05:50:15 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) [ 425.656322][T11086] bridge0: port 16(macvlan15) entered blocking state [ 425.669618][T11086] bridge0: port 16(macvlan15) entered disabled state [ 425.685060][ T7421] usb 5-1: ath9k_htc: USB layer deinitialized [ 425.685404][T11086] device macvlan15 entered promiscuous mode 05:50:15 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) [ 425.886427][T11104] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 426.046586][T11107] bridge0: port 17(macvlan16) entered blocking state [ 426.059062][ T7421] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 426.106418][T11107] bridge0: port 17(macvlan16) entered disabled state [ 426.120060][T11107] device macvlan16 entered promiscuous mode [ 426.589255][ T7421] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 426.598441][ T7421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.615741][ T7421] usb 5-1: Product: syz [ 426.619996][ T7421] usb 5-1: Manufacturer: syz [ 426.624594][ T7421] usb 5-1: SerialNumber: syz [ 426.670678][ T7421] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 427.259212][ T141] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 427.867226][ T4505] usb 5-1: USB disconnect, device number 33 05:50:17 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x38, &(0x7f0000000700)=@generic={0x0, 0x0, 0x30, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c"}) 05:50:17 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 05:50:17 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r3, r4, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:17 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:17 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 428.449507][T11118] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 428.529153][ T141] usb 5-1: Service connection timeout for: 256 [ 428.538078][ T141] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services 05:50:18 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 428.595716][ T141] ath9k_htc: Failed to initialize the device [ 428.618719][ T4505] usb 5-1: ath9k_htc: USB layer deinitialized [ 428.638269][T11126] bridge0: port 18(macvlan17) entered blocking state [ 428.681783][T11126] bridge0: port 18(macvlan17) entered disabled state 05:50:18 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 428.725598][T11126] device macvlan17 entered promiscuous mode 05:50:18 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 05:50:18 executing program 1: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r0, 0xfffffffffffffffd}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:18 executing program 1: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r0, 0xfffffffffffffffd}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 429.021344][T11137] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 429.049158][ T4505] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 429.287829][T11141] bridge0: port 19(macvlan18) entered blocking state [ 429.315713][T11141] bridge0: port 19(macvlan18) entered disabled state [ 429.323885][T11141] device macvlan18 entered promiscuous mode [ 429.629560][ T4505] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 429.638815][ T4505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.651735][ T4505] usb 5-1: Product: syz [ 429.655912][ T4505] usb 5-1: Manufacturer: syz [ 429.662428][ T4505] usb 5-1: SerialNumber: syz [ 429.711670][ T4505] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 430.289121][ T4505] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 430.908430][ T3682] usb 5-1: USB disconnect, device number 34 05:50:20 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x38, &(0x7f0000000700)=@generic={0x0, 0x0, 0x30, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c"}) 05:50:20 executing program 1: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r0, 0xfffffffffffffffd}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:20 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:20 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r3, r4, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:20 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 431.456278][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:21 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 431.516217][T11148] bridge0: port 20(macvlan19) entered blocking state [ 431.559644][T11148] bridge0: port 20(macvlan19) entered disabled state [ 431.569547][ T4505] usb 5-1: Service connection timeout for: 256 [ 431.583568][ T4505] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 431.602474][T11148] device macvlan19 entered promiscuous mode 05:50:21 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 431.628719][ T4505] ath9k_htc: Failed to initialize the device 05:50:21 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) [ 431.674134][ T3682] usb 5-1: ath9k_htc: USB layer deinitialized 05:50:21 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 431.895329][T11166] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:21 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 432.069239][ T3682] usb 5-1: new high-speed USB device number 35 using dummy_hcd 05:50:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) [ 432.181080][T11168] bridge0: port 21(macvlan20) entered blocking state [ 432.209266][T11168] bridge0: port 21(macvlan20) entered disabled state [ 432.283665][T11168] device macvlan20 entered promiscuous mode [ 432.699242][ T3682] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 432.708403][ T3682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.717240][ T3682] usb 5-1: Product: syz [ 432.721841][ T3682] usb 5-1: Manufacturer: syz [ 432.726535][ T3682] usb 5-1: SerialNumber: syz [ 432.783814][ T3682] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 433.349192][ T3682] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 433.957481][ T4505] usb 5-1: USB disconnect, device number 35 05:50:23 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x40, &(0x7f0000000700)=@generic={0x0, 0x0, 0x38, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c4"}) 05:50:23 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:23 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:23 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:23 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r3, r4, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:24 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 434.481999][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 434.594018][T11182] bridge0: port 22(macvlan21) entered blocking state [ 434.609178][ T3682] usb 5-1: Service connection timeout for: 256 [ 434.615936][ T3682] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 434.629228][T11182] bridge0: port 22(macvlan21) entered disabled state 05:50:24 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 434.648711][T11182] device macvlan21 entered promiscuous mode [ 434.660547][ T3682] ath9k_htc: Failed to initialize the device [ 434.682134][ T4505] usb 5-1: ath9k_htc: USB layer deinitialized 05:50:24 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:24 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 434.939541][T11200] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:24 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 435.069230][ T4505] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 435.128284][T11203] bridge0: port 23(macvlan22) entered blocking state [ 435.168677][T11203] bridge0: port 23(macvlan22) entered disabled state 05:50:24 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 435.216244][T11203] device macvlan22 entered promiscuous mode [ 435.689334][ T4505] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 435.698434][ T4505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.706525][ T4505] usb 5-1: Product: syz [ 435.710902][ T4505] usb 5-1: Manufacturer: syz [ 435.715499][ T4505] usb 5-1: SerialNumber: syz [ 435.759988][ T4505] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 436.359246][ T4505] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 436.968501][ T4512] usb 5-1: USB disconnect, device number 36 05:50:26 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:26 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x40, &(0x7f0000000700)=@generic={0x0, 0x0, 0x38, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c4"}) 05:50:26 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:26 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:26 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:27 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 437.550503][T11215] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:27 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 437.639283][ T4505] usb 5-1: Service connection timeout for: 256 [ 437.645608][ T4505] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 437.710367][ T4505] ath9k_htc: Failed to initialize the device [ 437.721703][T11224] bridge0: port 24(macvlan23) entered blocking state [ 437.761735][ T4512] usb 5-1: ath9k_htc: USB layer deinitialized 05:50:27 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 437.818662][T11224] bridge0: port 24(macvlan23) entered disabled state [ 437.898728][T11224] device macvlan23 entered promiscuous mode 05:50:27 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:27 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) [ 438.129061][ T4512] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 438.166996][T11234] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:27 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000), 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) [ 438.363297][T11234] bridge0: port 25(macvlan24) entered blocking state 05:50:27 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000), 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:27 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) [ 438.409432][T11234] bridge0: port 25(macvlan24) entered disabled state [ 438.433418][T11234] device macvlan24 entered promiscuous mode [ 438.709218][ T4512] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 438.725953][ T4512] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.754036][ T4512] usb 5-1: Product: syz [ 438.768136][ T4512] usb 5-1: Manufacturer: syz [ 438.783681][ T4512] usb 5-1: SerialNumber: syz [ 438.849872][ T4512] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 439.499218][ T4512] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 439.800486][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.806898][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.121185][ T4514] usb 5-1: USB disconnect, device number 37 05:50:30 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x40, &(0x7f0000000700)=@generic={0x0, 0x0, 0x38, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c4"}) 05:50:30 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:30 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:30 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000), 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:30 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) [ 440.630988][T11251] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:30 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x0, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 440.743304][T11257] bridge0: port 26(macvlan25) entered blocking state [ 440.759090][ T4512] usb 5-1: Service connection timeout for: 256 [ 440.769044][ T4512] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 440.783748][T11257] bridge0: port 26(macvlan25) entered disabled state 05:50:30 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 440.818232][T11257] device macvlan25 entered promiscuous mode [ 440.879526][ T4512] ath9k_htc: Failed to initialize the device [ 440.924624][ T4514] usb 5-1: ath9k_htc: USB layer deinitialized 05:50:30 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x0, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 440.964912][T11267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 441.189689][T11269] bridge0: port 27(macvlan26) entered blocking state 05:50:30 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x0, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 441.257198][T11269] bridge0: port 27(macvlan26) entered disabled state [ 441.301507][ T4514] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 441.366201][T11269] device macvlan26 entered promiscuous mode 05:50:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:30 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 441.593355][T11283] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 441.655001][T11283] bridge0: port 28(macvlan27) entered blocking state [ 441.679184][T11283] bridge0: port 28(macvlan27) entered disabled state [ 441.716395][T11283] device macvlan27 entered promiscuous mode [ 441.939327][ T4514] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 441.951780][ T4514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.961764][ T4514] usb 5-1: Product: syz [ 441.965935][ T4514] usb 5-1: Manufacturer: syz [ 441.973871][ T4514] usb 5-1: SerialNumber: syz [ 442.023502][ T4514] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 442.639284][ T4514] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 443.247818][ T141] usb 5-1: USB disconnect, device number 38 05:50:33 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x44, &(0x7f0000000700)=@generic={0x0, 0x0, 0x3c, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139d"}) 05:50:33 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r2, r3, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:33 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:33 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:33 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:33 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:33 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r2, r3, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) [ 443.802146][T11294] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:33 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:33 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r2, r3, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) [ 443.889428][ T4514] usb 5-1: Service connection timeout for: 256 [ 443.895628][ T4514] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services 05:50:33 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 443.951031][T11304] bridge0: port 29(macvlan28) entered blocking state [ 443.968751][ T4514] ath9k_htc: Failed to initialize the device [ 443.971188][T11304] bridge0: port 29(macvlan28) entered disabled state [ 443.993643][ T141] usb 5-1: ath9k_htc: USB layer deinitialized [ 444.020710][T11304] device macvlan28 entered promiscuous mode 05:50:33 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r3, r4, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) [ 444.379114][ T141] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 444.899190][ T141] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 444.908481][ T141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.917098][ T141] usb 5-1: Product: syz [ 444.924046][ T141] usb 5-1: Manufacturer: syz [ 444.928773][ T141] usb 5-1: SerialNumber: syz [ 444.980481][ T141] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 445.669156][ T141] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 446.293847][ T3693] usb 5-1: USB disconnect, device number 39 05:50:36 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x44, &(0x7f0000000700)=@generic={0x0, 0x0, 0x3c, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139d"}) 05:50:36 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) 05:50:36 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:36 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_enter(0xffffffffffffffff, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:36 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r3, r4, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:36 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 446.859216][T11322] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 446.919070][ T141] usb 5-1: Service connection timeout for: 256 [ 446.931422][ T141] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services 05:50:36 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 446.990501][ T141] ath9k_htc: Failed to initialize the device [ 447.018903][ T3693] usb 5-1: ath9k_htc: USB layer deinitialized [ 447.063157][T11331] bridge0: port 30(macvlan29) entered blocking state [ 447.115626][T11331] bridge0: port 30(macvlan29) entered disabled state 05:50:36 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 447.169586][T11331] device macvlan29 entered promiscuous mode [ 447.231428][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:36 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:36 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 447.389175][ T3693] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 447.422167][T11340] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:37 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 447.550256][T11343] bridge0: port 31(macvlan30) entered blocking state [ 447.615216][T11343] bridge0: port 31(macvlan30) entered disabled state [ 447.703235][T11343] device macvlan30 entered promiscuous mode [ 447.736607][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.919360][ T3693] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 447.928467][ T3693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.936918][ T3693] usb 5-1: Product: syz [ 447.941419][ T3693] usb 5-1: Manufacturer: syz [ 447.946069][ T3693] usb 5-1: SerialNumber: syz [ 447.990574][ T3693] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 448.589303][ T3693] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 449.200707][ T141] usb 5-1: USB disconnect, device number 40 05:50:39 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x44, &(0x7f0000000700)=@generic={0x0, 0x0, 0x3c, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139d"}) 05:50:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:39 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r3, r4, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:39 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:39 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_enter(0xffffffffffffffff, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:39 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8f10, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27}, 0xdcc}, 0x1, 0xf0ffffffffffff}, 0x0) [ 449.763841][T11352] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:39 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 449.879212][ T3693] usb 5-1: Service connection timeout for: 256 [ 449.887147][ T3693] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services 05:50:39 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 449.924443][T11362] bridge0: port 32(macvlan31) entered blocking state [ 449.947998][ T3693] ath9k_htc: Failed to initialize the device [ 449.964052][T11362] bridge0: port 32(macvlan31) entered disabled state [ 450.001206][T11362] device macvlan31 entered promiscuous mode [ 450.032862][ T141] usb 5-1: ath9k_htc: USB layer deinitialized 05:50:39 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 450.116346][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:39 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000013100)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f000000a200)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x88}, {&(0x7f0000000140)=""/85, 0x3d7}, {&(0x7f0000000fc0)=""/4093, 0x29b}, {&(0x7f0000000400)=""/106, 0x3ba}, {&(0x7f0000000740)=""/73, 0x4c}, {&(0x7f0000000200)=""/77, 0x2db}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa8}], 0xc4, &(0x7f0000000280)=""/191, 0x41, 0x40000000}}], 0x400000000000194, 0x0, &(0x7f0000003700)={0x77359400}) 05:50:39 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:39 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000013100)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f000000a200)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x88}, {&(0x7f0000000140)=""/85, 0x3d7}, {&(0x7f0000000fc0)=""/4093, 0x29b}, {&(0x7f0000000400)=""/106, 0x3ba}, {&(0x7f0000000740)=""/73, 0x4c}, {&(0x7f0000000200)=""/77, 0x2db}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa8}], 0xc4, &(0x7f0000000280)=""/191, 0x41, 0x40000000}}], 0x400000000000194, 0x0, &(0x7f0000003700)={0x77359400}) [ 450.459166][ T141] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 451.009527][ T141] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 451.019064][ T141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.027793][ T141] usb 5-1: Product: syz [ 451.040250][ T141] usb 5-1: Manufacturer: syz [ 451.044911][ T141] usb 5-1: SerialNumber: syz [ 451.110137][ T141] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 451.719341][ T141] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 452.343309][ T3693] usb 5-1: USB disconnect, device number 41 05:50:42 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x46, &(0x7f0000000700)=@generic={0x0, 0x0, 0x3e, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec"}) 05:50:42 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000140)) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:42 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:42 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_enter(0xffffffffffffffff, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:42 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r3, r4, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:42 executing program 2: socketpair(0x10, 0x80000, 0x0, &(0x7f0000000080)) 05:50:42 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="e8", 0x1}}, 0x0) 05:50:42 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000140)) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:42 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r3, r4, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x28a}, 0x1c) [ 452.999324][ T141] usb 5-1: Service connection timeout for: 256 [ 453.005928][ T141] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services 05:50:42 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000140)) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 453.058582][ T141] ath9k_htc: Failed to initialize the device [ 453.084548][ T3693] usb 5-1: ath9k_htc: USB layer deinitialized 05:50:42 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r3, r4, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) [ 453.469099][ T3693] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 453.999359][ T3693] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 454.008440][ T3693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.017011][ T3693] usb 5-1: Product: syz [ 454.022879][ T3693] usb 5-1: Manufacturer: syz [ 454.031752][ T3693] usb 5-1: SerialNumber: syz [ 454.079978][ T3693] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 454.710565][ T14] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 455.353689][ T4514] usb 5-1: USB disconnect, device number 42 05:50:45 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:45 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2040, &(0x7f0000000540)) 05:50:45 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:45 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x46, &(0x7f0000000700)=@generic={0x0, 0x0, 0x3e, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec"}) 05:50:45 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:45 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x7, @disconnect={{0x406, 0x3}}}, 0x7) 05:50:45 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 455.959247][ T14] usb 5-1: Service connection timeout for: 256 [ 455.965460][ T14] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 456.034327][ T14] ath9k_htc: Failed to initialize the device [ 456.057144][ T4514] usb 5-1: ath9k_htc: USB layer deinitialized 05:50:45 executing program 2: syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x5, &(0x7f0000000380)=[{&(0x7f0000000080)}, {&(0x7f00000000c0), 0x0, 0x1}, {&(0x7f0000000140), 0x0, 0x401}, {&(0x7f00000001c0)}, {0x0}], 0x0, &(0x7f0000000440)={[{'+!'}, {']\'%/{/!'}, {'!^!'}, {'#@-!,$&+-{\\'}], [{@uid_lt={'uid<', 0xee00}}, {@pcr}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@smackfsroot={'smackfsroot', 0x3d, '*'}}]}) syz_mount_image$vfat(&(0x7f0000001580), &(0x7f00000015c0)='./file0\x00', 0x7, 0x8, &(0x7f0000001b80)=[{&(0x7f0000001600)="45abf5adf74438cdcf83ab1b7e8f42f177bb3e707d050b649b82a6c3f1ce52d1a764896182f67880d732982c9f043a85861986ebd71df6403c027000eafccc250ee2c0cca7c460", 0x47}, {&(0x7f00000016c0)="35372ef38f89c2f518b4f7593a70af2803bd30c6dcee202f3288d6dfb99371e4f28b1d6dbf0c68b0cf8b7f6c18d1969cbfc31fd0e90889fc2d095ba8e72d0c6a0fc38541f7e5b516e7effb92e2633417d89306ffa35a842305f5714a71825b8038df257375def5963f60c418c51a7e4de9886f239b328c69c4d145d24f690ff37f3a6b972e47f1880e52905ae74b275425", 0x91, 0xd369}, {&(0x7f0000001780)="e7fe00011cc8ae442ab1c9217ce2fcd2790ad0948367966d34e9d1c13ba6cdaa9aa0ac525badd57462036a8f36ee7df508703cadfb3871300d4ce0a57d6773449b4e06db162400cd", 0x48, 0x7}, {0x0, 0x0, 0x6}, {0x0}, {&(0x7f0000001980)="d17545fd9fb718e1d853340c57531754571b7c01f26c01742c63f8a9c96dcf00440267e395608e3ad07d3fe6c8409a5c513ad965304a3e1c77f79d02d5f6725f8f24a35039520f2d187b9634f491066217f8420498b54810a969fecb1e0a52e0af77e05ac6eeaa248c4bd39888309150bab175282fa4f1a7081d7825d4493e09b8464ee7b34533cf32a52deaf880a7aa12aeb7e4abbb1aa0e7cf535c933117209cc53f896eb4e5f01b63846c16d73218ea6811bd81a3ec8b815aa8034bbfbd648381ee0d7c7382a9350146245feb869dd6e764db", 0xd4}, {&(0x7f0000001a80)="5595cd00b93bb244aa1f6a1eb19373077715a694c66f09ac9e8528d4c185eb1af51d56eb7b072b5c7d27590f237c53e46a4a16fe6d5072b16c8b598096b8735b73ad499e5ce8894462ea78f1ea7377f555834e169763464b96ab", 0x5a}, {&(0x7f0000001b00), 0x0, 0x83f}], 0x880, &(0x7f0000001c80)={[{@shortname_winnt}, {@utf8no}, {@uni_xlateno}, {@utf8}, {@shortname_winnt}]}) fanotify_mark(0xffffffffffffffff, 0x84, 0x48000020, 0xffffffffffffffff, &(0x7f0000002200)='./file0\x00') 05:50:45 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 456.187723][T11426] loop2: detected capacity change from 0 to 4 05:50:45 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 456.282784][ T4461] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 456.313044][ T4461] Buffer I/O error on dev loop2, logical block 0, async page read 05:50:45 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 456.374186][ T4461] ldm_validate_partition_table(): Disk read failed. [ 456.415996][ T4461] Dev loop2: unable to read RDB block 0 [ 456.439496][ T4514] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 456.452210][ T4461] loop2: unable to read partition table 05:50:45 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 456.488171][ T4461] loop2: partition table beyond EOD, truncated [ 456.529678][T11429] loop2: detected capacity change from 0 to 211 [ 456.573979][T11429] FAT-fs (loop2): invalid media value (0x6f) [ 456.585722][T11429] FAT-fs (loop2): Can't find a valid FAT filesystem 05:50:46 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:46 executing program 2: syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x5, &(0x7f0000000380)=[{&(0x7f0000000080)}, {&(0x7f00000000c0), 0x0, 0x1}, {&(0x7f0000000140), 0x0, 0x401}, {&(0x7f00000001c0)}, {0x0}], 0x0, &(0x7f0000000440)={[{'+!'}, {']\'%/{/!'}, {'!^!'}, {'#@-!,$&+-{\\'}], [{@uid_lt={'uid<', 0xee00}}, {@pcr}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@smackfsroot={'smackfsroot', 0x3d, '*'}}]}) syz_mount_image$vfat(&(0x7f0000001580), &(0x7f00000015c0)='./file0\x00', 0x7, 0x8, &(0x7f0000001b80)=[{&(0x7f0000001600)="45abf5adf74438cdcf83ab1b7e8f42f177bb3e707d050b649b82a6c3f1ce52d1a764896182f67880d732982c9f043a85861986ebd71df6403c027000eafccc250ee2c0cca7c460", 0x47}, {&(0x7f00000016c0)="35372ef38f89c2f518b4f7593a70af2803bd30c6dcee202f3288d6dfb99371e4f28b1d6dbf0c68b0cf8b7f6c18d1969cbfc31fd0e90889fc2d095ba8e72d0c6a0fc38541f7e5b516e7effb92e2633417d89306ffa35a842305f5714a71825b8038df257375def5963f60c418c51a7e4de9886f239b328c69c4d145d24f690ff37f3a6b972e47f1880e52905ae74b275425", 0x91, 0xd369}, {&(0x7f0000001780)="e7fe00011cc8ae442ab1c9217ce2fcd2790ad0948367966d34e9d1c13ba6cdaa9aa0ac525badd57462036a8f36ee7df508703cadfb3871300d4ce0a57d6773449b4e06db162400cd", 0x48, 0x7}, {0x0, 0x0, 0x6}, {0x0}, {&(0x7f0000001980)="d17545fd9fb718e1d853340c57531754571b7c01f26c01742c63f8a9c96dcf00440267e395608e3ad07d3fe6c8409a5c513ad965304a3e1c77f79d02d5f6725f8f24a35039520f2d187b9634f491066217f8420498b54810a969fecb1e0a52e0af77e05ac6eeaa248c4bd39888309150bab175282fa4f1a7081d7825d4493e09b8464ee7b34533cf32a52deaf880a7aa12aeb7e4abbb1aa0e7cf535c933117209cc53f896eb4e5f01b63846c16d73218ea6811bd81a3ec8b815aa8034bbfbd648381ee0d7c7382a9350146245feb869dd6e764db", 0xd4}, {&(0x7f0000001a80)="5595cd00b93bb244aa1f6a1eb19373077715a694c66f09ac9e8528d4c185eb1af51d56eb7b072b5c7d27590f237c53e46a4a16fe6d5072b16c8b598096b8735b73ad499e5ce8894462ea78f1ea7377f555834e169763464b96ab", 0x5a}, {&(0x7f0000001b00), 0x0, 0x83f}], 0x880, &(0x7f0000001c80)={[{@shortname_winnt}, {@utf8no}, {@uni_xlateno}, {@utf8}, {@shortname_winnt}]}) fanotify_mark(0xffffffffffffffff, 0x84, 0x48000020, 0xffffffffffffffff, &(0x7f0000002200)='./file0\x00') 05:50:46 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 456.834458][T11440] loop2: detected capacity change from 0 to 4 [ 456.839615][ T3648] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 456.872165][ T3648] Buffer I/O error on dev loop2, logical block 0, async page read [ 456.911360][ T3648] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 456.926334][ T3648] Buffer I/O error on dev loop2, logical block 0, async page read [ 456.942373][ T3648] ldm_validate_partition_table(): Disk read failed. [ 456.961078][ T3648] Dev loop2: unable to read RDB block 0 [ 456.975120][ T3648] loop2: unable to read partition table [ 456.981466][ T4514] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 456.990899][ T3648] loop2: partition table beyond EOD, truncated [ 456.997231][ T4514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.009980][ T4514] usb 5-1: Product: syz [ 457.014544][ T4514] usb 5-1: Manufacturer: syz [ 457.019901][ T4514] usb 5-1: SerialNumber: syz [ 457.030385][T11445] loop2: detected capacity change from 0 to 211 [ 457.051838][ T3648] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 457.068677][T11445] FAT-fs (loop2): invalid media value (0x6f) [ 457.075551][T11445] FAT-fs (loop2): Can't find a valid FAT filesystem [ 457.099740][ T4514] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 457.699366][ T4514] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 458.324744][ T26] usb 5-1: USB disconnect, device number 43 05:50:48 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x46, &(0x7f0000000700)=@generic={0x0, 0x0, 0x3e, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec"}) 05:50:48 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00'}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:48 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:48 executing program 2: syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x5, &(0x7f0000000380)=[{&(0x7f0000000080)}, {&(0x7f00000000c0), 0x0, 0x1}, {&(0x7f0000000140), 0x0, 0x401}, {&(0x7f00000001c0)}, {0x0}], 0x0, &(0x7f0000000440)={[{'+!'}, {']\'%/{/!'}, {'!^!'}, {'#@-!,$&+-{\\'}], [{@uid_lt={'uid<', 0xee00}}, {@pcr}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@smackfsroot={'smackfsroot', 0x3d, '*'}}]}) syz_mount_image$vfat(&(0x7f0000001580), &(0x7f00000015c0)='./file0\x00', 0x7, 0x8, &(0x7f0000001b80)=[{&(0x7f0000001600)="45abf5adf74438cdcf83ab1b7e8f42f177bb3e707d050b649b82a6c3f1ce52d1a764896182f67880d732982c9f043a85861986ebd71df6403c027000eafccc250ee2c0cca7c460", 0x47}, {&(0x7f00000016c0)="35372ef38f89c2f518b4f7593a70af2803bd30c6dcee202f3288d6dfb99371e4f28b1d6dbf0c68b0cf8b7f6c18d1969cbfc31fd0e90889fc2d095ba8e72d0c6a0fc38541f7e5b516e7effb92e2633417d89306ffa35a842305f5714a71825b8038df257375def5963f60c418c51a7e4de9886f239b328c69c4d145d24f690ff37f3a6b972e47f1880e52905ae74b275425", 0x91, 0xd369}, {&(0x7f0000001780)="e7fe00011cc8ae442ab1c9217ce2fcd2790ad0948367966d34e9d1c13ba6cdaa9aa0ac525badd57462036a8f36ee7df508703cadfb3871300d4ce0a57d6773449b4e06db162400cd", 0x48, 0x7}, {0x0, 0x0, 0x6}, {0x0}, {&(0x7f0000001980)="d17545fd9fb718e1d853340c57531754571b7c01f26c01742c63f8a9c96dcf00440267e395608e3ad07d3fe6c8409a5c513ad965304a3e1c77f79d02d5f6725f8f24a35039520f2d187b9634f491066217f8420498b54810a969fecb1e0a52e0af77e05ac6eeaa248c4bd39888309150bab175282fa4f1a7081d7825d4493e09b8464ee7b34533cf32a52deaf880a7aa12aeb7e4abbb1aa0e7cf535c933117209cc53f896eb4e5f01b63846c16d73218ea6811bd81a3ec8b815aa8034bbfbd648381ee0d7c7382a9350146245feb869dd6e764db", 0xd4}, {&(0x7f0000001a80)="5595cd00b93bb244aa1f6a1eb19373077715a694c66f09ac9e8528d4c185eb1af51d56eb7b072b5c7d27590f237c53e46a4a16fe6d5072b16c8b598096b8735b73ad499e5ce8894462ea78f1ea7377f555834e169763464b96ab", 0x5a}, {&(0x7f0000001b00), 0x0, 0x83f}], 0x880, &(0x7f0000001c80)={[{@shortname_winnt}, {@utf8no}, {@uni_xlateno}, {@utf8}, {@shortname_winnt}]}) fanotify_mark(0xffffffffffffffff, 0x84, 0x48000020, 0xffffffffffffffff, &(0x7f0000002200)='./file0\x00') 05:50:48 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:48 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:48 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00'}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 458.860230][T11453] loop2: detected capacity change from 0 to 4 05:50:48 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00'}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 458.921402][T11453] loop2: detected capacity change from 0 to 211 [ 458.948948][ T3648] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.958353][ T3648] Buffer I/O error on dev loop2, logical block 0, async page read [ 458.999110][ T4514] usb 5-1: Service connection timeout for: 256 [ 459.002983][ T3648] loop2: unable to read partition table [ 459.015878][T11453] FAT-fs (loop2): invalid media value (0x6f) [ 459.022078][ T4514] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 459.022515][ T4514] ath9k_htc: Failed to initialize the device 05:50:48 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00'}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 459.089173][T11453] FAT-fs (loop2): Can't find a valid FAT filesystem [ 459.111308][ T26] usb 5-1: ath9k_htc: USB layer deinitialized 05:50:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 05:50:48 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00'}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:49 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00'}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 459.509095][ T26] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 460.069369][ T26] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 460.078446][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.086494][ T26] usb 5-1: Product: syz [ 460.090765][ T26] usb 5-1: Manufacturer: syz [ 460.095378][ T26] usb 5-1: SerialNumber: syz [ 460.153594][ T26] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 460.749257][ T26] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 461.363409][ T14] usb 5-1: USB disconnect, device number 44 05:50:51 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x47, &(0x7f0000000700)=@generic={0x0, 0x0, 0x3f, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec82"}) 05:50:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 05:50:51 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:51 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:51 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:51 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:51 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 462.039162][ T26] usb 5-1: Service connection timeout for: 256 [ 462.046747][ T26] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services 05:50:51 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 462.091030][ T26] ath9k_htc: Failed to initialize the device [ 462.124964][ T14] usb 5-1: ath9k_htc: USB layer deinitialized 05:50:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 05:50:51 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) 05:50:51 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 462.539107][ T14] usb 5-1: new high-speed USB device number 45 using dummy_hcd 05:50:52 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x2, 0x0) [ 463.159400][ T14] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 463.169586][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.177588][ T14] usb 5-1: Product: syz [ 463.182553][ T14] usb 5-1: Manufacturer: syz [ 463.187156][ T14] usb 5-1: SerialNumber: syz [ 463.240141][ T14] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 463.829326][ T3681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 464.452574][ T14] usb 5-1: USB disconnect, device number 45 05:50:54 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:54 executing program 2: socketpair(0x28, 0x0, 0x1, &(0x7f0000000000)) 05:50:54 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, 0x0, 0x0, 0x0) 05:50:54 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:54 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:54 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x47, &(0x7f0000000700)=@generic={0x0, 0x0, 0x3f, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec82"}) 05:50:54 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, 0x0, 0x0, 0x0) 05:50:54 executing program 2: bpf$MAP_CREATE(0x21, &(0x7f0000000040), 0x48) [ 465.079063][ T3681] usb 5-1: Service connection timeout for: 256 [ 465.086209][ T3681] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 465.111480][ T3681] ath9k_htc: Failed to initialize the device 05:50:54 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x40045701, 0x0) 05:50:54 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, 0x0, 0x0, 0x0) [ 465.143794][ T14] usb 5-1: ath9k_htc: USB layer deinitialized 05:50:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000007200)={0x0, 0x0, &(0x7f00000071c0)={&(0x7f0000007180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 05:50:54 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 465.519090][ T14] usb 5-1: new high-speed USB device number 46 using dummy_hcd 05:50:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x0, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000007200)={0x0, 0x0, &(0x7f00000071c0)={&(0x7f0000007180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 05:50:55 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 05:50:55 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 466.069479][ T14] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 466.083472][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.096028][ T14] usb 5-1: Product: syz [ 466.100833][ T14] usb 5-1: Manufacturer: syz [ 466.105717][ T14] usb 5-1: SerialNumber: syz [ 466.160097][ T14] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 466.749618][ T14] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 467.372778][ T3693] usb 5-1: USB disconnect, device number 46 05:50:57 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000003180)=@ready={0x0, 0x0, 0x8, "46182472"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x47, &(0x7f0000000700)=@generic={0x0, 0x0, 0x3f, "748e0f4e", "4c0f5b38e57b578d4d979b9c5ce114d97e09eb29d3c3586a7450c831fffd49188e8c448bcdcfc63b9d6789da3475884c3ba3bda4611048c415ac139dd3ec82"}) 05:50:57 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 05:50:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000007200)={0x0, 0x0, &(0x7f00000071c0)={&(0x7f0000007180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 05:50:57 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:50:57 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) io_uring_enter(r2, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:50:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x0, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:50:57 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 05:50:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000007200)={0x0, 0x0, &(0x7f00000071c0)={&(0x7f0000007180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) [ 468.039343][ T14] usb 5-1: Service connection timeout for: 256 [ 468.049401][ T14] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 468.074496][ T14] ath9k_htc: Failed to initialize the device 05:50:57 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 05:50:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000), 0x2) [ 468.089430][ T3693] usb 5-1: ath9k_htc: USB layer deinitialized 05:50:57 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 05:50:57 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[]) close(r0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)}, 0x0) [ 468.361127][T11577] loop2: detected capacity change from 0 to 545 [ 468.449145][ T3693] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 468.465742][T11577] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 468.578223][ T3641] EXT4-fs (loop2): unmounting filesystem. [ 469.009295][ T3693] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 469.018364][ T3693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.027271][ T3693] usb 5-1: Product: syz [ 469.031531][ T3693] usb 5-1: Manufacturer: syz [ 469.036133][ T3693] usb 5-1: SerialNumber: syz [ 469.080626][ T3693] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 469.649190][ T3693] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 470.286350][ T4512] usb 5-1: USB disconnect, device number 47 05:51:00 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[]) close(r0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)}, 0x0) 05:51:00 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x1, 0x0) 05:51:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x0, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:00 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:00 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) io_uring_enter(r2, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:00 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[]) close(r0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)}, 0x0) 05:51:00 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x1, 0x0) [ 470.832981][T11589] loop2: detected capacity change from 0 to 545 [ 470.885779][T11592] loop4: detected capacity change from 0 to 545 [ 470.919454][ T3693] usb 5-1: Service connection timeout for: 256 [ 470.926819][ T3693] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services 05:51:00 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x2e) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffd}, 0x18) sendmmsg(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x1, 0x0) [ 470.982582][ T3693] ath9k_htc: Failed to initialize the device [ 471.011010][ T4512] usb 5-1: ath9k_htc: USB layer deinitialized [ 471.022020][T11592] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 471.040208][T11589] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 05:51:00 executing program 4: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x7}, &(0x7f0000000180)={0x77359400}, 0x0) 05:51:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x0, @random="810b108fd417"}, 0x0, {0x2, 0x0, @loopback}, 'veth0_macvtap\x00'}) [ 471.172790][ T3641] EXT4-fs (loop2): unmounting filesystem. 05:51:00 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000006d00), 0xff, 0x0) read$char_usb(r0, 0x0, 0x0) [ 471.241185][ T3640] EXT4-fs (loop4): unmounting filesystem. 05:51:00 executing program 2: bpf$OBJ_GET_PROG(0x22, &(0x7f0000000200)={0x0, 0x0, 0x8}, 0x10) 05:51:00 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f0000003640), 0xffffffffffffffff) 05:51:01 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002940)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000009280)={@loopback, @multicast2, r2}, 0xc) 05:51:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:01 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:01 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f0000003640), 0xffffffffffffffff) 05:51:01 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) io_uring_enter(r2, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@local, @private1, @local, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1000002}) 05:51:01 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f0000003640), 0xffffffffffffffff) 05:51:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="28000000100001000000000000000000080000000c00000008000000ffffffff08000400a6cdad"], 0x28}], 0x1}, 0x0) 05:51:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002940)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@loopback, 0x0, r2}) 05:51:01 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f0000003640), 0xffffffffffffffff) 05:51:01 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000040)={'bond_slave_0\x00', @ifru_mtu}) 05:51:01 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ifreq(r0, 0xc0189436, &(0x7f0000000000)={'nr0\x00', @ifru_hwaddr=@broadcast}) 05:51:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @local}, 0xc) 05:51:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:02 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:02 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000040)={'bond_slave_0\x00', @ifru_mtu}) 05:51:02 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:02 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x890b, 0x0) 05:51:02 executing program 2: syz_mount_image$tmpfs(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) 05:51:02 executing program 1: r0 = socket(0x10, 0x2, 0xa) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}]}, 0x28}}, 0x0) 05:51:02 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) 05:51:02 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x2}]}]}}, &(0x7f0000000300)=""/141, 0x36, 0x8d, 0x1}, 0x20) 05:51:02 executing program 1: r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x7}) 05:51:02 executing program 2: r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) 05:51:02 executing program 4: bpf$MAP_CREATE(0x1d, 0x0, 0x0) 05:51:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5452) 05:51:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:03 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000280)) 05:51:03 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:03 executing program 4: r0 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000200)) 05:51:03 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}], 0x10) 05:51:03 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) 05:51:03 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000002880), 0x20e42, 0x0) 05:51:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x304, 0xffffffffffffffff, 0x8}, 0x48) 05:51:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002880), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0xc020660b, 0x0) 05:51:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002880), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 05:51:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 05:51:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x48) 05:51:04 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="a6", 0x1}], 0x1, &(0x7f0000000240)=ANY=[], 0x1588}, 0x41) 05:51:04 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, 0x0}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000016c0)='blkio.bfq.time\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x3, &(0x7f0000001480)=@framed, &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001780)=[r0]}, 0x80) mkdir(&(0x7f0000001840)='./file0\x00', 0x2) 05:51:04 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:04 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002880), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40086602, 0x0) 05:51:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002880), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x5452, &(0x7f0000000000)={'syzkaller1\x00', @local}) 05:51:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000180)=""/204, 0x26, 0xcc, 0x1}, 0x20) 05:51:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002880), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x801c581f, 0x0) 05:51:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b80)="67b32977dd944ec3116a6fade4e5fcb594b02cc40fff9f339459968c8d120b4b2b6b75aaa9fb1112fe5d7abafb77271d6bd411d84f62ab80b3e2493829267f986d81a209df37b4ff004281a5dfdf074264e9446afccf61d774e961608e70ea59110567da0beb267c4d1ff86f5f95771da5fb6488060531080f39abf161e3b8509e4d89aae221cd9be0502a25324f09e132eee757809f716ac308b12772e71e78f9db6740c93567f6eb29bbe0c084cbd5322810a38ab06dd1765a526af7721d0237202f05c14b2ed1a2ea0b68bd638ccc364cedb52e8386f4ea5b354c8641b68ed6c5beb31b91cfc09d", 0xe9}, {&(0x7f0000000d80)="2c03b69425c488f522a9a78678a0a2621bea2c27dc7c7cfe06dfa1d3c09d6ab33d72d621981903c9b21df2acf933715cddb6f193196368", 0x37}], 0x2}, 0x0) recvmsg(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f0000002140)=""/126, 0x7e}], 0x2}, 0x0) 05:51:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001280)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x20004040) 05:51:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002880), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0xc0189436, 0x0) 05:51:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40002003) 05:51:04 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001540)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000240)="d7307d45f6bac16f0b49fefea51431c54bd4f6ad148e1eb80af866", 0x1b}, {&(0x7f0000000280)="3bfe84a80893703ad72b9ecbf18bd243bc1018f164c2198fc238d4102b143e24d064", 0x22}, {&(0x7f00000002c0)="280c1b883db8b6d9a5889e1edcc074fa2e9344470cb6ed1f7102504a04e0e9b18b8f2cb77d7abb9191540f34c91cf8f4bd2d757a4a2b1025b86ce534ca618f23ab28c312e2a8097256cecf0cfc52757d0cbf3142a1d346d7a901915c74f2219bbaba756301db52d2f3cc8e6879e5f401f94f62443f07acb604d30697f68bae9bddf0f0d1ebd372f77f937f632b0c5026463f910d7320d1ba7d67bcace8a44f7be24935e4a01d2105c78679bcfb6143e11e8ada49c30304a2016044426de5f5c31ffb083a88b111250dc474b281c8017b890c6aa8c3acfb1764b42a997e8fd25252b355a8605c0381ba83367a1c4e60e56086e1a46901f645321a3be5b2b874e921d52f0daee0e4a301de4423e4fdd5fc7115db92e1b57c738dc283eb6cfc9469200acb789d3e2f24c2b73433f7ba0553d065f70726c082a39f303d98c44cd07e94fa5d8d6a18bb786e84983288cf98698c1e58ce6060583a29cdbd0d61146ca84fb764edd179899a9825ccac82407de72337e18c94d81e31e7eab2fdf1d0438df71987a4fd1c6b1563c8eb3533820b4c1116dd60078de8a8f3d7964f480b166a678e18a2bb8f0e38355005d8f97fd7317a0c8edfcdc650e8c5b751130d4e1e139eed6f6e57813ac0322325669375307407b3f2d85d875ff9b89104171baa54a2b9aaf55681d64005048a62d12b1137dfadb371cdbe53509a24e328403d08ba56c6acb8df5c5d026786fa60fbd224a2e97232a3e59d5f42ed508c3d60fa157b1af22cd64a9d2ab47a19a1f4493740f3427dae28838295a5e522e5f232b8a0c399c30a3c23a6f1b20e75e2ed4eb0b5b1939724bd96627b43d0b69355fca66a27c076a7a696861639fdc3c7eb9aced50e9b3c94fe70a3be98fa9de96fd08c6cf1097650ef5e07506aaf86f71f7b1ae9c501bb6d94d1cf0d42238148fcb597c3a6b775d529c00911003e77c2e492a2bd89232a99d1ba750166b839c6ac79cb1b1a91ecef6f90ba1f9943b5531fcaf8025018620132af7603373e9438ba1cf241110e64f784ddabcf7fde8c37f42f236bd19ae14ab769765291be6cc1374a767b8d1a29e39711ebe05918209da023a280e9d8e0a0f57be2610004c8ca3ccee1c7e7c1e57b6d2b97ae854fb1c53fbf28fc9105265dd49af79842182f433b72d80a9245f6d35788e08517606859600f8018852320a4afa6259d37e429b1c89f07249fd268c7316b76461f44aefbb73afa7b6799d65139884b038ac7c047b35796633f2fa5070c9bafd3e35bb1d11d668b92bfc26f6e58151f89f309e0c38fe3c8eb6759fb19faffe98a85b1a81a7b84852f2c32d5cda38920614c290c34d045a60e66d8db8e86a234ff9cffdd06732fb948023dc9cd7c0469d951802e6751119b3c8f4731eaa52fcbe1189b077f6eed9ffd8e232541588c6b937872b522873c3b3ad63929faed72f8858bc70f719930c94eac0726b8c265d73cc81ecf72b1ae71c19488c6500f4cfd1c213227ee31d044113bef74d853cab3f6a73de0b5dc5a6a7c9e4aaf1cb35571379e46a2911566840fe940f867a016dc311f3c43919a9e173a6f4bcfd8830b042705bdde8aad9ac3a90e11050caccfcbb93370d0ec5bb14f76955ac5ad9cd7b2ff7ea469b590eb9889a5bcddce8b8e3154b80641a403d5064e2c83cdac92fe06d19869eccd123f997a7fff7eb8af5c7a2d5a3c45fd1721efadf0a3d97c632aa05a5f0ff1f7ce9e1ab5aaa26cdaff2a61ccf939e84cd6ff9bab52798db82c8354d489d7774de36cfa603d4bb4c6bb753d0e059ae3043505b045b503f84e01619d6bd2ef3599b529fac55e01d2fab563745e3dc58ebceb644be3e099f795487d8470807e71ef3daab0c1d9f689f8ff8550345bb56ae20a2412561fa0e7f9b6fe9a33d53375d5e500c63b17809567852aa802f60a08dadc8ce1122912238f798cf6354a40d9e4b43c1e011350ebc554666c042ccd881b598e62ab6af38c7237447e5008e53510ab84ade07bbcb79a479370f418ade8a52868f52acf9c9035566c1349b4215fa1b483ee8c714c277c52b79c3eb5c11bb46c1964384de8c6b02426a39a710938fc38119c5646c6f41304af2d2b212057a54f650159e44faa7975aefe4528ab0b06b362915b6ec1e8e5cd4b0d48dd699b0730ac5762ba3964afc6a500c3bfaeb45f88bb35dd778bd09bd822c2ea95de2305df5c37609d3990599de962115d1acb01eba5ad4e21a966749ab257d6f1aee5c300d8e640090be12e28cb6768d06235d9d0a922a07a44e23f85219212a68a56fc12213b9c75417a82da7daf34ca057ca10aa5da8e1950cae6f451c8bf5419b28b9226fdb389daa0fb1251828e3653bcbaeb9d9f9e9adfcce03deb3b258ee99a116a15014b2b2ad86af0b9cb0e3bba3ffd0cac78df6ac703314c339d3285f8b2f940cbbe5dd84124ab8857dfa1fb944cc84f30c2724a52f4727fefdfd70a42f694ad878732b00c7390eab7afacd08bd5e791e7efa716c21d3607a703b74b69500edbbab0bdde3b6d7ae4d41da6b2ca36ad46ca26d76138f2140c41d35aff04abcc8178682580510734c6797c22f987d6f2a3f912e1030a138f84feb65c4b4666a200875000c8af6293f8ee86e0ad69fbc82ffb38238bbed19da365da6c03b4666bde81efd7a37293e3a0238d6501db240c250ce6999e473b30e54edcecf958c167065689ba2711e5136479c2483ec609ef3543e7d7aa12d3a0806286de44a136c6defdf4bf3e81d982dfd71e105904bf8012305118ccc0925e9499bbc11943951b89edbea2f18e577dbd4369e7735fdd67355ecdd2adc4067911f55b0b6e84afa556b1db2d66d7c52cb7fd40e8bc3f52a2185b6702ee68a7bb235aacc75ab830fd508712be43a7f874a31af1b7d9aa0b0492ca46220906b7c0318012d368cd7ea3c7ab0273bf27e8163ab0db44643801e4dd1dcfaeec75640ce3f3a59e42502d2557a553f631ae83893d8243de07564d1a0492e2bec1b0952fdf0637644949702c75865ef25cf06e9742a428991bb713ef26135e6662740e6b05630d224325e104695d6c84d22ea0d91a48603a06c559ad0cb4a5aa648e8680c5bb50b3f7238909c81c83f1e28b41fb6ce8ca56417a7a0670009d6e0420c15ea372eac49bb000d1a24dcdc65947436cdc43cd86c795e59fc1647cd8f2bc744cce8603be0125eb6f8d331256ad4ebf19ca9483925e2b3e9a42f650760d33b70317f323ced15751bcb719a7922dc7d29774ee69e88299b53caac8667d8546d844a7404d76b08ca34bd051271e632eb23f1710220e67b496ced38a1e4cc6b39a68061a87e6875accae6b655080bb5f054fc492a075291838be0d464c6ab84ee58a31413a8f48586429d4b54fc1fa2f2a7904fcace92e7ff6b7f79c5dc02b4f047bd816fe289ec78394688f39dfb86aa9d4e4828507aa1a1785fe7b3f708ee6bd24d8d1a4ab816d6759345db46d59c6227e6e4b9bfe1df3ecb80400400fb0b428e5614655cd0aa8e559875fd741e19704618230d7ec9fc0bd26dd88e76b0e957728bab830c7de89fdecf64a1ea4ead8cfd9c690cf41840a1520b3750bbc6880ef407b5172c83395f11c9837b68ff8e6b597da35037dd291d864ed09327353bf25673030b0822c17b53f2a696a580bddc496881028c1d68df3d9aa9d23d5e36aa7c434731b91931759ec80afb885238cdf526546024426d9fde50ad3683ee8621b29aa7159fa2d591688461f048f11b1c388a522f81339545cf7f31bd759c8b1f05cfa17d014b7ad23bd63f9101de814653e2bb45a6360a0ab61b2383e25541c768cc88920c858d73f6e2a5171711e126ffba71bb0ab01ce876ceb171c761eeef60184a6afe4478e20623f63f39dff1e4c6b8989e070851e970c6ce5c63ab5f0030ac490531b1180c426844a0cb999af6e92701bf3378c373609a19bf48233705895941644c6650e14dd3d3766ee47aa7c5c2846a8b342ae9b621d36a5bab0b9455809c5f99f2dd3627ab1bad08cba962b01abfeb6781812b776a3a7425c148029921c8bce2ae7c1fd810dbcf3d123a2837259b8057abcd1b29ce3d025c5b8db8ff6458915d49b7896b4ffb1669605bbf98f181359db93e296c150ac9c8ad6eaf66ac8f399a9a0dd9f2c481a3a3b877af1086d1d2637c84d7bf6488146d6d0827c6b59b29ae1be2d4f16c702b8f9855a6b3b1f68fe49e090964db476bc2abf039da03ce1abf80366f75c213bd816a64968fafe318fde643d4617fe9d231fec0399258188b17f3709b3009ba5c57ea45ec5e88c4a97fd352805c2a1c3bb9ba057d3466314c674a4f4916b6756094e4955efc7e02f1461b951c619de7d4616a26f8fdda37d14b25c280723c2f5778652b41ac889e0b1995feaf940039825df2132bee6badbc5940115ffadc0c14c2d34e459f023ebcd5335fce2b0f619795c5113e2fec3cb803910aeee4bd3995f1eac6d726a2c4906e86574dc83be3125b9562b232ac0c99686f34921c02abb04a7679a807e7bf1b46f3693b74ac96bf01da62f3f267b89aeb94f223afba500066963b0d5e2b15bf7c0bbbb1359e93041a15ba08415ac79632ba3f719dc6cb906cddb838b43c335f5e44d605eea77f995a1c896a56311ce45478b87fba9100eba0b335142c4dadbeb121fe26b6538d9ca199a1beb8d71ad12f0d5759730141334d9ad10527b6213c0c8422c617d8283cd273d3f57736d90145befd9b3067cd21a4635efda186784ee99d1f3347409882f2d7656bfdf58dcfbc21a23107d8b0f52bf8e90c42f01ad1252cc381fa049b5447f9d8c79ed0667b1326149da1fe75d07c006ce6f0b456b7fc3e8ab100c8178540fd7f2c67b2f25e834bbc7ee8e3e8fbee04f822dce297641ae98aabfc4676d171928912d9c0a4a1c9b303415c507bd3d14bf29a198df80046a8b02be1dcbcbc5bf44f2a71a6cc73093385170120b4fc6475d55309c280655f70e3ab869890943dcb7d1ed54365cde95c2ed8ca605b1351c1bba9e138038060e94077e442a56e48a8eb0bd9b7774bdaa406ef93268f1d24f7306560bf670f6f3806cc24ba7d03df4dd", 0xe0f}, {&(0x7f00000012c0)="a0", 0x1}], 0x4}, 0x0) 05:51:05 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) dup(r0) getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) io_uring_enter(r2, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:05 executing program 1: socketpair(0x1, 0x0, 0x4, &(0x7f0000000040)) 05:51:05 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b80)="67b32977dd944ec3116a6fade4e5fcb594b02cc40fff9f339459968c8d120b4b2b6b75aaa9fb1112fe5d7abafb77271d6bd411d84f62ab80b3e2493829267f986d81a209df37b4ff004281a5dfdf074264e9446afccf61d774e961608e70ea59110567da0beb267c4d1ff86f5f95771da5fb6488060531080f39abf161e3b8509e4d89aae221cd9be0502a25324f09e132eee757809f716ac308b12772e71e78f9db6740c93567f6eb29bbe0c084cbd5322810a38ab06dd1765a526af7721d0237202f05c14b2ed1a2ea0b68bd638ccc364cedb52e8386f4ea5b354c8641b68ed6c5beb31b91cfc09d", 0xe9}, {&(0x7f0000000d80)="2c03b69425c488f522a9a78678a0a2621bea2c27dc7c7cfe06dfa1d3c09d6ab33d72d621981903c9b21df2acf933715cddb6f19319636831152f9d3bab9c98fdee3066cdf7b8a62ee755ae1480d194357150d0a5d40b714476546590c4a3e6df4dcdcbf1ee8b94fb3ad76ea36a4a3936b32ce1e258be6e4c366222a91c35cf33d31d3b5c01711f1ee07f8c1dd9a4b4bd8e7ecfa1f835b35c224a911e6eea39dd1646b4b8b653cdedd4075d4df7dd3e411793d473c6", 0xb5}, {&(0x7f00000011c0)="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", 0xd24}], 0x3}, 0x0) 05:51:05 executing program 4: socketpair(0x15, 0x5, 0x0, &(0x7f0000000140)) 05:51:05 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x3, 0xff, 0x0, 0x1}, 0x48) 05:51:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002880), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x2, &(0x7f0000000000)={'syzkaller1\x00', @local}) 05:51:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000740)='./file0/../file0\x00') 05:51:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x3, 0xff, 0x701, 0x1}, 0x48) 05:51:05 executing program 4: r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x9000) gettid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.current\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x5, &(0x7f0000001a40)=ANY=[@ANYBLOB="1800000007000000000000d1921ea400182900002223cc6fa960cb1a11656c25ccff89d69527694e4ee6b54c9f7017dfae115a78b926dd020fd972496b0b8293cc29aa90587e4ba1098424131fb351bb842e174f95f96d21fd1d37ddc216ca09f402fdc4ccc046bbf9ac317bdf45e19844698714e66ae318ee9147fa0f1732dd35c67db2dc96fe87ed1b6077d0f50ee76a7f611b6bd09401781f92dfb50a3291c37fd9fb19d5b2", @ANYRES32, @ANYBLOB="0000000066740000950000"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x8d, &(0x7f0000000300)=""/141, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1, r3, 0x1, r0]}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='}.&/\'\x00'}, 0x30) syz_clone(0x40000000, &(0x7f0000000080)="36df61b90d2c2660e3f4d08b369581f8744fe294a93d20ab53e8094a7f7e73fcdf059f", 0x23, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="02ecbf7f9cfe60ab9a0d7210533c0895c85af48d7a18b4d1311a37d25e7090d4af051a2788974f5a0a1d8ff00a783d9021a9025c13c7f7ca9f4ebbbac6ec9be62cb35676504f7dced03f6214b07b08e923872ca6ba5ef68b4ae79b1eca1383c6431373") bpf$OBJ_GET_MAP(0x7, &(0x7f00000017c0)={&(0x7f0000001780)='./file0\x00', 0x0, 0x4}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001880)={r1, 0x8, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x10, 0x6, &(0x7f0000000600)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x68}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000640)='GPL\x00', 0x81, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x8, '\x00', r2, 0x15, r0, 0x8, &(0x7f0000001680)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000016c0)={0x3, 0x10, 0x7fff, 0xab5}, 0x10, 0x0, r4, 0x0, &(0x7f00000018c0)=[0x1, 0xffffffffffffffff, r3, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, r5]}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000200)='}.&/\'\x00'}, 0x30) 05:51:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:05 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x321000, 0x0) 05:51:05 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) dup(r0) getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) io_uring_enter(r2, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:05 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000001800)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="a6", 0x1}], 0x1, &(0x7f0000000240)=ANY=[], 0x1588}, 0x41) 05:51:05 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b80)='g', 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001f80)=""/200, 0xc8}], 0x1}, 0x0) 05:51:05 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000003c0)=""/164, 0x1a, 0xa4, 0x1}, 0x20) 05:51:06 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002500)=@bpf_lsm={0x1d, 0x1, &(0x7f0000002240)=@raw=[@jmp], &(0x7f0000002280)='syzkaller\x00', 0x4, 0xd8, &(0x7f00000022c0)=""/216, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:51:06 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b80)='g', 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001f80)=""/200, 0xc8}], 0x1}, 0x0) 05:51:06 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:06 executing program 4: r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x9000) gettid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.current\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x5, &(0x7f0000001a40)=ANY=[@ANYBLOB="1800000007000000000000d1921ea400182900002223cc6fa960cb1a11656c25ccff89d69527694e4ee6b54c9f7017dfae115a78b926dd020fd972496b0b8293cc29aa90587e4ba1098424131fb351bb842e174f95f96d21fd1d37ddc216ca09f402fdc4ccc046bbf9ac317bdf45e19844698714e66ae318ee9147fa0f1732dd35c67db2dc96fe87ed1b6077d0f50ee76a7f611b6bd09401781f92dfb50a3291c37fd9fb19d5b2", @ANYRES32, @ANYBLOB="0000000066740000950000"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x8d, &(0x7f0000000300)=""/141, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1, r3, 0x1, r0]}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='}.&/\'\x00'}, 0x30) syz_clone(0x40000000, &(0x7f0000000080)="36df61b90d2c2660e3f4d08b369581f8744fe294a93d20ab53e8094a7f7e73fcdf059f", 0x23, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="02ecbf7f9cfe60ab9a0d7210533c0895c85af48d7a18b4d1311a37d25e7090d4af051a2788974f5a0a1d8ff00a783d9021a9025c13c7f7ca9f4ebbbac6ec9be62cb35676504f7dced03f6214b07b08e923872ca6ba5ef68b4ae79b1eca1383c6431373") bpf$OBJ_GET_MAP(0x7, &(0x7f00000017c0)={&(0x7f0000001780)='./file0\x00', 0x0, 0x4}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001880)={r1, 0x8, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x10, 0x6, &(0x7f0000000600)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x68}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000640)='GPL\x00', 0x81, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x8, '\x00', r2, 0x15, r0, 0x8, &(0x7f0000001680)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000016c0)={0x3, 0x10, 0x7fff, 0xab5}, 0x10, 0x0, r4, 0x0, &(0x7f00000018c0)=[0x1, 0xffffffffffffffff, r3, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, r5]}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000200)='}.&/\'\x00'}, 0x30) 05:51:06 executing program 1: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 05:51:06 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) dup(r0) getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) io_uring_enter(r2, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="60a7c55c957b85d2ae8d8380b7bb9cfeaf9967aaa338d24fd3ff03673e7853eb0345bdffcea727511b6754fd771924084da0a0d39e9cf0c5c325c56bb35a2f360776ee3a0341bcd67f89717294444ca9734d22ad07c68ce1819196caeb0fabc94386ffac6733b75a49eac1f32174f05c5ecbf6083c059720c2ae4c8e5f398798428757e13f8e30201dd92b954585e4d446d55ac8d5cb909503cc4be256f3c90fdf54da33d62d3621c0510a89c7f69c7a69b42b759de186d5ebc064a0fd1c02a75945cb84ee0afd944ab06d5e23bc35b5e7e7e2572f85829d5a81c0a9f4d7a974e6c028f8262115ea92edd7cd499a8c42796faaa0fc29d2a3539809f06f9930815340f14f2e60a8cb0f8ace245f412f25c0748e836d27847efbdb225fb378e7c68b819e083dc430b90df67332c0f2152a5a36050d2c4fe8079a70a82a3b8efa0394c8f3be929fceb56d195931b17cb2f63eb3a0f2a4a3ecb5c2d1bd5a7b8627e89c5b1f25c71cae74ae4def694d55ad393480d0178ee19cfce44b67f55904dd066f84aad232d82004e80f047ff4ba9fa0ad4dcad84fd29ed08584d84e4c91052b5cdfc68fcc0870be34e1e1cefd1c7eb9dfd321608a7b7aff5973d5b25eb113f4e56a959bda8d58bb9ec7162493057ee1454619ce2f6007de5845ecc49bcaa1f13639ab652d7acb490df45a6e9d228ab87379746e50d7735048ed4382483b2c38819e681f6e9112f6d1984c0c7a51d935ec4056ae9837228819412514cbf31e1b85afccf72ea2577c2c5f7db1e70855c53b289ffe952be2bdb90562f352e771223840afc82d905e86739d2e01e26f08aef57a01571d3b2025cdae3dded041d5139e0310356d29759b42455275161885d7820306c35d996b8173b1b42ee1a041b07ef17f9ebfb533b7633849df0f7d0d2aa71058496e239de329ad7ab8d923f1a7169b88cd1a0ca91e5af6f66c92993b79787e8cce5558e9f250caabccdea8e6c140df80889341d5c3e91a67f7264e0d71bfdb73d2a072ae1b6aea56755d1b9dc1699c27585d608025b883db324a809ee8c690018131be0fce1659d6b06166316a0d4eac4a9c87f834a152770b79e5b596edac130601f466feb635394a297df9327bb7c444b995cc6d39879f48d000a905036707fb7cb03fb2feec087289907c3b856320c520ab1575aa90d3ab8dde2aea92e3e0abf2ff34b21f7d8d9d9a12f05ceee6c92fb7c50730b09bd29c1fff6795872c877e5df2a8717765a406edfdde1159210c43878e537978e7e47421f6cb9ce683feaceea7bdcd280c62846d0981a1f39aceeae83dd80afc83df2c358c1a2f5bb78e2c7107c26bf0175072f2ba82d7d497a454eb03cc983f3f33f8228be21a4110f60e6a303db90f510fc0fc04547df66aaea5aac176962a6e6a4a30fcbb4a0f3375772bfc3005a990d128c34fabfac78d1fce89a17c44b0f727d3cde01f103e2eaf36c5168751a87705d5bc8cd99a018348ee9359b005c5cd59cc4fa75f3e799486f4a4c07424b2264c3b1371f2df3eafcd357648fa4da6585ba6941449f0b4f9d2719c94fb5e62ee121be7ba17ab89fa024f3d04f6054a6b8908ef7448dd9c44956266da4e2172d5b09d903e1bec455324b520b56ed4d1f4178b0e42c21a39f820a16f6a4b0c7fdada365c921903dc964c2c3c4c2d306a560e45f375b7761bf4f2eb260963a5b93a61b06d0a9fb8336cedfc55e6a205b1428c668a789204dbdb5b01ee56854049f36e1599633b600cc1aeb5c49de7a1f158301e3d092ffb8d4fb41cc948a4a044a427446e21a4d2e697018f84d51a8afc9ffc64c2ffc92379545b75267394cd0e5cc4057cb3a25fefbeb743789bda706b0f6e2c23c9fe99767455e96041741af01c43b6e7ed69c8dba0ede45524e52ca78e5896bcb159b9704030fef3851610a67d08bc0cc67e563f60446ef994c99db1daf98c019c5104589c000343a403ad3a84b5b285e8a7c39461894ef7324787a8121e809e3a431e534c4fa1665f686dc1da66a01c8b7d487e5abd404d85dff59c53866815877dabe6bd423e2c70ff4dadf7f3a958e4d2a65ce524a9b12d3a13418bd681afd49f27e5baea4aeefe58196a56487a636889eb25e71fe28f41d0fe272e688f0c64ff22e40a6d9c5d816b0fae54dc9d28bfab22965b399c59a153a02323d15cd08851008975c4729746400ba24c11ef1f44d79ebb1da84679f30bd30d4254e6915fcde46fe6cd2173b654e9c27bcf6a307846f504241a00aad7d89e895b6673b3a33878fb511819e0852a8ebd79b61ce668ac2146900eb9a070c9c708ce51d59d2cd7bd85ef970a8580e57115b6afb518db375288a08a935df4aac87a9451055ae42720571b552d0f6c56faaef44e31f2901a82cd2181c5e961ac0fc51c80fbb4657b314150cb59d549e342e4af6f6d222c3206a6e90c7f43237649b837ffe21da0c16eeaf2478b84004eade9f12967bfcbc0e57b09700a005dd2290e81e256bc2683c3e345898e4cdb4d50d80264c4212668dbb83137aae98bb2d566bd99cf13df35c617884760a6bc470cda85d33e677041846c76711a59394bf24d2fb39c68b148b279161f969dfe3355c77b57ee49ccc0d9a51e9c92bf5b584641f29a0d746074d344b841e3484e771c43b1a0d49558751e10fce19ceefb10262ebade781baf8b2575a205352d343dd823ccd3cd893f8bc67b3c3310a55ff1518083e2d37f1774aec7dd89ebd5d10f9be5bd4a38f2c3ac02c145ffaa52f498fe89068b0ae24c4a8ac2fe1f754b0072528cced98dc133bcbb9286bfc4ee9ee7941cdd3b700a73318aa3a6ed502446d0b1ce6eea85cac46356cf73403fbdcc88f7bf0772c7a103ea1431cbabd76969ca94037521fee13a6e011ea186d6132cd1e9a45e6a7a4b9fd24f98fb6f641be8d860cd5966f1b4e58592ac3b32f98de1d08897b10683120797263f56c16018b153b54896a91704f29d6e9998f9afd76efd5b832f0a645249efa4e413bbf9132a6b079a1e90c2cc1f820b2f7e559b859bef9b40140e705de658ff94d46f78e32e06b27340a9febcf24d47431ee97f2838084a1a77b3652d5723fbad495ea7c7fa48b3cd4fee124bc50d78d2e2dd33c3ad7098f64b31fedc2a3ba854d95edf307c835678402271738f6e911bd1b8c0e515c77b21dda476b998f041aa2a904445d410fc4acc93544b41c6b92b2e3a4a44ce0f4b451f744469f2e5bb7225a14fab14c736eb0e386458bc85b835b3919439167890b08470d6645d6bb052eafb5c20f76eb59913cc8ca67ea67838a47ab38791329198cd3c849175547084f3c7b6f9dc8eb97ac019c64fd3ec1330af61c2beebda61372aed653e87b580b42327468a24bfd55de8f32c8aba24a8d61cbda585c6ffd1c434eea4a202e69a9376defb57cca7ca20145275e19e6ac57506efc8b22e2153e127dc12b005a5c75e62b4877e5c8dcfc57266fd31ed31c91a49db1d0220408aa6675d6372c099513014c526823bc9b3499620c65651494ca535764cda40a3b21057b83e21ffb4e3332106e5f522eeea48f4ab2db6455f6c7dde3b36a3362690802d9f126cc0ef8d97b41a0f1c5369f4099058670816f5a60071d0f3444413503c77191bb1a24748b65528dc94ac69055f8911320a2019fe3611afe9fb078c8a93d584d600d809491e25f49ff95742000082520748f5cc24e4c533848381d34ec0ec88bbc939e71ededb87ca2b897fded75929cf9fac89d4223afa3b725b0e6334c7623fcc5c09bda34580d98e5e27cd2b2a26a28a279492d6c66f6cdd28553f7b2697657c79c5aa1c3766087a05e46aea8a3ee1044d733e5f57118cf57bb711fed0d7b846219116dcd643ef476e27dba937292982f5cbc9d086af4bc271d609c758077dacaf50de2114ae597be0f316f3b95575306e46f7021da02f1dfd6d0962fb59d985da410db5db850330ece9f3e06f40ebd87939c26f75e8ddbd8cec60403a8e349144bf49805e510070c89a8c905ee88caa1f3462196e160df25b278ae30300cacbfb61c329c655f4be0b03d657262ad018c79234785970396d09a3881f74c7bcf92eb03e4a8515df994ab7bf5cf951e0774ef11dd17070c0e1a319306247308d2d0b5cdbbe1d971a32e011a876005408be72d542611ef9076ac0efbf9a68aeb718de9819869d7d69496be1cf0095ece638698cf6597df924f354671b95d7f07c69bace2762879d9cb1b55014f9f2fd61736ac968329a7bc8b5473fec0f97dbcc2b68905e3faf8107186a3bf61d1acde81c1774c6e410dd60889c34d43dcfcc057bd535a45ab7a41e8babcc327bc8f88bc6b6a35b5690f8872370778f5a3dd2b3ab72cb6ad7359c6a18863f36f66000e586db90647ff7ab2c41137baae3499d0a8b5f0368831f540b30e0456f7f8e31b7102b67dea264fcf82ae49b8304f6399690085429e992698c8cd7fdac1877dbd0d2eed4b1b01a785a23ad9af43775140283be97a773fa4c046c4aa878b974793aae460a92ec6d079221be6ba47dfad755e1c7bbf46756bdf25fadc1ef42ec6ff7ade4027cdfb92200ea1dbaa1bc8850b62020876bd2e04824ad73333e74bea68f29f28ef0625cc210f8c01885dc5b32c9be7d276caeb3730926dc156b17353965f3c0fa6625af1b5f2f6ea9b71db57f4a62e1c190fd4a1857666c061e5f7cb1d053ef1495fc6b439a9942bcca0352803ead58cc7f31997f40f54b4b20c6846754a8763b9bf086815edbee90078efedead94d7bab1792d51260d34296e6439bfce79d1570585244e72089de9a76ad967b69151381dba27672de513d87cf244e2110fc9cbc49ed16f261879373de7a7ac6d1492385510011be923be3a2b531f02bf22b721b01689083f5f93d48b7cba3f44360f0a33594161c59d2595c2cba7caf01c73fc344dd88f2bfc0335e16409a969255d224c01f498bc4aa2dd179b0d69c705113e59db42a129c8c7a39686a44cd49b85cd4c0dfa76f4f009688e863064f03b93bf898aa7bbdeca169cafd3c5ed51438cda8103a21965cb103da94c0a9cb8b3efd81b0df76f0cacce889cf64ff91a8a2117761c9908f54fea57b6bd00b4f4a976c0ff1aad62358835375bb7a25093bc39d57b4a728d99c816e5ae225ce7fac5089d9ec2568dd9c34209673d303f3aa4ae76b1bd2a42d91dd4d0656f63652e6c34ad8eaeb3af8b9e5ca333bac4f78d83da34a2fa3a3b88ad58af2e9ee88c3249a5f6b74cbb2e5dfc9e691d74f02a8d1e251fa4cf6a94381fa503531aad714f6f9eeeac98563a8baa39a999b9043d5bf8709ce5c6b6641c03f9af4e5840d97c57fa0fd2677a4fbc69e596148caf10ed869cb9b15428460d7371405d0a00dffb1aa518bab9148c98b35caee6895d8545b8f78727e0489a1a8c8b06de9c42bd9a354608b93a26a3048285b2fa329cc0bcd83b5aaafb551c1d7fdf0dfd5a9ddf220d181179d2dfa900b568703311efc97271d1e36eb28eb788129da14e90f1074453b79ffa2b66d1bd0772ce0364a1a649dc86999be9dbaef446ca6168e4ef009229b844721d00c5dc1cda9fd3b8f0a2128639b4df282df4a5d6e97c6ab72119a004be7524287b9917773d603d2d7c952009035770e49ee23b91260ccd5733bea35f752ba5c91edc9cd6094c6d2d826402a1a8bba9d3ff831f9f82b69bde9c164d25c3353bb635dc7d953b3797f505aeee0e8f501fd48363727ba310ea348f6e32a4a74cd03a5c67a6a148fdbc174a44150a24d971fb1bda2abd481f7a8e544da1b9b52bd5", 0x1000}, {&(0x7f00000000c0)="961ec16c6ae745ace3f858930aaed3e2eda65f9c4d079b64c6ce169536ec9c7ee4e4237693a2a7717aa8db641f7349d39a0a1ef7f66376e00506305a6e156d6c819fae4d74147d424bd02e39a39d44cc9cce451c1a0d005a5938b4a1a69258e85ac2cf6657b7dd098bb3412f610c25f615c773", 0x73}, {&(0x7f0000004700)="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", 0x109d}, {&(0x7f00000023c0)="7293b913e95e2885d498ae6a5840a56e03000000b044ca65b44db2c9dee8a900489e47c519d114535376819f6fe343e507000000092b398174231c77972218e78d23cb13e3a7143a9b384eb4ff001545d01d0657bf7a8765b9ab535e657928ffdcfffb5dda815a524c6479e1bc58e2ce6d020eea0000d3d03d5a618b6076fbba6a7af326af54a398929d2e054a3a4409244e08d21155a94331e94a81279cc6383d60ff5938853b89d23ce9892ae05d8432b1e7d8c9ae6b213cd1084f4ce3000d34e521d7e30e77124eece28b4f217814cfb7c63e14baad", 0xd7}, {&(0x7f0000004540)="873c364f16b993313352243c44ae98d0919ca638d0477ef0e5cead20a3b66ac69415ee6a10383354422be27fa6e9c23a9fb10b8cf546dd9d46bf3f742f60eab71c7a4bb4e38f5c6d75dca92ece4f8b8bb6136b6bd509a20545bc83b907e86afd8ca6bda96ee81f31cf9ae96ee373a13dde36c8361f82089767444274d003f63a5e9072842d870000000000000044a18efffcd9053822a71c5b2f12f667004fb489aed15cdbd001ddbc21bf3e161a5664bbcb1b2681bb7ff8866618a27a92111d8cc94537dd8fbe215f57e76321df39a56e46a649e8ee4e95c29f13d078563bbb0d31ce7d6136b91e3ffab4616c70377009f9a3363126bc27988aed25c4d99b81a556d179329eca8571a6158fcdb16d74dd0ece13de5aca283c03b1d0fa4c4905700f0e9cadf536e1bf76ef3918c661d3cc77d3598c67c978d0722ebf0377e9a27a395b5df1c990a4dbc9683077c4c964d2f10cedcb35c5e799c76eba7cbdc85c8c30483be7d7f3a3477e206799fcebd8dcfcd3bd5c5f7bb02ae8f3a69d7ea97c69a792c30769dc6991aa61aef2ee9a3e6792b45d25f123b0ccb0bdb64abb9fe7f50a8716522a34fa0fada5007ba5ad59f1d9", 0x1b2}, {&(0x7f00000033c0)="e6df4630e1b27d8b336b76534255577caebeb4b55a2e2d11efd61dbf130630cce3297d774ded3974fc7a151e4462dd16c4ab8718f8462a7a830d6d2370bcb3ac4207869b33be13fa88461a4edf0900ba80c029147b86ce37abdab94ec1a21c1f05852ebeeae78a073ebc65df0df23667871f8c0c5559471c0b72d8eb70cacbe549ec48b2864379a8a5ebf9a7090c008f3a11b180899f0223ac78d35119a8cb27c574e99ff214e3beae801dd0fe7559239e80db7be3621c44724a491cd86378d9d2f84d2ef136a181a4a7adf08936064912fce6d8c10f6d879b972eb58a720c95b02a95d80f5e91e9a44ad0c3723285cb1d807e1c9a3d5cfce4a2d60eb699ce5fbdeae60e04331e493b32bdf78b4cbd6c3469e9486f770280cd6befb4d182a5d31f4561bab2f997db26a0cd15f323fe2bd8d7dce2fa099c2f03807c905d5d5b2708a3225b18fd4f32a23e7a154823efc690a4b163249f43848041424a9b28bdb935dc9c6708cdcff32172dfefbe32b76edaf68b1a802f6023a73d76a9a8cf3c9bcf9d57deedfa9f5386121a80d83fbb2b8279f35ad7fdc00c61b9d557d08fe0993da569f125f8d406a65729171b7f5d19da8e52d249f35d8105304304ead08aac7714017bebc7a6024054ca6225039cf94df514c4c6134f890ec773c0d4314a40e44a4b9bd8c125b258b89d867504fa714e5b7df43e898790c5a4462d9df48dd71782f960d9f21f2b6ae7b1c07ee4e7559cf43afcc79765519c606e01a5231d4f09daa1b98fed67e74f7b8b936a3b4939e80eaf72f3e64dd907091f73dfb55d9edde464d128d891e2ef42f4abf0471478a2535705ea756ac40e4b6d497edc2ed5a6d6d59316a22b77eff79584a0f3a56c78e991f79536dfbeca3e31f3f6effe9a98576ed907baa35d9ebd5bbb0c86e5004757b5502417752261f4368a3c8bebfd3308142618ebf748537c07b561d049605a67bae577f42f7fe05fa6ebba389e639e094d3db9d3fb9b3e6b0f50f7213811cc042157d432e4b27418403a2df1e9e6e596a89b083fbcf474086f7ccdd4c0855296cbd53adbe4d12b2b0ab72f412bbfe538fb700922483510e37445a2f6172c57f2fdddc3f5379176b3038923f7beb94de9232b33691909f94951f837ab6c2f4bf0b363c9fc75027f7e31150677d1f9647ee7bfd084cff224d7cc92a564807b1e5c01fe0f85d47685c551aa44bfa6d26289615c3909bfa6f6cb43f8963c49623f8f1e440a1923f9e2dfab660645c6c4b1d9a444f02d11055f97542417f51bd671743968e2a4e9a6dd1b4db81867adeea369b3ce4d744a1761dc0a7eae2b527ba2e56c38c65c6f788a95c7a3dd1f897e3df6cec3b346e751f1c04f641d71a7795a2a23ce6c1af7a3d9b414b82033bd07af23e20e5274856ac58e98187ae81c6b5fd8f07f99c94b1eae4a5f3f0cad6dfe2bbc88f0cd0ee18b28544326378d5a064d370b446366a44e6553e85f162da38f40596ee8a46af877e64016298dc0f00baf62aee93f83f228d16d0a252982ec517a978b8b24eeafcdbb1d05a61900e82055e1732548581495966b056986333b97fe18bcdaf12eb03f5d3786d08f2c1442c69d8529f49e5b5b0765cde81cb38b533de149ae32720072746e7216a24f7fafd3604b972a3e06190e7e0a33da7493f9bbd54662417387d9e9d1c63eff2cdf5041fb6e9e44b8395963ce25885bdd00f852777883daf2d45f6f20196796838b0268ceed64f99205b19022b345541b0b40d1c8032a8810779560346f203e0534045f65740626c797e75efb19d4a366e64f7473ff096b91129f9ab5ffc10f550ec866e5a1ffe4fc8ec2ebce3ffd5ed5f0f90f9b75c4185f02e2b975a3e0804e3f709362b0421a881c6c90267a441a77a6d6a157fdb628fb78673041ead7faea083fe7456cc66609c0daf8c5d435e845bfce5950527c48908e24780bb0a8609e5f928afbf580cf28c027f261c0aac74de5622ceac8b9920da755a5585e059489e3d743f04413aaa77580f1a684788e7349e32eba1f1c1cf9302bf1da11b0975af0b155bcd455e716ea0d9f3a7c0bfea6ff42d9a357a7a7035f2f25a6c7bcc5a5403f8870bc829cfdebb63e1b8620ac5d473cdc0d12dd910b986548e447ca3b70f27db50a31e5cf72b754b1aeed8788ecf4d86d1234c17b71def9c3687ac700f6e28834e0acc666db0a9c346259dde099d44bbe35a85546cc4e7f823a335c6e064f4a233269e1df0f02db97cd2dc4133d56ee94757103b7a0f3e1fb293ef52c36e306af92d7977f741926b19080f68568e933fb6f353ad54794e82f3cec0bc2424b0c066495b6e3ecdef378616ac6d5042da0ebf8e499eac8a0a667098a4e6ab85994c4dbd3083c853679c2af7e878781da5d6fcf7b68025a75319df64d9d7877939ec5a1e06874308ec696f64497e4d2f1eeca1296c58498554744250a0b3712e9c6df5fcd4b45035f6695f28fe36f51f87d20d21eeef59d706025b032286f2b0d1a9d27a53c1c9824a6e45317213fce69ad52fb6d7259574ba02678ededb4673c35d3dcb0787ab4ca41c8e9f1d5a400ef34ffac6387b83a3a79bc4ec9f0606c9b3d19ac99a2e84c7ddea2368088787a462012275df1f156a5631007ed6cca4841b554087c98ca4e8852dd14fee15b13865779af9c42289113b4dcb052904c93304f189d6f1a37630980b66f394be1b23c5ba87b29ad15e5ce98691c41ea151474c1039c3bff22073430cce24da4c6118ffbebc291fc04b4ec67baad8778728fc0c2a2dc96e272c2356ef6712b35e33745ecef171e28f9025507d2479ea43643657ceabf9266ee44bf48a905cfd2591d7516b0a8186059ed5804bff3f7246c52283c6d65e5c9966a1d6206a929c09bb80f3bd5bd44c1364cc31681f503af7c2f80be69275155884464ebdba384eb93b4aa15d92a83587cd9e4efe88fa5b77be54077a5bb2fff85a3f17995436e764da8a9774b2c8a2bad80b1c6c3e900bbf86af7fb2b430d2c63a9ab5612fd8f7558be20afc788c9f709a9484bba57dbfed83d9bba372676021e322e4816358e322a21deee85c1f2b6e685e38cbae9cca85130fd5f8d115d08bc18c1656596e055286b030836749ff2a015e92f590ad77adba9173f8dc25911701eda9df83ba30ce05bc2bb32d8166b2a07aa64aae37dee782f444c5085cd0114d8f6ce693c0d73a964e45175ce597d2e8eeb275133543a8bb2b13af184b155e590661ab33d7b7fa546b0980be9cee7240b9bba595347a2382f57d4ddb525b9f2c4135a0cc68de7826e1e4ad100ecd5edde8ca811e6afbbfe7d7a8a74a676c95bdb4079e27772140874626149c4aa249cf604162ac86cdea25ac3469ff069a6c4d2279519db0b408a61184af798b66683af4ad2ceffea43dd95f4f38b780044abd3eb1034ac2d80ffc7719b679bad2e3d59aceb97e025ee9fc65ef89a1f63db03636385c23b72442298511086ea024f5f617bd16c5303aa9e6a205710b30c6a412867c74457ec328d610091ee2a0582a384d2b74e4acbf09f10abdb59a2f24dcf348761d4e32e5ea1b48aecc77a32e3e6e3705feaaa2722881d25e7eeb0ce7b8563bfb7099fd81a4b1aad9dfc8280b50ad1f821c73bb5ed0f65095274a1cc40a95979922c85892bda7d1c46ebfbdd1fbc48cce5a1aa6ac32be8ea080a6366db1aad2635ade1b908d973932b338d07d0b7b3dfff6dda9bde6731b0d0c62f8d408fba580abf53890896b1969804e4b19ff288e8a98b1d8a876f0b20827148ed3fabe89a257552ea7ef888abcd1e0fd07d1d8fc3d39fd963a9653f3e1657979b33d22ed2412e05567396483ea925244a115bb42a276fc3f76aaf1a947c54931766f80ab88dcefbc95c68be19e8e0daab15138973221e2056c470291c38b7642d23b4d1cde9ecdc7df5117eff309d4b58d8d3b2c0424ba08c808f9e1418fe2482effba848d5f6ca00508d8b265c5c8da36e916e9319c2e019b3c363593b5f5694f0d3e56ff05c6b479549d2213c2b8b0df64754be2475aa73015a1fc96dcbb8fcf2f7b3163522af1e13270f395fd663e1956905d57868011b44bb8aad84afe4e3ec601dce933ce85a412517c9bcba9417b24b2b75b15e07f5c137ed85734d2a9da46406e2f56f18050df58d55f1825e1edb1d3790ac0c250ee9fb7312207495d92b585d09a64b11ee6c1dc8a188da01bc3829d644fc0a9ae3f8cd598fdd9a8eca0ee4834a44027a0382ccc7648b140afa9b1542dd868db93fa6f15cb2a560e11e56e9ff99a8cf4ca1558ce1c483d465936a7c60bd64c911cb1cbb70779a4f01275c3c3737837dbde4ae18e0af9a030173e1517679b529f9759ebaaee3370f68f8e597f935d771af13a615c4f4486665d83775a69cbe3a285ce7a6f4ae7ade1dd8dc2bceb59207a40914b6e50c91e7fe9be3d5671200e04ad1a6314cf7270fa5df66f829bdde17401c675e6927aa072f9aedbe593f95cef1d669a72f6a3e5e86d5c00bc5bda136e732cf3f5334706f2b495aec31eb849fdadb30f5e0966055e9393889446c3e8dc52ee75c8e9e46ae7c6590de375c7681e7f0559ece9868b868424bf281e1045093a27aa964f293c24c2ebd97cd2cd5618c02738dec49d5d40249a583b06853d97837382e9d2ad0b4305e3ce6add3398232f50695caf81c1b6f9966984fa2ec6a1f846264f91a9cbe9a128210665ea646752793c8ac5d032e", 0xd11}, {&(0x7f00000057c0)="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", 0xdd7}], 0x8}, 0x0) recvmsg$unix(r1, &(0x7f0000004500)={0x0, 0x0, 0x0}, 0x0) 05:51:06 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)="aa", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000002480)=""/246, 0xf6}], 0x300}, 0x0) 05:51:06 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r1 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r1, 0x10000000) io_uring_enter(r1, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:06 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(r0) 05:51:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 05:51:06 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmsg(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/72, 0x48}], 0x1, &(0x7f00000012c0)}, 0x0) close(r1) 05:51:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x0, 0x4}, 0x48) 05:51:07 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:07 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)="aa", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000002480)=""/246, 0xf6}], 0x300}, 0x0) 05:51:07 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)='2', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003840)=[{0x0}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x2}, 0x0) 05:51:07 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002580)={0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f0000000000), 0x12) 05:51:07 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r0, 0x0, 0x5) 05:51:07 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)="aa", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000002480)=""/246, 0xf6}], 0x300}, 0x0) 05:51:07 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r1 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r1, 0x10000000) io_uring_enter(r1, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:07 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000003c0)}, 0x20) 05:51:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x2, 0xa84, 0x90, 0x11, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 05:51:07 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000380)={&(0x7f0000000000)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, &(0x7f0000001400)=""/93, 0x5d}, 0x0) close(r0) 05:51:07 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)="aa", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000002480)=""/246, 0xf6}], 0x300}, 0x0) 05:51:08 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x2, 0xa84, 0x90, 0x11, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 05:51:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001900)='0', 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/154, 0x9a}], 0x1}, 0x0) 05:51:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000044c0)="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", 0xfcbc}, {&(0x7f00000000c0)="961ec16c6ae745ace3f858930aaed3e2eda65f9c4d079b64c6ce169536ec9c7ee4e4237693a2a7717aa8db641f7349d39a0a1ef7f66376e00506305a6e156d6c819fae4d74147d424bd02e39a39d44cc9cce451c1a0d005a5938b4a1a69258e85ac2cf6657b7dd098bb3412f610c25f615c773", 0x73}, {&(0x7f00000023c0)="6ce54b894638ce8c8b637cda0d45340c08b5d6d9da39c096b615622e5cec829914775a29a7a219c67277a57d9b8e4afe966e6252d527e8d00cf8fa71a76ebcd192b1d1374e37695c828b217c42b57060d52a992759652f76f2bd8ad54569d57f8137f89305479dda02e06010e4c184da5e1c8d58c44c1c3bcf95874ba49c186a8999b4b3f9d071c836a7846366e2d97eccb04612569af18b638c7690ce10c5abc1c103de072bfb84fe904cd33d7429fd1788eb6288c8e95e33aaf2562580819482a28b1fc0951e3400e187f7b8058054e9bc98fc8e573ab6af88f80ca58ce9b7d2187892d9e874c940484e22803f4eb7cebd3395935f9dfcae75683ad0ccc1f4960017a3c4ba0240b525ac7d37a6a24b9edf561c6cb4ea5c4314751a7b5cd525134d088e79d4642768731dd4fc5f5023405e54e1c2428bf57566be6fde037239ff28981b974844e995e814d5107b27ad73a4370aeb2d5f975027610bf9ad6d927a762e589d7d8eaa0f0934c83583975215a241fceb752b3bbc3e72861cb218b899017b03846a153a186b6c919811c99bcf8c3a5d6fa2a3714b5646071902c0759419d5094891512768e022b1c76505ca59b0cf932e26ff7ee8700befe427a8b86c4a2d92ae580245c6d94b3b53e298cbd997adaff832913a0e2a9fd0163293d5a28b754d286356aa2a46a6ba790f732f63b510d025e39647ab2eeeaebfce47e91b948c492ac94b3a7b935a8bb0646f686611a8f208e42e4c145030ca742d0a192ba3e68677daca58c9c5b32367f07153685f1d37c71c71a9f3054162f0166d517e9a96088369d5e3ddcf298dd636ba4f438adbd94bf8546ae0abb088666c4f9392bf2d7d43bab9eafacd026f502db97647504f08925e1444c0713791b4b71cabca70cbe89e043c9eb262bb0d1467b1ae26fb54512a6d3a213312dd130055e35b4ca0c38894d9ff26fc6dd289bd8a63969f2e412e6e770844e5f2b6681b9de587025243d4dacb01025f4881f0b1680106d5faa3f2dfcb93d1db4e25efd76b4d21648d4ba7806afac7e1938d06b2f0b15f85e89ecbe819efba37a0d674ca3ebb35f0679318fc206895d8f7012c22e8cc5f7106f6141113277fe46ee9800c31f8f10bf231698727182f2d9c47e8cff582f4d5c4a074deb29179e0c2d158af51a7436ce0f1f71f3be6b2f14227c2a23fcd3b0eb12f2968206683594509f959972b51505a2ea0944d39098f8c28e72f09b8ed73e9dc9a322e17fdff70e87ecc2653ccc350dec8ddf7857cb8dd4633f104db5d091e528d2b29fab10471d29a1186a0b0d7be17eb996f56d00a48e8ed8e2702560083abaeb6f471504e5e78cb362a1cdd0cce87dfacfd22184d1abaecebb2f0fa29444e2f4a0606be40d1cf9ea2ca219a0850fd275cf406ab3d47dfbd01a0071cae9febbb4a24db461d289ba708736546795bf1e65d3941589b5a529dd9d00915e5c0fbc13efc9f5005e4e7e553caa138a99f99a56c1459ee5930a93d62a4fcd188b9a1299c19612759cd6c5d1b62cb247f4a11c8d8355dbbbf867c4b6723800bf97cb116dab68391e0e0f0e691e928e9d09afa59f3b45be117b4d0ba5dc8009162f84c3784c39a4e59bf569d153922e49159705375fc86e0c2b293506e3d79bb2be187a5e54fa07882fa3f374a5e5659f7a026d5f7000dd7802efea8d0ccd6e43bb29863e3edd9367bbad04e5addbb95152e01ef686fde6b1d50cdc9f9efa0632e5bd7193dc141e28985ab6fa4085eba6bf52cec3486a4b920fcdfe405537948965ca12894971639be1a5adf12e4fc53bd71287f94494ad7b3f0b158316c0a0575ba8a605e657e264a51c26d3bbf570c672995d68d40fefe9986d4994e55d176334d91787100e6343c7e2080a9afc6615fd460229497e042bae7d31f4dcdc2510c1e15fae1c7ef945c96fb478a235871728c94ad37424b5b89e20c13cf5d489af0c7af0c6d1b3340500135dceb56b90b839362d45e9df2c7eaa0a82693972ef7a831ce4e06067666a2940a43a11680e59b1dd8a6e1cb0292baa9bde276189a650b26ca8ff65d84671c8a27583ffb1d263e6a532cb01df769c2a4a2005713cb2e7ef1c8331d806ddddc06cf99ef4cbc64b40d24b510c23efabfd0b99d74806568d8bd8257152e37a92af296f06ba6045006ae473b97eb672181a608e807153bfcd66920de73059999352cbbe8834e4916d3fc99365d807dcc40053ead202bb98150b558dfdc93fe3fd06824776370f0d9c73075ed6d77ab247c1c3b2121b0cc74004a90aa466fddfe6a558fdc92b3133bacfe047334231f8aefae33d41893383e316d4ed3a9d793503f71c760de7196f239896c1b21c7098c70f93e9781e82742c525bdfeedbfc44c9556fec4895fbbad41baf9a78363c235ed1fdf7266222179624d33b25d645de272ab904ecc9f016a000680bd43513e9b1ced4485213f8d801f8ba1d7ef4a6b50281942b83a7af75c88ee453e2fa4602f9070563dd76907e8453bb30905b13bc0f4ff0704fbcad95c08ff9279582305b7d7289a67bc418a40039e112a287022e3dc52f563c6c2aa512ad758894d5271b7ea03f5b4d824b17872ab15d7f89f620751ec75e2b57fe625767ca28c65814d1f3bb04d2acadcb887356958098484b06a3fd7fc4e061d0389e628c924f4914791ee1caec0489cb889f6365f62d8b2496adcb11c6f936f9f9f67c643db13a8d52dd7140a16b6afe7c940ca02dd1b08fc460a907ae847474a861725475196ce027e3368754c914bb0c8cc57b4db6e72f81ecbe8676995bf939306f7fa6bf5a8bfe6c47fbe5fac153af131af12eed976918e9d51ca30dbdb4b1014825fff75e11255f1d13fd64f68719f8e573c4b45a50a03c49ab3f853574ea3051de294d40743f66ab1e17e1c962fe583d38e88d7dc8a2242ff80da63da68c8aa56cbc2471fdae5877e524d7692f02842f30a7609bb304ebdb99de5009588668596602699369922d80b8ae9621ae7bee2f9d4b8ba9c2b7711d2a1b8d0cf2dbf357da4f0f5eca5321048c00363411adaf306073c2a8d2a7dbeaa04310e92b38c858f6dbce3567e8a701a5f3d9a4df1f055c0a5206f12e8a696fc8b6e86a789affab5b86f55c72c786346b29b9813bc4bd0a8d08ec174cc6cd4c24408ffa5865dc6d0cae8fe8efde7cdffbd7ffdcdfdc40155cba44289f9ff588ce09cd14308737b9ecb34b5e2030288dbe84b19021e1036d1814cbf392da7abf096c8350b16b35a88fec0af07dbf823a30c1a1a74d1b1f039d03ff831e9b5a1fa00ad1d1d002feb0391d1d91577a60f8684a219f05b88534b2eba0db37003fec9378cc76def791788323a1a6aeac0be13f6744e087ecda138a065d7d5f78d21df0f86b33c77f0bd74732cdbc05402a0ac395ef95a0f305e47a8cd6118cf818406ab86c50e9245b24b8f548f9c441581b45edd56c00a25389b66665c465ed077e5fd14bc8172686cf74c0ba2bc312356e326564a3f2ebe1853bf3df305316b4f5f95b8b99c9ca2749acdc5200905bb8883838ca5b82e7d942533a39b48f9d999e96e51ef9d6d658b4430df4d18b6d01462a3964cb80d483e7d7ce63cb1290e9302c42f93638935367e23171bc1b86110213c2714e6d4e20b0f636d33a726a7e08a0da1d9ae08d8a9eba4c5e7b818ae35605aadc2570e32defef16a486ba414f7dab65f7d65016f0ab34ba39c200862d43e9f87f4390d7dd054d477df256daf5a710b4acc9dac84eb83cc756d1bcb613f035d2c1ce321fac34bfd4a0866e3960121869c386223ba862909f0ed3bfd5700d7532119b637d539bdc29810bfea02ce1e995f72de278fbc98c1009df56836dc01ce5f2fa33f556241b007a7cd3443f6f79bf62678fe643cbc43b42a993842b40f62f9fad3778fa97bd7f7524b86c4668db5921f5845b40c02e216fa19d36af4f826099ee08dc2253165a0f135be4ccd9fd1293ed56708fdf7ecd1ae69298c55469e5c434fae59dd070de58be72e8d24542a3ccd9b439ab2d6f862fc318ef3a69d090b6fd773092d7490e74ee0b7703a15fd2bf0cacb89d0a932a64d4b6e2df0e025d0629b7537418b000bdccac8b4536a07d5930bec6805cf14837fbb1d9152678b26bf9d4e9cbdbbc3c5a756d06d5c40b07b491c130cfe541dd760800df31d86c3a08d94ea7606b4e317a35e3efc2138631b8f082f4e5e6bf7dd02fa80a815c492e768f0acc8c85dfe99d694838916eb87829ba693fdcad56e8bc8fccfd4ef3055955135a85cabe48aa5cdfa1bbc485f9628078d1929db38d0669497600878c56a0b53297e7d4f73683e5c58e94a4ff10de28b1149faba723c075d23591530f3f61b696c94805bbc35e0d6e0d579eceafe57f9dff222f4abcc2dee91a3b710a8e1cff4fc18d8c0e67993abf60a27dd15eef9a8dc3dfe4e5e53ddff05b1ccd3ddac49e4fe130a074c906f587659012fb410b833ebd1acb565a21bcc942bd8d68f921bbb67edf777693c482aa562fe1b600865d4c776f7876281aa7dbf0406cdb7ed73d2584ff10aefbf6543059505cdd4e640058e03f52a51578037abc0133bc1bf58549d8500a232e2d70270aada1a210f5e851475974c94d26cb4a1f6c38c7418a466bda15649c72076f2ab92d1f576cd8ef774f02e86b5d477e0ca511c949c81afde3f6352e69ed1e0267e992e261225ddea7ab93a1611740534c58fc54c1e503c86ca66ab3b6a7ae4d491664f0dcbea1c9467d1d03d9f715f7a0e2289894ee4f92b706f9b9dcba21e7875550944c53a002839b025daa2fd74ac7e60ff20031f8dd9359e6330b3fe4513be527e6ba407ea1e4c061001f41d3fd88103ae47cd115308e245afb3c24a2e03fa21502d00cc5fb6ff01a0cd6fcc3879b998099b256b773d47d1a36c174ad08b35303f1bcae2de3e9de21f9b3d960cb1b13286e5f2a448db7bc544802a5d334aff60147e4296526340058bcfb7b561922002fc41a548cefcd4b133530f5979c2850f52033def61c179c99fab669e80f7ff9eb057b8175a22e2ebf6e36acc77d51fc77254f8b710b70e8dc1bdde7bd4dba627aff3b9fa8dce9643819714ab4a99b84ea5b1d4a1ece319c73081a9f642e0a365558063603b523cc47db4c7453e5995cb6be81f77ec8644994bd46d3236b6d97dcdceafd18e2aa6b6ff9842e159cc96c9b0f02de6aa9f233058d56cbb5b686cd3827261c07057b3cc62cd37d5f41faefbef9946250b33fa043a5a7ff038bfa6b132f80ed0c05bced7c2864702772f84e1761f8a1e14537b462001bff549d53d01031cc814c7dc51a8e96b2cacee830ab3623bf5abd734ac287ba9234529c876d736a3105d52b950387cf50cffe006f51e1e5d4a0b1d9672cc3996d4bad739c78cdc09f0b1c1ba106bd48e6acce2868d046b843df81ce826d715473aea03239632023313500cad3d0f30f49fb57e45858141d103187fa2432e8f166a8160ec8f7bdb1ac97807aa847010f8a120e8ee73745acc4df158b0426b4a32883f2609aab25f0869cf562be99680eaa54d58b55008a4e0f38cbb08e3e1cc110d48161e5c5c16ce416a6d7505ce6cc350508fedcebce14d5c7e54d8298309023f964f034237843e7d40507ba396a206fc9e69ae14b0f6f8330ff8fa0cf3b26483bbaff68f83017a3f18f84af2de76d30005080827bb6ca824b33313e362a9dd896c857086b9fb2f4c49b3b97a5bdb3ef4524924eac604366f701451bbf006ebc14578999ffeb943c9c2496467163851e0a4450c6907a7a7eccff05f9c2f06", 0x1000}, {&(0x7f0000000140)="7d93b813e95e28850100ae6a5840a56e340383abb044ca65b44db2c9dee8a900489e4782c2e719d114535376819f6fe343e507070000002b398174231c77972218e78d23cb0000000000000003b4ff001545d01d0657bf7a8765b9ab535e657928ffdcfffb5dda815a524c6479e1bc58e2ce6d020eea", 0x76}, {&(0x7f0000000340)="873c364f16b993313352243c44ae98d0919ca638d0477ef0e5cead20a3b66ac69415ee6a10383354422be27fa6c9c23a9fb10b8cf546dd9d46ff7f000060ea8f5c6d75dca92ece4f8b8bb6536b6bd51b5adb2a183389f7c466c9edd3ee00000000bc83b907e86afd8ca6bda96ee81f31cfa8e96ee373a13d3a5e9072842dabada488b85676ff44a18efffcd9053822064b5fa30bd15e4d742cf0a1d09203528ff819c933eff4b455f5d24df98b481585f941296b2bcbed6ff9dd1115b86cfb08e06bc0e53c", 0xc5}, {&(0x7f0000000440)="e6df4630e1b27d8b336b76534255577caebeb4b55a2e2d11efd61dbf130630cce3297d774ded3974fc7a151e4462dd16c4ab8718f8462a7a830d6d2370bcb3ac4207869b33be13fa88461a4edf0900ba80c029147b86ce37abdab94ec1a21c1f05852ebeeae78a073ebc65df0df23667871f8c0c5559471c0b72d8eb70cacbe549ec48b2864379a8a5ebf9a7090c008f3a11b180899f0223ac78d35119a8cb27c574e99ff214e3beae801dd0fe7559239e80db7be3621c44724a491cd86378d9d2f84d2ef136a181a4a7adf08936064912fce6d8c10f6d879b972eb58a720c95b02a95d80f5e91e9a44ad0c3723285cb1d807e1c9a3d5cfce4a2d60eb699ce5fbdeae60e04331e493b32bdf78b4cbd6c3469e9486f770280cd6befb4d182a5d31f4561bab2f997db26a0cd15f323fe2bd8d7dce2fa099c2f03807c905d5d5b2708a3225b18fd4f32a23e7a154823efc690a4b163249f43848041424a9b28bdb935dc9c6708cdcff32172dfefbe32b76edaf68b1a802f6023a73d76a9a8cf3c9bcf9d57deedfa9f5386121a80d83fbb2b8279f35ad7fdc00c61b9d557d08fe0993da569f125f8d406a65729171b7f5d19da8e52d249f35d8105304304ead08aac7714017bebc7a6024054ca6225039cf94df514c4c6134f890ec773c0d4314a40e44a4b9bd8c125b258b89d867504fa714e5b7df43e898790c5a4462d9df48dd71782f960d9f21f2b6ae7b1c07ee4e7559cf43afcc79765519c606e01a5231d4f09daa1b98fed67e74f7b8b936a3b4939e80eaf72f3e64dd907091f73dfb55d9edde464d128d891e2ef42f4abf0471478a2535705ea756ac40e4b6d497edc2ed5a6d6d59316a22b77eff79584a0f3a56c78e991f79536dfbeca3e31f3f6effe9a98576ed907baa35d9ebd5bbb0c86e5004757b5502417752261f4368a3c8bebfd3308142618ebf748537c07b561d049605a67bae577f42f7fe05fa6ebba389e639e094d3db9d3fb9b3e6b0f50f7213811cc042157d432e4b27418403a2df1e9e6e596a89b083fbcf474086f7ccdd4c0855296cbd53adbe4d12b2b0ab72f412bbfe538fb700922483510e37445a2f6172c57f2fdddc3f5379176b3038923f7beb94de9232b33691909f94951f837ab6c2f4bf0b363c9fc75027f7e31150677d1f9647ee7bfd084cff224d7cc92a564807b1e5c01fe0f85d47685c551aa44bfa6d26289615c3909bfa6f6cb43f8963c49623f8f1e440a1923f9e2dfab660645c6c4b1d9a444f02d11055f97542417f51bd671743968e2a4e9a6dd1b4db81867adeea369b3ce4d744a1761dc0a7eae2b527ba2e56c38c65c6f788a95c7a3dd1f897e3df6cec3b346e751f1c04f641d71a7795a2a23ce6c1af7a3d9b414b82033bd07af23e20e5274856ac58e98187ae81c6b5fd8f07f99c94b1eae4a5f3f0cad6dfe2bbc88f0cd0ee18b28544326378d5a064d370b446366a44e6553e85f162da38f40596ee8a46af877e64016298dc0f00baf62aee93f83f228d16d0a252982ec517a978b8b24eeafcdbb1d05a61900e82055e1732548581495966b056986333b97fe18bcdaf12eb03f5d3786d08f2c1442c69d8529f49e5b5b0765cde81cb38b533de149ae32720072746e7216a24f7fafd3604b972a3e06190e7e0a33da7493f9bbd54662417387d9e9d1c63eff2cdf5041fb6e9e44b8395963ce25885bdd00f852777883daf2d45f6f20196796838b0268ceed64f99205b19022b345541b0b40d1c8032a8810779560346f203e0534045f65740626c797e75efb19d4a366e64f7473ff096b91129f9ab5ffc10f550ec866e5a1ffe4fc8ec2ebce3ffd5ed5f0f90f9b75c4185f02e2b975a3e0804e3f709362b0421a881c6c90267a441a77a6d6a157fdb628fb78673041ead7faea083fe7456cc66609c0daf8c5d435e845bfce5950527c48908e24780bb0a8609e5f928afbf580cf28c027f261c0aac74de5622ceac8b9920da755a5585e059489e3d743f04413aaa77580f1a684788e7349e32eba1f1c1cf9302bf1da11b0975af0b155bcd455e716ea0d9f3a7c0bfea6ff42d9a357a7a7035f2f25a6c7bcc5a5403f8870bc829cfdebb63e1b8620ac5d473cdc0d12dd910b986548e447ca3b70f27db50a31e5cf72b754b1aeed8788ecf4d86d1234c17b71def9c3687ac700f6e28834e0acc666db0a9c346259dde099d44bbe35a85546cc4e7f823a335c6e064f4a233269e1df0f02db97cd2dc4133d56ee94757103b7a0f3e1fb293ef52c36e306af92d7977f741926b19080f68568e933fb6f353ad54794e82f3cec0bc2424b0c066495b6e3ecdef378616ac6d5042da0ebf8e499eac8a0a667098a4e6ab85994c4dbd3083c853679c2af7e878781da5d6fcf7b68025a75319df64d9d7877939ec5a1e06874308ec696f64497e4d2f1eeca1296c58498554744250a0b3712e9c6df5fcd4b45035f6695f28fe36f51f87d20d21eeef59d706025b032286f2b0d1a9d27a53c1c9824a6e45317213fce69ad52fb6d7259574ba02678ededb4673c35d3dcb0787ab4ca41c8e9f1d5a400ef34ffac6387b83a3a79bc4ec9f0606c9b3d19ac99a2e84c7ddea2368088787a462012275df1f156a5631007ed6cca4841b554087c98ca4e8852dd14fee15b13865779af9c42289113b4dcb052904c93304f189d6f1a37630980b66f394be1b23c5ba87b29ad15e5ce98691c41ea151474c1039c3bff22073430cce24da4c6118ffbebc291fc04b4ec67baad8778728fc0c2a2dc96e272c2356ef6712b35e33745ecef171e28f9025507d2479ea43643657ceabf9266ee44bf48a905cfd2591d7516b0a8186059ed5804bff3f7246c52283c6d65e5c9966a1d6206a929c09bb80f3bd5bd44c1364cc31681f503af7c2f80be69275155884464ebdba384eb93b4aa15d92a83587cd9e4efe88fa5b77be54077a5bb2fff85a3f17995436e764da8a9774b2c8a2bad80b1c6c3e900bbf86af7fb2b430d2c63a9ab5612fd8f7558be20afc788c9f709a9484bba57dbfed83d9bba372676021e322e4816358e322a21deee85c1f2b6e685e38cbae9cca85130fd5f8d115d08bc18c1656596e055286b030836749ff2a015e92f590ad77adba9173f8dc25911701eda9df83ba30ce05bc2bb32d8166b2a07aa64aae37dee782f444c5085cd0114d8f6ce693c0d73a964e45175ce597d2e8eeb275133543a8bb2b13af184b155e590661ab33d7b7fa546b0980be9cee7240b9bba595347a2382f57d4ddb525b9f2c4135a0cc68de7826e1e4ad100ecd5edde8ca811e6afbbfe7d7a8a74a676c95bdb4079e27772140874626149c4aa249cf604162ac86cdea25ac3469ff069a6c4d2279519db0b408a61184af798b66683af4ad2ceffea43dd95f4f38b780044abd3eb1034ac2d80ffc7719b679bad2e3d59aceb97e025ee9fc65ef89a1f63db03636385c23b72442298511086ea024f5f617bd16c5303aa9e6a205710b30c6a412867c74457ec328d610091ee2a0582a384d2b74e4acbf09f10abdb59a2f24dcf348761d4e32e5ea1b48aecc77a32e3e6e3705feaaa2722881d25e7eeb0ce7b8563bfb7099fd81a4b1aad9dfc8280b50ad1f821c73bb5ed0f65095274a1cc40a95979922c85892bda7d1c46ebfbdd1fbc48cce5a1aa6ac32be8ea080a6366db1aad2635ade1b908d973932b338d07d0b7b3dfff6dda9bde6731b0d0c62f8d408fba580abf53890896b1969804e4b19ff288e8a98b1d8a876f0b20827148ed3fabe89a257552ea7ef888abcd1e0fd07d1d8fc3d39fd963a9653f3e1657979b33d22ed2412e05567396483ea925244a115bb42a276fc3f76aaf1a947c54931766f80ab88dcefbc95c68be19e8e0daab15138973221e2056c470291c38b7642d23b4d1cde9ecdc7df5117eff309d4b58d8d3b2c0424ba08c808f9e1418fe2482effba848d5f6ca00508d8b265c5c8da36e916e9319c2e019b3c363593b5f5694f0d3e56ff05c6b479549d2213c2b8b0df64754be2475aa73015a1fc96dcbb8fcf2f7b3163522af1e13270f395fd663e1956905d57868011b44bb8aad84afe4e3ec601dce933ce85a412517c9bcba9417b24b2b75b15e07f5c137ed85734d2a9da46406e2f56f18050df58d55f1825e1edb1d3790ac0c250ee9fb7312207495d92b585d09a64b11ee6c1dc8a188da01bc3829d644fc0a9ae3f8cd598fdd9a8eca0ee4834a44027a0382ccc7648b140afa9b1542dd868db93fa6f15cb2a560e11e56e9ff99a8cf4ca1558ce1c483d465936a7c60bd64c911cb1cbb70779a4f01275c3c3737837dbde4ae18e0af9a030173e1517679b529f9759ebaaee3370f68f8e597f935d771af13a615c4f4486665d83775a69cbe3a285ce7a6f4ae7ade1dd8dc2bceb59207a40914b6e50c91e7fe9be3d5671200e04ad1a6314cf7270fa5df66f829bdde17401c675e6927aa072f9aedbe593f95cef1d669a72f6a3e5e86d5c00bc5bda136e732cf3f5334706f2b495aec31eb849fdadb30f5e0966055e9393889446c3e8dc52ee75c8e9e46ae7c6590de375c7681e7f0559ece9868b868424bf281e1045093a27aa964f293c24c2ebd97cd2cd5618c02738dec49d5d40249a583b06853d97837382e9d2ad0b4305e3ce6add3398232f50695caf81c1b6f9966984fa2ec6a1f846264f91a9cbe9a128210665ea646752793c8ac5d032e", 0xd11}], 0x7}, 0x20000050) 05:51:08 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r1 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r1, 0x10000000) io_uring_enter(r1, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:08 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) close(r1) 05:51:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x48) 05:51:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x1c00}, 0x48) 05:51:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x2, 0xa84, 0x90, 0x11, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 05:51:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x0, 0x400}, 0x48) 05:51:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x1c00}, 0x48) 05:51:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:09 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:09 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)="aa", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002480)=""/246, 0xf6}], 0x1}, 0x63) 05:51:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x2, 0xa84, 0x90, 0x11, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 05:51:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x1c00}, 0x48) 05:51:09 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) io_uring_enter(r2, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x2}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 05:51:09 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/20, 0x14}], 0x1, &(0x7f0000000180)=""/175, 0xaf}, 0x0) close(r0) 05:51:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:09 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000080)="10a911d85e5d72f5a74a1c3b9196e8b7f113f927ecd0f7c909c31c66d42da3a875063e8fff3cc580514d4cfe35708d5123c6809e77b3383cf36a34a659271a8adbf67480860e108808efb4", 0x4b}, {&(0x7f0000000100)="8bbdf0e6b07b990e711255b8e1d22eebed79a542f4af9f5967b9a07bbd0b05e6c7fddedc448ac9f1537eed73e5ce6b29a36391b60a0696df6763412c598689a7c4bd16ceaca336af99e89f2bcfee46d8d2b0b81f634851307f317f0cae87d356bf79a8a6e83560c35a0e902ec4dec1fe8d25542a", 0x74}, {&(0x7f0000000180)="0e60e560b7ee357c42b15ea6a4f656d2e0481c77d7d35f56c97460eb7732", 0x1e}, {&(0x7f0000001400)="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", 0xcc0}], 0x5}, 0x0) 05:51:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001900)='0', 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/154, 0x9a}], 0x1, &(0x7f0000000240)}, 0x0) 05:51:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002a40)={r0, 0x0, 0x0, 0x4}, 0x20) 05:51:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001900)='0', 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/154, 0x9a}], 0x1, &(0x7f0000000240)}, 0x0) 05:51:10 executing program 0: mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x4, 0x4, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x10) 05:51:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001900)='0', 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/154, 0x9a}], 0x1, &(0x7f0000000240)}, 0x0) 05:51:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x1c00}, 0x48) 05:51:10 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) io_uring_enter(r2, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x2, 0x4981, 0x90, 0x0, 0x1}, 0x48) 05:51:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001900)='0', 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/154, 0x9a}], 0x1, &(0x7f0000000240)}, 0x0) 05:51:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x0, 0x0, 0x0, 0x1214}, 0x48) 05:51:10 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/20, 0x14}], 0x1}, 0x0) close(r0) 05:51:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x2, 0x4981, 0x90, 0x0, 0x1}, 0x48) 05:51:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x0, 0x4}, 0x48) 05:51:11 executing program 0: mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) 05:51:11 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) io_uring_enter(r2, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/253, 0xfd}], 0x1, &(0x7f0000001400)=""/102, 0x66}, 0x0) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="96", 0x1}], 0x1}, 0x0) 05:51:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x2, 0x4981, 0x90, 0x0, 0x1}, 0x48) 05:51:11 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)="aa", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000002380)=""/238, 0xee}], 0x1, &(0x7f00000038c0)=""/180, 0xb4}, 0x0) 05:51:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x16}, 0x48) 05:51:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:11 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000040)=@id, 0x10, &(0x7f0000000200)=[{&(0x7f0000000400)="9e995c0590bf0a29fa7882cafbe1ed1fe6d285c07ebfc8850929708ef89bceb4caca2a8a8e77f123d7f01078e8f84503e30c1831a4d5506a99c774e540e067f79a43b03ae1c556a4ab5301ca8bf23571dd1ec55e49aebc6097c2c2e3ccabbbfcc4f008140285ef09c4f79cf77b2d49905f99deeb1be59190744c4e07730149e484a6d4240982d56180a9e8c915dd1ef4f88aed78498d8fecc2275338ef8335f635bc3bebda1ae5295e98138981fdee26061b6c97ca63da757cb1594f4568d8d65900ad4062c0788270332bd3020e2bab65deb66ee25a46b5784b41723b8bd26e8a1f14cf072c4b4d303b45fc4c4bb27630f8837cd174d81f5396fbe0e36742cdf0cf2e5a4829c3f39167a453aa21b6c57f7ec073dcf9b96aff6c751b981463408602761e307f2884f528996c2dd2a92ed805b9e30a93941f95920275968daa5b0c2312f3171f5e17214f97c8dce3bb33be6bbc7b77685f32886f6af8e9052cd9651fd26a8daf498c0878cf1758ab5ba93611470937b83194b87dac7de67a1cb1fbd5de3745b5449b9d81d3bce8f6259889153fc0fc9c28d536a727ed7b692492f3505c27003c8e3b07d5ee7971a70a1f5117e0227d1e8214e7358df1766fa1ae0bbe1356c6adf0313d95af97f2eed900644388e3119484b746159e9128cb5e9fde63a60b28b2dbc204e6785574e5edd4634e5bf226ba8ae130d2a0bd981631aa548b6da18ddc9f216223ae44e5d0c5578371d4d410f88542ff3cdc00029ab3f4ba66e967781c2ccaccdd39e44e7fc63ab54bc3a60e2aa88de03235423899c57a50e720d00db8d4d352717165cfdbbcc2ecfb927a44038b42fd28221e69e7ee5acc1b704c3b81915aab0b3965d9d72512acebe0512a563453b67906c7b2265f2674619cd68128dc0984c8f695752c7effbd1407820d9520dd621267149d4fedc0db3a4f21855241d3293871b3e0b0db02b0b8afa6d5bc9d26fdcab9bb252ca4ce0f5a2ce3a86d28460b832c081fbfff0147eaa92f3c573d657e8c9d22983cd25ea639689165e6f504602edeb36f47c05629cbdbef98b89e9eea581e67d9aadb23919f39350c0ce3e979435b21bb873c38c6c122380567511bd3bb72f3adbda71e5831b23694887bf6752b0fde0f2d4619d270d5cbc1bed1a4160e50746f20ee5059c91acbd25978d8c9252f828eea0ff573d463f244e6d727694e5155cc11a8ac911a55daa307f71ca9a17bcc3f20ad6dd98c8e4d45f5ec91c72027d17a3c17ab15230a10d152da2a7b4fe5349a5c55372b2d44a7691547719b873e8c221f878a22d0081ea26cac422dfada43f75882ab2b98b5c789e584ca4293315bb90c8a412283233c551f49a69ecce2116681d6dae05763639cda01e0c4b80013833b70fbd62621eee580f3dbe752498518bed45c73e6f9642e8ebc2cac881c5a1d93d9b3a786f3dc2c27f3a574d8d28f0fe3c92d3a72c2b6548e20cb1e0735d2905c3548f6d917e9e5f5988fb1825365e286be0c62e115c3cb1840c10c13bc37aa6dcd247c797cfe7d9d80d68a8f64c4595df5519fb4bb41855d3aa8ab69e3c898c0956380e175f0cee407394b1892372591692c1e66ee66d32949f65985a27d67f21567d4c2f4066972c0b96e010575514076cdf6d8c9183a79e0bb5db1921dcd5fd7a51e4cfd515f3de99ae20ded0d68dfe17485b54a4c222eaeaa6a5018442ae5b34fc69ce4f1491b402fd57cf90a32de1f372c02d44d928a73ff1fa5949438c6a74a3c7c2de48b78e386a9bb4e753f023b2e0fdda82e83055e56ed4e66e6d5067fb097c3077fb77061e5651d3cfc0af8968a6c562cc999c94df0702d94f8bcb3b2d98766556a247cd52c4e4b0f5592905d7d339f095341235a171c4ea4eca1b5e56445cb727aaac01da1f0eac62c7e6ac4f6f0586914b61b3c6a2ea9f63d6e358186f1d8e9c74d6946b4eb078a9e4fd5f85b24a31a7a572000daf5bd0c40f5cdb0c25dd09c83ef4e20be216864b1abad0ce8d8a98eb5c43a16d6c7be7575953f91d09611a39c71b251a9e18c332108dc544a79823e4238376553e93462b91e108c738edb8fed531a4a574ce51d5864d7538cdb55e92ae635ac0850fc4d73474a8a345a3612a5a06db4ee4f04d92ef18dfed377802497fad3ea7f0ee7487195c68c5dfe17fc4a9a30478b51c8915d3f58b1ab484c8b91653b3aa4789679f509953ab80d8f9381e9e36fecbd523ffb79938e9230ebcaf244255d9ae44f5e9390038b34a3558eeed434fe416965d3bdab7612584b3f30a10966edc92a0c44e3c0571e6b7de335953baac1b043013906213863bcf8b38f3e566d3465bb21d91bfb841eef343c8d006ff0afb15c4923eec6b3d913a37294679b2f102cd1dea00f1f78d1896154a70c534511a1652c83cfd38b903084525229f9ac5bfd12c455cce19d40d52cef720d263f71b06b7b6b884b883daad97d4163179d11a4ddee63844b7a3f284fd05c539da6ee1b0956729fb4be17800d244e4d1e802912a0e222a68dc8331c1f75d283d5e46dcc8cfbf5b050773a121349641f7849dbb2db690cbc43f2a778482d3dd4ada56b102072a0acd428cd66bae2dd260b5ce28e9251e777c120ddca0f5ed0556a27ac075633c59d95cb319b124b8412f3338bec90cf4ba8c42a26a91c53bee7116b4b52e766094fdc56e28ac1a9acce5f899a32ded7f9f6bad411ea234e1db3bb2c9983b0cb766cab5901518f3d90cf23ca08cbff0135c5a4ab181ede15ed3e28b9d00017980a1e7ae46fc1e1ca695e278fb0404a5c6af205541182096e1a9f93406046049d63a4a1daf865794669ca2d261a666e78bb6155fc4a9b7b760031b2375b330c42a00e31576218d1dd85208db37db6da7ecb07de468eae92b1c0c000702a0a9fd3032a83e213ad9f5eb70aba3a375601efb414c0dceac9eda237b73ac3a12797f8c27194977f83ce3158240a5aaebb0d6ee6e8f65e5d279dcd877e94c04b32936b7fd905bff3554b33f6ca2954a7baef9ea45a64222930b30f961f423bbedcb4222c8b0076d66ff6a7e423224c0fc4e8615c13e5160eef1a552b96b1ce7657851dd37289486642d5ed4062d918c77ed20f5e076f378ea5a71d2c6503220c7131d2bfe03cb604635d0fb7f7a51683fa0d5c7ccb76984feca51760a508e940f34183628b2b68100a3599ac700dc7a51c67deb95f29c0c92da20746d9bbddd776af926682142e0fed0e0fdd9b60c2642d12ac51c08703e0c46d79e9d8669f55e2e35e4e9e936f771200e4dab96d5b6d3ccff4a0e5c7c4b83f9c116bdd4a2beaa3d26c78009cfe87c4462f064e544c677e16fb7d0debd4bfce532a84f5caf975b7117f0d9ba70edf6a4bec1aa6ffbdd3eb14b5120ca138dc13cb1eb7cbaf962134b5e44ef4d19f343c79172f0f681eed9a46c1de707da7ee1e9c347c92c98e5d3037890d303cb27dc9d1f87b37f2945d08a96c959593671376a1a543ab8a85201db197acf4d3a1d2a0f02b2f20988e0e9c417d7b830b636021b61cf6c962f1686b6117ac58215923119652e5bf2fa31b1ecb3a7a1d5f3c523458534d679da74b56e7de4a64b82b11586b33d66aa4c3a9d778e5570b2e2c4dee03fc4e065531c27bc51ccbcba4f7c4c28fd6d8116816df9f3f4d5153f2a4f181811a846efacda272da339941bfbf29318606dc98046492591b8ecdcdfce699023a4660b886b07f74c0b70aae644eec91acd84b12a947b05036dd87ece135bc711b0cac1b1629c872bf18df96efb5e67c7182297105e6ed22236af80fd0bc6822dfb0ce69d30945859308327307fc2bbc50f55886ec774a6a9f1d72048e99da1a9659760ff73ec6f17428459a5587bd5fa997706c0031400fbb56f21016fdd285af874a725b576bc3be6e087cfae2d256c89b40191572b651ccbd2a916f30483d66c1e8978ea5fba03c9eac0365c67f282199b5268064261d6546e5ba9b47d0b9759798da8cb035daa938c693c13390aafdbaf3f41cd92cd0d741e74264f4e469d9ef7be0faa8092023a2d97cbb03af271a2d8b92359fea0a509392c20189edcc39cde09776dbdb42eb8211e2fc0cd3a71218e2c17aeadd9121127791b245135a0a96b1b1b1fe2a93af847b1a5b5948bd56f6c61976846698675ffda75aa7f5838ddc60749df08abf8f9c6a940d5881af52e6ff23b53b885b8011151e47c6cb7ee7d5ea237f612e5ceaadb819126d032606b1ff75cccb2adba68635e7d3329b887e60621f022165f5f30a4ac4b04b3a4c9cde97b39049f2b1849dde8623e8016f8a452d09a772a3eddbd9ee6644ecf91a35e1f8db2cebada40dd134406a793c20ce64443faca082d8b5113ab85b6ee7c1e4a5b731699b4d765725bcd2f6225446c6f48355e684448de7849a099b87067abbbfafab8316c6d55a9dbf38b80e37087a6794293980f6d1e89af74bed13e158ff0f38845b1fb25427428d3f0e49fbd6a3611e38f23d65a3aeedde1c897607a230e2a71ac8909e6ae000d86ebf4cdac9d7da64c0e718f640cb00a1bd6784d97b896a7564d92f49a54e5d69677ba65abbf5b39e85d335af49138ac07a6d3457775732e8936a2fb2653971999a4ecfdf1e32b3cc169f953de9f3861c249cb9ae0c0ba7d26806f0448960ec191b81196e19fd6b486abdd6cf86b9b710e5834ea55164e3cb1981f1dd430b4dde7cff1e079074abf0f019f3dd22cc536b89c828d8e6b73fd14470edaf3d2ea72251b52ef397482f181389d45f0be460a1b6b4c9781de2060d98c89cd6104b12150939e4c46c3ba4563d507eb7027407a125ff373659a12f8e148e609e5b18ce549392bdcc57ef98e9c43491f95c8deed64f729ef4f99096553a111e0d3de5962f42116de0e192acc3a2c2d1b0c20cb97c93726f73f4f6636d9a5fd12346d35ec3a346545012496901eb40b47235285f3f66744e4e6dd3d874196fb1c6d15c8b1c72bf808e620e09e4999295c361e9b48cf5f3978c3514f8cc439a052da549f12d77cc923c3ce96b1c6f5990afd425cb80277302c8c100fc8efda646314f97cfd658ac4ecd8d264e064b7bb04dc7f1c367f0ea02450d417321bdbb43ce83a8023b3ebb63b057471a5fd466d6e2a247796cd39def7a9076e0e3a85c7b85e3a9c3e6c59fb53803621010b50b6b8ab2ea39785af633fef94e337f8229fe22c4d4a8480c9e3c5705bde56f3ab41038536d5286b0027a7eb1fda6c952608107518249c0cd71c6e5baed14ec3cbf55acf4c17f9fcbc917e79ca0415746b989a70b60ccf234a2a977ee5c8b8ca71b55a30be0cba9b1b727ac4f2181ed5d0bf3099978b59e4eaf7024f1cef1106756d55475be3aa7a6e8c722bf45b623ac2a31ffa361c1234c41ce61631078b8b45c9045f8a6ebae95fba50dc5a65fcff59fa336fd328f33fccecebdbe749e826232559045da5749438d04c624bf0ee2717b2e1587398b5eb6c0c92177c10e89c052f92dc20ac527d8f76a6fbbfe1a8265c4ab60438f6195edec0b0978fcbf4aa07e2b013f9bb9a9691445079de62e2991a6e8ae9500c8b67878fdc373a53f2398750620ef183f31103477230f448f2ae027634e66fb90a43cdef612c7e115b95226bf8decb223007596eae3c8c1fbacb4d89566f706d789d9af8d842340f67fa8c5708c1b1201f1f26cd903181eeaa01a07b9b1bbd9355e3c6f847f9be80b4622ee055096884e0510eda469b588242c21866313390bee7cb913c9a8b56b0859e57edbf30c5ddd5595bbb5c357c77d1218867fd61856698ff4e94bb756", 0x7ffff000}, {&(0x7f0000000080)="10a911d85e5d72f5a74a1c3b9196e8b7f113f927ecd0f7c909c31c66d42da3a875063e8fff3cc580514d4cfe35708d5123c6809e77b3383cf36a34a659271a8adbf67480860e108808efb4", 0x4b}, {&(0x7f0000000100)="8bbdf0e6b07b990e711255b8e1d22eebed79a542f4af9f5967b9a07bbd0b05e6c7fddedc448ac9f1537eed73e5ce6b29a36391b60a0696df6763412c598689a7c4bd16ceaca336af99e89f2bcfee46d8d2b0b81f634851307f317f0cae87d356bf79a8a6e83560c35a0e902ec4dec1fe8d25542a", 0x74}, {&(0x7f0000000180)="0e60e560b7ee357c42b15ea6a4f656d2e0481c77d7d35f56c97460eb7732", 0x1e}, {&(0x7f0000001400)="abb945d1fb6548f6c34f126f25e654d95012f83f32a31fe353242d6e298bb7e3001b461b959bd9d81d055604b3ab5014fbc0a5176f0e0a83a7500ec7686ee526779db2d0e6dbab8b504fd3a606e2f1c15f12c120aeb00eae2941aeb40b79446261cd379877fa4cb8f7102a7e2d72b215410c56d7ad7341a8f7edf04676f556f058b5a0597f05913dce5ef5d3577be82bb71d79699c35cc13708850d80906958e182b7557e3a1cd85ab09273c174e96f775544f4d36d18248f2643c42d0eb3ef05802fde4326cd574026457a0cef84819e6f7aa7dcf212d127a58efafc6d74da0f56a420852d42250296d4db878a609aeb29dc456c9b51791fc04846632e309f6e0beb362bb9b205276293981dd2a5eac428468d3551ea63f766b1483fb40f955cb427fd1424bc109836d2be720e565ed423c8aca9a3183e51e40f45b5449339f190cae498125962fafc9d671daa17ad3a231b07b799c47b4e436cdae9a1240ce16f5ce77e306778cc141c82d8a24cfaef155b68250ce29f40307ba3c568bcf240be95673133e0a2960e801e96e63c54eba6179bcc0533335e64364346356b8aeab096ac668d2a55a65934ed07681bacdcb0c95aafe3cc8e80f87009bbc9d5ca6807d44041a40460d05e34bedbe69f9af02aebbdeb66158c2eea7a64b506e52afd387736888d508f40f5935333990c9a11ee3de28d7bdfdc6b3ba2457bf0f857112f3ca1edd525ddb4f13d331096893a2df7fe982500174f3022f499cc92e5bdedec190175b287466b81e11fdb85c0453645b7143af03494e2fd8986bf43ef4c6d2a3f3780016743543c5e4ebb226297cbb91e482a8d8ef0b8f9a4009caaf5a258de802ace1c2920a03f6a6f395eeec90e10e34011a02e9cab1efb0f1b84208d0c938714c1e2aa746fa5a0b6de7a79fcae5b101c6811dc2b17a6eb0695853893deb6c325f986bde8384b9ea6b16541717c16d2919767781cf9c13485a49bbe41b9b02a40da44af5bff83a052d0d6fb39eb2d655f1785be83dfbf52ac2e2155a5265a3073ae4489e2720e37bfdc738990acc4df10f9e55e8787c5f313f3ace1ee2cc943bc1c9a543a9d0dbf73ba55506fac6624100ef609a4f408b55a31c4859eba5dc641cef2675765759cf1895114842d6883e6038883beebea8ced8d406fcfabea664c317d25472bc7c911111feeda66397fabd2e18a8703ac82b17cebb1c093b6ef39f1dc92a6635c91c1e33285b9ca9f5bb57ca87010876177aa1338e44b7d260e0774cdc0c6d38ddd6d0d71e2f4b0d53030c7da10fc587efb55fb61b46b9d793fa82eb184c717b50e08a0ad2272b6e9ce8acfbdf1fc3ba5268857e57232e0c8fe40d1fee0442116441d37e1969d6715285f5dccd3ff9c6b2765cb8dc93be870949683082854926fcde9825a86315b4de5fc78e177d846b8518de547fe7451337145ae244af4e0ccb30a7c0f49ce9ef623e39fe918e5230d076b4d902fb87780a675b40366e9f338b78140d16f85c9a60bb1b7d48e8631efda51f87e8c01cc949f1c735407d4b48f3db07689ea71add9ccf3c811599072de1d45120976f009a2db5d80f8bf3f7840df9347f615dfb8924f144a192bc2c957e66e54d8e073a5e3a0c17803eedba27881433fe38e2a81243a48f7b962a3b46d048cb0fcbe402ee00cc0423f1d6538a6cdb6886e098014abb16a35ada23dc0cbb59aa3a65f7b4147148c96e8eea23b96045fd736ae7043d4190fe0f09b9b531c156f91587e9320ee29ea32083143a53d2205e0358a7797088cfcb86f234ffb7d66536ebafe64f82e63ef7336d9b023e55f02f326b97a8b23d508bd163134b6154257a63a41038ec9470e283f350868d36fd84238ca0ae5dcefbdfb6297469955d4e5b2968685dffa19b9f631c6f094799fa6c5820f28d6aba588f1c1eb9faab793216d6878174af185e98e1c4be69e2241d7aa727923562db2ea538aadb3383d9b1157dd94d03d8ed41e16a160813856497fbf696d0ddc29c9b45a0bb2dac62f561e939fa32a14f7707bc62cf09e7b8d8e259c9fd724799e9befa1ccb62111bb583a924a3ead3703e5b346c844059a528da8dd39601a1aad0c913516f97613b3402798cb821ba651db8ddda1c77f19208922d1845d2f68612ee1c4530489b290932d77949127f0d6a0bbae3d364af509861700913db55ec6a933ad753305555a6da6e86559aa438964a6f79d5a524afa227a493cc7a818a72894cb0c3ec17390392b661b74b28b7a7372b623c729b6673f574048c7d1c3b5e6929b7e1a0da8f5f774eec406606c47e143ad3cb6cc5c5db21f30a737170d7ed515c296f17ef3959d8f67ca3ae0b3fca366edca74a0ebffceebe2b7535e7639309be29537a27102b841ee4b7b29a26b464d1861d0775a03efdc988e115103d1eb388d1fbd736c88c2902f039fd0c754fc1ce860fc3e61e15ea030b829f73f86282fcc629b1d5d70c0e271bdad060dcb7e749513f29bfe9506700b16e6134fe09ad34730558bdc2dad3a2f9fc47c0f75316110e1c83d3080572b9b7124b5d3a230e659407b0716ba9429cd500c8efc6343401c8c176eab59aa44ed96d59d8e5c9955a79328bd7e5069c3d2b7cff89632816a9d0c5fd40e95961960e0830bbb18673be1e963b2a72cbaae123eadc000379569d9652e4de2f7f8ea9ba84e918431509e69de617cd1aeb5584971aab5e0447d0d54f79f6a42637ddfc831d510cd93ba9ed985010df6b0e58172794d23489fe336cda985cc2c00b97dd3fd6441d557e4380ef3f17b2efd354d4510a56c4299cb7944c9064ba5be606d029836e60e7a3f4fa78614346c0d02a67dc598578613943ed12cf3c373a6f0804beecb793fc77fc87057feb8bb54a39a1fbe40fb1ab05c60f037ded1096a4349d9f6b44e1aab54d32dd702d9f898bae965ca2e6bc9b95577bead560569945361632d7a272bf8f4886716023b11eb8133007fa27bff59ea67076f0241ddf7833b482fe73869b52455bd9186127491b30dbe021873d26bc40569182468bc3d43cb3f4fe40c86b96b32df0c7a839840aee15fe542821ae8e8583bc430ac770428fe850129c36d08e9380983c902fa7b8ed3fb3cf4608b411660c290beb765361825ca4a5b00d92f328ea4e7b72ec223759841da5dc099b6ab9174b5c05dd8d10c65f48c37b2db27bf8e00463809e1334dd8374d88eae2a1e12d0a1c3700343af8f56dd1140e90b6af86c418df64d62be8decbc7186dd47604983a50df58bcab314c28211f54dd05f8e980bdbb3b69cbfa725d79c77b9306b84d442a0574cb4748eba18fc16de1e1e911da49baa3862a86d52f003377e29a7d999c59a200c0185b8c59f682e25c8a3d21a75ceaee7f8b31a2db0cabf6bd9b16453785dec692cbcd4e8ed2c7ec2603521d55d42f3b135057012b4bded06fd9f977cef66b15ed32959c882582d0eea44e8feb5471bf0cd0c7fbb65509bff5fe6386346967c7a89084ffc47e38bf78f27cf85a365365d42fe42a54780a5b387e990be3c325aa26cb1e1140906bd201ea55057fe632a1fc8e3945e7af32180748251485afa08a6d5f13060a1c5e468e9d40cab21b2a2dc119bc6b6eaaf45cae83ed7d3059e4fb658fa9bccc2018edb5c8be139c2bdbfe45e1e8766cdd8d61eea87f4da2970950f9ca390d1a845fd5f5d2565fc3586e7181cdedc6a139d747718610ca4ede0d2e5a76aad2b3fa89634f6262edf19b126d5563b27b4aaaf19da2b8fb2d69763de448c2d51b998f5ac692127e441c4a5fc75f4db52318ad3e81a58b7b00babbe988df66c1ca3ea562fad96452608dd1218d016e75960c2aa1822ac91b45fefda65fa6901c102b9d9d63652a442127ca7bdc696b9e32f1dcf20b2b3d07d6107e9f1f9327fb237a4874810493a168186e56cdfad5ac6e06931286caea3280c9a092a9a6158cce570162af20f0703e984eb2aaf5fc230e330e7ce987950e036b60d29f53d93f86b5b9bbcd8bd1028264e778a71eeb17eb9719f0a2a4516a22c95c89a4cf5257dd0294906889ae267f83ea90ea943792604a937f3277e70f607bfa6892ac7ab35b97c54877fe210ce4d32e32e34a33456699cc586dd953fa9d4ec0f3df0886bfea9c5a0fde939b927beb14b197b043352285610afdcd4a5fb26e21bf2b0ea83966a2ea0b20738e9d554a756f6fa3564bf0da621d4595470deeba3fd1e1955cfadf9c9f1d0e1c57fab2a2d9dc25dae832e72cd7844b0e8b6f7ba6f6910ea826aa2d15b9c9281e7d5a6dba3fa9a27ffa29166f4928e45b0e1b705e83743400806224939964013b096a2de54b6f9f7a7e11432360b1689d8476b49800165b3b8afbf78c6bbde5dbf49d5839bec6b6bf47f393feb014e44c14ecf6559a81af622d0c588c02fc029cf966da08fc0e762308a83f7c34bc97a0beb2ac2f34650e49b73dac7ca8e9fdcfb8a1c17b962829ac58e622068c21e6fbebae4d3eb819a862f3f00196a2aa1e36876786c91acf39b0f10d1cb829bbee7712d94502e475ab61e9505fb6e54700c023aa131adc9340f8fc6eea908a218ca69458ec2357a3b9e65e28ffeb53c56cb808350f89dcad275557d8358a8e2cbfb707855428d0ce24e8a003dc76779e265d7ccf8bc606bdf05c6d49c2ca544b6ea3997e151993c8891931b457bbd243f258ad6ea94", 0xcf4}], 0x5}, 0x0) 05:51:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="96", 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000004500)={0x0, 0x0, 0x0}, 0x2) 05:51:11 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000040)=@id, 0x10, &(0x7f0000000200)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000080)="10a911d85e5d72f5a74a1c3b9196e8b7f113f927ecd0f7c909c31c66d42da3a875063e8fff3cc580514d4cfe35708d5123c6809e77b3383cf36a34a659271a8adbf67480860e108808efb4", 0x4b}, {&(0x7f0000000100)="8bbdf0e6b07b990e711255b8e1d22eebed79a542f4af9f5967b9a07bbd0b05e6c7fddedc448ac9f1537eed73e5ce6b29a36391b60a0696df6763412c598689a7c4bd16ceaca336af99e89f2bcfee46d8d2b0b81f634851307f317f0cae87d356bf79a8a6e83560c35a0e902ec4dec1fe8d25542a", 0x74}, {&(0x7f0000000180)="0e60e560b7ee357c42b15ea6a4f656d2e0481c77d7d35f56c97460eb7732", 0x1e}, {&(0x7f0000001400)="abb945d1fb6548f6c34f126f25e654d95012f83f32a31fe353242d6e298bb7e3001b461b959bd9d81d055604b3ab5014fbc0a5176f0e0a83a7500ec7686ee526779db2d0e6dbab8b504fd3a606e2f1c15f12c120aeb00eae2941aeb40b79446261cd379877fa4cb8f7102a7e2d72b215410c56d7ad7341a8f7edf04676f556f058b5a0597f05913dce5ef5d3577be82bb71d79699c35cc13708850d80906958e182b7557e3a1cd85ab09273c174e96f775544f4d36d18248f2643c42d0eb3ef05802fde4326cd574026457a0cef84819e6f7aa7dcf212d127a58efafc6d74da0f56a420852d42250296d4db878a609aeb29dc456c9b51791fc04846632e309f6e0beb362bb9b205276293981dd2a5eac428468d3551ea63f766b1483fb40f955cb427fd1424bc109836d2be720e565ed423c8aca9a3183e51e40f45b5449339f190cae498125962fafc9d671daa17ad3a231b07b799c47b4e436cdae9a1240ce16f5ce77e306778cc141c82d8a24cfaef155b68250ce29f40307ba3c568bcf240be95673133e0a2960e801e96e63c54eba6179bcc0533335e64364346356b8aeab096ac668d2a55a65934ed07681bacdcb0c95aafe3cc8e80f87009bbc9d5ca6807d44041a40460d05e34bedbe69f9af02aebbdeb66158c2eea7a64b506e52afd387736888d508f40f5935333990c9a11ee3de28d7bdfdc6b3ba2457bf0f857112f3ca1edd525ddb4f13d331096893a2df7fe982500174f3022f499cc92e5bdedec190175b287466b81e11fdb85c0453645b7143af03494e2fd8986bf43ef4c6d2a3f3780016743543c5e4ebb226297cbb91e482a8d8ef0b8f9a4009caaf5a258de802ace1c2920a03f6a6f395eeec90e10e34011a02e9cab1efb0f1b84208d0c938714c1e2aa746fa5a0b6de7a79fcae5b101c6811dc2b17a6eb0695853893deb6c325f986bde8384b9ea6b16541717c16d2919767781cf9c13485a49bbe41b9b02a40da44af5bff83a052d0d6fb39eb2d655f1785be83dfbf52ac2e2155a5265a3073ae4489e2720e37bfdc738990acc4df10f9e55e8787c5f313f3ace1ee2cc943bc1c9a543a9d0dbf73ba55506fac6624100ef609a4f408b55a31c4859eba5dc641cef2675765759cf1895114842d6883e6038883beebea8ced8d406fcfabea664c317d25472bc7c911111feeda66397fabd2e18a8703ac82b17cebb1c093b6ef39f1dc92a6635c91c1e33285b9ca9f5bb57ca87010876177aa1338e44b7d260e0774cdc0c6d38ddd6d0d71e2f4b0d53030c7da10fc587efb55fb61b46b9d793fa82eb184c717b50e08a0ad2272b6e9ce8acfbdf1fc3ba5268857e57232e0c8fe40d1fee0442116441d37e1969d6715285f5dccd3ff9c6b2765cb8dc93be870949683082854926fcde9825a86315b4de5fc78e177d846b8518de547fe7451337145ae244af4e0ccb30a7c0f49ce9ef623e39fe918e5230d076b4d902fb87780a675b40366e9f338b78140d16f85c9a60bb1b7d48e8631efda51f87e8c01cc949f1c735407d4b48f3db07689ea71add9ccf3c811599072de1d45120976f009a2db5d80f8bf3f7840df9347f615dfb8924f144a192bc2c957e66e54d8e073a5e3a0c17803eedba27881433fe38e2a81243a48f7b962a3b46d048cb0fcbe402ee00cc0423f1d6538a6cdb6886e098014abb16a35ada23dc0cbb59aa3a65f7b4147148c96e8eea23b96045fd736ae7043d4190fe0f09b9b531c156f91587e9320ee29ea32083143a53d2205e0358a7797088cfcb86f234ffb7d66536ebafe64f82e63ef7336d9b023e55f02f326b97a8b23d508bd163134b6154257a63a41038ec9470e283f350868d36fd84238ca0ae5dcefbdfb6297469955d4e5b2968685dffa19b9f631c6f094799fa6c5820f28d6aba588f1c1eb9faab793216d6878174af185e98e1c4be69e2241d7aa727923562db2ea538aadb3383d9b1157dd94d03d8ed41e16a160813856497fbf696d0ddc29c9b45a0bb2dac62f561e939fa32a14f7707bc62cf09e7b8d8e259c9fd724799e9befa1ccb62111bb583a924a3ead3703e5b346c844059a528da8dd39601a1aad0c913516f97613b3402798cb821ba651db8ddda1c77f19208922d1845d2f68612ee1c4530489b290932d77949127f0d6a0bbae3d364af509861700913db55ec6a933ad753305555a6da6e86559aa438964a6f79d5a524afa227a493cc7a818a72894cb0c3ec17390392b661b74b28b7a7372b623c729b6673f574048c7d1c3b5e6929b7e1a0da8f5f774eec406606c47e143ad3cb6cc5c5db21f30a737170d7ed515c296f17ef3959d8f67ca3ae0b3fca366edca74a0ebffceebe2b7535e7639309be29537a27102b841ee4b7b29a26b464d1861d0775a03efdc988e115103d1eb388d1fbd736c88c2902f039fd0c754fc1ce860fc3e61e15ea030b829f73f86282fcc629b1d5d70c0e271bdad060dcb7e749513f29bfe9506700b16e6134fe09ad34730558bdc2dad3a2f9fc47c0f75316110e1c83d3080572b9b7124b5d3a230e659407b0716ba9429cd500c8efc6343401c8c176eab59aa44ed96d59d8e5c9955a79328bd7e5069c3d2b7cff89632816a9d0c5fd40e95961960e0830bbb18673be1e963b2a72cbaae123eadc000379569d9652e4de2f7f8ea9ba84e918431509e69de617cd1aeb5584971aab5e0447d0d54f79f6a42637ddfc831d510cd93ba9ed985010df6b0e58172794d23489fe336cda985cc2c00b97dd3fd6441d557e4380ef3f17b2efd354d4510a56c4299cb7944c9064ba5be606d029836e60e7a3f4fa78614346c0d02a67dc598578613943ed12cf3c373a6f0804beecb793fc77fc87057feb8bb54a39a1fbe40fb1ab05c60f037ded1096a4349d9f6b44e1aab54d32dd702d9f898bae965ca2e6bc9b95577bead560569945361632d7a272bf8f4886716023b11eb8133007fa27bff59ea67076f0241ddf7833b482fe73869b52455bd9186127491b30dbe021873d26bc40569182468bc3d43cb3f4fe40c86b96b32df0c7a839840aee15fe542821ae8e8583bc430ac770428fe850129c36d08e9380983c902fa7b8ed3fb3cf4608b411660c290beb765361825ca4a5b00d92f328ea4e7b72ec223759841da5dc099b6ab9174b5c05dd8d10c65f48c37b2db27bf8e00463809e1334dd8374d88eae2a1e12d0a1c3700343af8f56dd1140e90b6af86c418df64d62be8decbc7186dd47604983a50df58bcab314c28211f54dd05f8e980bdbb3b69cbfa725d79c77b9306b84d442a0574cb4748eba18fc16de1e1e911da49baa3862a86d52f003377e29a7d999c59a200c0185b8c59f682e25c8a3d21a75ceaee7f8b31a2db0cabf6bd9b16453785dec692cbcd4e8ed2c7ec2603521d55d42f3b135057012b4bded06fd9f977cef66b15ed32959c882582d0eea44e8feb5471bf0cd0c7fbb65509bff5fe6386346967c7a89084ffc47e38bf78f27cf85a365365d42fe42a54780a5b387e990be3c325aa26cb1e1140906bd201ea55057fe632a1fc8e3945e7af32180748251485afa08a6d5f13060a1c5e468e9d40cab21b2a2dc119bc6b6eaaf45cae83ed7d3059e4fb658fa9bccc2018edb5c8be139c2bdbfe45e1e8766cdd8d61eea87f4da2970950f9ca390d1a845fd5f5d2565fc3586e7181cdedc6a139d747718610ca4ede0d2e5a76aad2b3fa89634f6262edf19b126d5563b27b4aaaf19da2b8fb2d69763de448c2d51b998f5ac692127e441c4a5fc75f4db52318ad3e81a58b7b00babbe988df66c1ca3ea562fad96452608dd1218d016e75960c2aa1822ac91b45fefda65fa6901c102b9d9d63652a442127ca7bdc696b9e32f1dcf20b2b3d07d6107e9f1f9327fb237a4874810493a168186e56cdfad5ac6e06931286caea3280c9a092a9a6158cce570162af20f0703e984eb2aaf5fc230e330e7ce987950e036b60d29f53d93f86b5b9bbcd8bd1028264e778a71eeb17eb9719f0a2a4516a22c95c89a4cf5257dd0294906889ae267f83ea90ea943792604a937f3277e70f607bfa6892ac7ab35b97c54877fe210ce4d32e32e34a33456699cc586dd953fa9d4ec0f3df0886bfea9c5a0fde939b927beb14b197b043352285610afdcd4a5fb26e21bf2b0ea83966a2ea0b20738e9d554a756f6fa3564bf0da621d4595470deeba3fd1e1955cfadf9c9f1d0e1c57fab2a2d9dc25dae832e72cd7844b0e8b6f7ba6f6910ea826aa2d15b9c9281e7d5a6dba3fa9a27ffa29166f4928e45b0e1b705e83743400806224939964013b096a2de54b6f9f7a7e11432360b1689d8476b49800165b3b8afbf78c6bbde5dbf49d5839bec6b6bf47f393feb014e44c14ecf6559a81af622d0c588c02fc029cf966da08fc0e762308a83f7c34bc97a0beb2ac2f34650e49b73dac7ca8e9fdcfb8a1c17b962829ac58e622068c21e6fbebae4d3eb819a862f3f00196a2aa1e36876786c91acf39b0f10d1cb829bbee7712d94502e475ab61e9505fb6e54700c023aa131adc9340f8fc6eea908a218ca69458ec2357a3b9e65e28ffeb53c56cb808350f89dcad275557d8358a8e2cbfb707855428d0ce24e8a003dc76779e265d7ccf8bc606bdf05c6d49c2ca544b6ea3997e151993c8891931b457bbd243f258ad6ea94", 0xcf4}], 0x5}, 0x0) 05:51:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10020) 05:51:11 executing program 0: mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="96", 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000004500)={0x0, 0x0, 0x0}, 0x2) 05:51:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x2, 0x4981, 0x90, 0x0, 0x1}, 0x48) 05:51:11 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x48) 05:51:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="96", 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000004500)={0x0, 0x0, 0x0}, 0x2) 05:51:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x100, 0x5, 0xfff, 0x0, 0x1}, 0x48) 05:51:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="96", 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000004500)={0x0, 0x0, 0x0}, 0x2) 05:51:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x2, 0xa84, 0x2a2, 0x0, 0x1}, 0x48) 05:51:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x100, 0x5, 0xfff, 0x0, 0x1}, 0x48) 05:51:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000002c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/92, 0x5c}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="96", 0x1}], 0x1}, 0x0) 05:51:12 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x100, 0x5, 0xfff, 0x0, 0x1}, 0x48) 05:51:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x2}, 0x48) 05:51:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x2, 0xa84, 0x2a2, 0x0, 0x1}, 0x48) 05:51:13 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000004500)={0x0, 0x0, 0x0}, 0x0) 05:51:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x100, 0x5, 0xfff, 0x0, 0x1}, 0x48) 05:51:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x687}, 0x48) 05:51:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x2, 0xa84, 0x2a2, 0x0, 0x1}, 0x48) 05:51:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x100, 0x5, 0xfff, 0x40, 0x1}, 0x48) 05:51:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 05:51:13 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x2, 0xa84, 0x2a2, 0x0, 0x1}, 0x48) 05:51:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 05:51:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x100, 0x5, 0xfff, 0x40, 0x1}, 0x48) 05:51:14 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 05:51:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 05:51:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x4, 0x4, 0x2}, 0x48) 05:51:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x100, 0x5, 0xfff, 0x40, 0x1}, 0x48) 05:51:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x2, 0xa84, 0x90, 0x0, 0x1}, 0x48) 05:51:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x100, 0x5, 0xfff, 0x40, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 05:51:14 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x2, 0xa84, 0x90, 0x0, 0x1}, 0x48) 05:51:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x100, 0x5, 0xfff, 0x40, 0x1}, 0x48) 05:51:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x100, 0x5, 0xfff, 0x40, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 05:51:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x2, 0xa84, 0x90, 0x0, 0x1}, 0x48) 05:51:15 executing program 2: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/68, 0x44}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 05:51:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x100, 0x5, 0xfff, 0x40, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 05:51:15 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x2, 0xa84, 0x90, 0x0, 0x1}, 0x48) 05:51:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:15 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) 05:51:15 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)="aa202ab6a7231660cc0c87ebb61c3247a1dda8669f2b1852936909e9cc964d90b9aed535145c5d6c4345df281fba2f01cad713d751a837c42ed328836174fed2031a2fc2729888132b15cbaa71b3bb0d1ddd904eabb2fce4e6b80d257307b7", 0x5f}, {&(0x7f0000000380)="bf121aae80200da5c2d026a28b413b367cc0910845daa253900d8b680d4194adca780d1e726ffa098a9f3e9bcc81e4e0214dd92de45c4dc74dca1e0fea9499c1dc3f9d51e541ce463dd3404bc3b01627597e403848111cde0a77e52534a19e1cb5a085650247ebdadddc0b5695d715aefa17126fc2463c5ee7b0b200cfed5a05", 0x80}, {&(0x7f0000002100)="9a89e5abdd3258921738ed02b73f4f2266f8cff37afb65e24e158af7216baa8566f0f0a9ac711380ba8263b55e2a1e5f12f6ae1003d259bcf3c33671294d4d6778ed7cab55e2ee56", 0x48}, {&(0x7f0000002180)="c490e09001b7fdd31ad628f3e140eb1b833865232e617009fa6b17384604555d478e91dbbb7e7d8879ff2b6a1df7dd7d87fc1a9f08bc11e287eab7922abde1391873959a2aba7beb895f38f7aec95c53870d13fe7445850079cfdc41acf7b46656262da091902cf81164459c17bd0cc97dc2d4ce540255b770c1761bc8af0f472377c0115339ce38822b8d69fd9c541e740a0ab0417ff9bf902527f3f764e1df4ab3659e0e0cdbc10041866b9024ffcd541c66613c6a4b03e0d5a346a192", 0xbe}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003840)=[{0x0}, {&(0x7f0000002480)=""/246, 0xf6}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x3, &(0x7f00000038c0)=""/180, 0xb4}, 0x0) 05:51:15 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x100, 0x5, 0xfff, 0x40, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 05:51:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x2, 0xa84, 0x90, 0x10, 0x1}, 0x48) 05:51:15 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000580)={[{@fat=@codepage={'codepage', 0x3d, '936'}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2300) [ 486.339087][T12079] loop1: detected capacity change from 0 to 270 05:51:15 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000580)={[{@fat=@codepage={'codepage', 0x3d, '936'}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2300) 05:51:15 executing program 2: chdir(0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000340)=0x40000006) 05:51:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) [ 486.551376][T12081] EXT4-fs warning (device sda1): ext4_group_extend:1858: need to use ext2online to resize further 05:51:16 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:16 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="bd644f", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)="c7a8fa17f28bc6b62e4008d492e9618e2d85f4c1172e887b1131961f6d52a6e6460e0e3f6ea360698d43d2cd01c02a177f3582b84b214bdc9ccb4f8cddda0656430f035abe3dcd21a79273c70f79d469e0c57968ec7c9c0873f07f9d585a421bf01440af8ef8ad6489621b7763886390b7dfe1f2c84683ce3ca814ed2a3b4957", 0x80}], 0x1}}], 0x2, 0x0) 05:51:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) [ 486.727819][T12086] loop1: detected capacity change from 0 to 270 [ 486.855492][T12094] ieee802154 phy0 wpan0: encryption failed: -22 [ 486.874617][T12092] serio: Serial port tty28 05:51:16 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="bd644f", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)="c7a8fa17f28bc6b62e4008d492e9618e2d85f4c1172e887b1131961f6d52a6e6460e0e3f6ea360698d43d2cd01c02a177f3582b84b214bdc9ccb4f8cddda0656430f035abe3dcd21a79273c70f79d469e0c57968ec7c9c0873f07f9d585a421bf01440af8ef8ad6489621b7763886390b7dfe1f2c84683ce3ca814ed2a3b4957", 0x80}], 0x1}}], 0x2, 0x0) [ 486.967926][T12100] ieee802154 phy0 wpan0: encryption failed: -22 05:51:16 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:16 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000580)={[{@fat=@codepage={'codepage', 0x3d, '936'}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2300) 05:51:16 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="bd644f", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)="c7a8fa17f28bc6b62e4008d492e9618e2d85f4c1172e887b1131961f6d52a6e6460e0e3f6ea360698d43d2cd01c02a177f3582b84b214bdc9ccb4f8cddda0656430f035abe3dcd21a79273c70f79d469e0c57968ec7c9c0873f07f9d585a421bf01440af8ef8ad6489621b7763886390b7dfe1f2c84683ce3ca814ed2a3b4957", 0x80}], 0x1}}], 0x2, 0x0) 05:51:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 05:51:16 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="bd644f", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)="c7a8fa17f28bc6b62e4008d492e9618e2d85f4c1172e887b1131961f6d52a6e6460e0e3f6ea360698d43d2cd01c02a177f3582b84b214bdc9ccb4f8cddda0656430f035abe3dcd21a79273c70f79d469e0c57968ec7c9c0873f07f9d585a421bf01440af8ef8ad6489621b7763886390b7dfe1f2c84683ce3ca814ed2a3b4957", 0x80}], 0x1}}], 0x2, 0x0) [ 487.126959][T12104] ieee802154 phy0 wpan0: encryption failed: -22 [ 487.163684][T12106] serio: Serial port tty28 [ 487.168588][T12108] loop1: detected capacity change from 0 to 270 05:51:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 05:51:16 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000580)={[{@fat=@codepage={'codepage', 0x3d, '936'}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2300) [ 487.300980][T12112] ieee802154 phy0 wpan0: encryption failed: -22 [ 487.371919][T12114] serio: Serial port tty28 [ 487.515910][T12117] loop1: detected capacity change from 0 to 270 [ 487.517816][ T3648] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.558601][ T3648] Buffer I/O error on dev loop1, logical block 0, async page read [ 487.585603][ T3648] loop1: unable to read partition table 05:51:17 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) write$binfmt_misc(r0, 0x0, 0x0) 05:51:17 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "22a251e5a14f7426fc55915a4cb36c0aa92ef1cfcc53a34931b98f268749b03c2783d4d20791e33fb67a4ffe88ab536b06abe548bc126a5bc81de91dc3f53d", 0x10}, 0x60) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 05:51:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCGSTAMP(r0, 0x8953, 0x0) [ 487.841577][T12125] INFO: trying to register non-static key. [ 487.847434][T12125] The code is fine but needs lockdep annotation, or maybe [ 487.854549][T12125] you didn't initialize this object before use? [ 487.860792][T12125] turning off the locking correctness validator. [ 487.867730][T12125] CPU: 1 PID: 12125 Comm: syz-executor.2 Not tainted 6.0.0-rc3-syzkaller-00031-gc5e4d5e99162 #0 [ 487.878178][T12125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 487.888416][T12125] Call Trace: [ 487.891790][T12125] [ 487.894984][T12125] dump_stack_lvl+0x1e3/0x2cb [ 487.899729][T12125] ? io_notif_register+0x5e7/0x5e7 [ 487.904947][T12125] ? panic+0x76b/0x76b [ 487.909105][T12125] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 487.915166][T12125] ? __module_address+0x2e/0x2b0 [ 487.920203][T12125] assign_lock_key+0x22a/0x240 [ 487.925051][T12125] ? SOFTIRQ_verbose+0x10/0x10 [ 487.929935][T12125] ? finish_lock_switch+0x8e/0x100 [ 487.935116][T12125] register_lock_class+0x287/0x9b0 [ 487.940350][T12125] ? __lock_acquire+0x1292/0x1f60 [ 487.945391][T12125] ? is_dynamic_key+0x1f0/0x1f0 [ 487.950259][T12125] __lock_acquire+0xe4/0x1f60 [ 487.954943][T12125] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 487.961015][T12125] lock_acquire+0x1a7/0x400 [ 487.965542][T12125] ? gsmld_write+0x5b/0x120 [ 487.970240][T12125] ? __lock_acquire+0x1f60/0x1f60 [ 487.975376][T12125] ? read_lock_is_recursive+0x10/0x10 [ 487.980793][T12125] ? __might_fault+0xb2/0x110 [ 487.985555][T12125] ? _copy_from_iter+0x370/0xff0 [ 487.990593][T12125] ? _raw_spin_lock_irqsave+0xac/0x120 [ 487.996145][T12125] _raw_spin_lock_irqsave+0xd1/0x120 [ 488.001547][T12125] ? gsmld_write+0x5b/0x120 [ 488.006070][T12125] ? _raw_spin_lock+0x40/0x40 [ 488.010769][T12125] ? trace_raw_output_contention_end+0xd0/0xd0 [ 488.016972][T12125] ? rcu_read_lock_sched_held+0x89/0x130 [ 488.022749][T12125] ? tty_ldisc_ref_wait+0x21/0x70 [ 488.027822][T12125] gsmld_write+0x5b/0x120 [ 488.032179][T12125] file_tty_write+0x5a5/0x960 [ 488.036945][T12125] ? gsmld_read+0x10/0x10 [ 488.041295][T12125] vfs_write+0x7b5/0xbb0 [ 488.045670][T12125] ? file_end_write+0x230/0x230 [ 488.050727][T12125] ? __fdget_pos+0x1d2/0x2e0 [ 488.055358][T12125] ? ksys_write+0x77/0x2c0 [ 488.059877][T12125] ksys_write+0x19b/0x2c0 [ 488.064217][T12125] ? print_irqtrace_events+0x220/0x220 [ 488.069687][T12125] ? __ia32_sys_read+0x80/0x80 [ 488.074458][T12125] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 488.080453][T12125] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 488.086445][T12125] do_syscall_64+0x2b/0x70 05:51:17 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:17 executing program 1: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x150002c0) 05:51:17 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 488.090971][T12125] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 488.096899][T12125] RIP: 0033:0x7fe221489279 [ 488.102624][T12125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 488.122612][T12125] RSP: 002b:00007fe2225d5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 488.131046][T12125] RAX: ffffffffffffffda RBX: 00007fe22159bf80 RCX: 00007fe221489279 [ 488.139210][T12125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 488.147392][T12125] RBP: 00007fe2214e32e9 R08: 0000000000000000 R09: 0000000000000000 [ 488.155507][T12125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.163491][T12125] R13: 00007ffe0344c44f R14: 00007fe2225d5300 R15: 0000000000022000 [ 488.171486][T12125] [ 488.174499][T12125] BUG: sleeping function called from invalid context at kernel/printk/printk.c:2566 [ 488.184022][T12125] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 12125, name: syz-executor.2 [ 488.193548][T12125] preempt_count: 1, expected: 0 [ 488.198391][T12125] RCU nest depth: 0, expected: 0 [ 488.203315][T12125] INFO: lockdep is turned off. [ 488.208059][T12125] irq event stamp: 1128 [ 488.212215][T12125] hardirqs last enabled at (1127): [] syscall_enter_from_user_mode+0x2e/0x1d0 [ 488.222754][T12125] hardirqs last disabled at (1128): [] _raw_spin_lock_irqsave+0xac/0x120 [ 488.232908][T12125] softirqs last enabled at (0): [] copy_process+0x15ee/0x4010 [ 488.242357][T12125] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 488.249469][T12125] Preemption disabled at: [ 488.249476][T12125] [<0000000000000000>] 0x0 [ 488.258280][T12125] CPU: 1 PID: 12125 Comm: syz-executor.2 Not tainted 6.0.0-rc3-syzkaller-00031-gc5e4d5e99162 #0 [ 488.268681][T12125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 488.278745][T12125] Call Trace: [ 488.282026][T12125] [ 488.284968][T12125] dump_stack_lvl+0x1e3/0x2cb [ 488.289665][T12125] ? io_notif_register+0x5e7/0x5e7 [ 488.294772][T12125] ? panic+0x76b/0x76b [ 488.298867][T12125] __might_resched+0x538/0x6a0 [ 488.303643][T12125] ? __might_sleep+0xc0/0xc0 [ 488.308316][T12125] ? io_notif_register+0x5e7/0x5e7 [ 488.313426][T12125] ? panic+0x76b/0x76b [ 488.317488][T12125] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 488.323481][T12125] console_lock+0x16/0x70 [ 488.327800][T12125] do_con_write+0x113/0x77b0 [ 488.332385][T12125] ? assign_lock_key+0x22a/0x240 [ 488.338266][T12125] ? SOFTIRQ_verbose+0x10/0x10 [ 488.343105][T12125] ? finish_lock_switch+0x8e/0x100 [ 488.348481][T12125] ? register_lock_class+0x287/0x9b0 [ 488.353759][T12125] ? __lock_acquire+0x1292/0x1f60 [ 488.358777][T12125] ? is_dynamic_key+0x1f0/0x1f0 [ 488.363620][T12125] ? __lock_acquire+0xe4/0x1f60 [ 488.369765][T12125] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 488.375757][T12125] ? vt_resize+0xc0/0xc0 [ 488.379998][T12125] ? __lock_acquire+0x1f60/0x1f60 [ 488.385010][T12125] ? debug_locks_off+0x61/0x80 [ 488.389764][T12125] ? spin_bug+0x16/0x1d0 [ 488.394022][T12125] ? do_raw_spin_lock+0x148/0x360 [ 488.399058][T12125] ? __rwlock_init+0x140/0x140 [ 488.403832][T12125] ? _copy_from_iter+0x370/0xff0 [ 488.408795][T12125] ? _raw_spin_lock_irqsave+0xac/0x120 [ 488.414258][T12125] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 488.419730][T12125] con_write+0x28/0x640 [ 488.423905][T12125] ? tty_ldisc_ref_wait+0x21/0x70 [ 488.428939][T12125] gsmld_write+0xf9/0x120 [ 488.433268][T12125] file_tty_write+0x5a5/0x960 [ 488.437960][T12125] ? gsmld_read+0x10/0x10 [ 488.442286][T12125] vfs_write+0x7b5/0xbb0 [ 488.446699][T12125] ? file_end_write+0x230/0x230 [ 488.451564][T12125] ? __fdget_pos+0x1d2/0x2e0 [ 488.456165][T12125] ? ksys_write+0x77/0x2c0 [ 488.460588][T12125] ksys_write+0x19b/0x2c0 [ 488.464935][T12125] ? print_irqtrace_events+0x220/0x220 [ 488.470406][T12125] ? __ia32_sys_read+0x80/0x80 [ 488.475194][T12125] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 488.481209][T12125] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 488.487198][T12125] do_syscall_64+0x2b/0x70 [ 488.491640][T12125] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 488.497533][T12125] RIP: 0033:0x7fe221489279 [ 488.501952][T12125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 488.521634][T12125] RSP: 002b:00007fe2225d5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 488.530124][T12125] RAX: ffffffffffffffda RBX: 00007fe22159bf80 RCX: 00007fe221489279 05:51:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) write$binfmt_misc(r0, 0x0, 0x0) 05:51:18 executing program 1: syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002440), 0x0, &(0x7f00000024c0)={[{@umask}]}) [ 488.538362][T12125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 488.546927][T12125] RBP: 00007fe2214e32e9 R08: 0000000000000000 R09: 0000000000000000 [ 488.554886][T12125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.562895][T12125] R13: 00007ffe0344c44f R14: 00007fe2225d5300 R15: 0000000000022000 [ 488.570883][T12125] 05:51:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) write$binfmt_misc(r0, 0x0, 0x0) 05:51:18 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) 05:51:18 executing program 1: syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002440), 0x0, &(0x7f00000024c0)={[{@umask}]}) 05:51:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) write$binfmt_misc(r0, 0x0, 0x0) 05:51:18 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)) 05:51:18 executing program 1: syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002440), 0x0, &(0x7f00000024c0)={[{@umask}]}) 05:51:18 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:18 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x404c534a, &(0x7f0000000080)) fdatasync(0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000540)={0xffffffffffffffff, 0x2}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x4c, 0x200, 0x0, 0x0, 0x390, 0x2e8, 0x2e8, 0x390, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30, 'cluster\x00', 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@multicast1}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv6=@mcast1}, {@ipv6=@loopback, [], @ipv6=@private2}]}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0x100, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@realm={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) socket$nl_netfilter(0x10, 0x3, 0xc) 05:51:18 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:18 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 05:51:18 executing program 1: syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002440), 0x0, &(0x7f00000024c0)={[{@umask}]}) 05:51:18 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) clock_gettime(0x0, &(0x7f0000003ac0)) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 05:51:18 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f905, 0x0, '\x00', @p_u32=0x0}}) 05:51:19 executing program 1: socketpair(0x2c, 0x3, 0x0, &(0x7f00000001c0)) 05:51:19 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@jqfmt_vfsold}]}) 05:51:19 executing program 4: r0 = msgget(0x3, 0x321) msgctl$IPC_RMID(r0, 0x0) 05:51:19 executing program 4: r0 = msgget(0x3, 0x321) msgctl$IPC_RMID(r0, 0x0) [ 488.682931][T12126] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 489.696844][T12188] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "" 05:51:19 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:19 executing program 1: socketpair(0x2c, 0x3, 0x0, &(0x7f00000001c0)) 05:51:19 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:19 executing program 4: r0 = msgget(0x3, 0x321) msgctl$IPC_RMID(r0, 0x0) 05:51:19 executing program 1: socketpair(0x2c, 0x3, 0x0, &(0x7f00000001c0)) 05:51:19 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@jqfmt_vfsold}]}) 05:51:19 executing program 1: socketpair(0x2c, 0x3, 0x0, &(0x7f00000001c0)) 05:51:19 executing program 4: r0 = msgget(0x3, 0x321) msgctl$IPC_RMID(r0, 0x0) [ 490.363721][T12205] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "" 05:51:19 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000580)={[{@fat=@codepage={'codepage', 0x3d, '936'}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:51:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x30}}, 0x0) 05:51:19 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@jqfmt_vfsold}]}) [ 490.484972][T12216] loop1: detected capacity change from 0 to 270 [ 490.581723][T12218] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "" 05:51:20 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:20 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000580)={[{@fat=@codepage={'codepage', 0x3d, '936'}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:51:20 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 490.739845][T12229] loop1: detected capacity change from 0 to 270 05:51:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:20 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@jqfmt_vfsold}]}) 05:51:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x30}}, 0x0) 05:51:20 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000580)={[{@fat=@codepage={'codepage', 0x3d, '936'}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:51:20 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:20 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) [ 491.255911][T12239] loop1: detected capacity change from 0 to 270 [ 491.266049][T12238] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "" 05:51:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:20 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x0, 0x14}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 05:51:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:20 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000580)={[{@fat=@codepage={'codepage', 0x3d, '936'}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:51:20 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x0, 0x14}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 05:51:20 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x30}}, 0x0) 05:51:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:21 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x0, 0x14}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 05:51:21 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x0, 0x14}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 491.547160][T12260] loop1: detected capacity change from 0 to 270 05:51:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:21 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:21 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept(r0, 0x0, 0x0) 05:51:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x30}}, 0x0) 05:51:21 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind(r0, &(0x7f0000000000)=@l2, 0x80) 05:51:21 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:21 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept(r0, 0x0, 0x0) 05:51:21 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="1020f5f201000b0009000000030000000c000000090000001f000000010000000000000000400000000000000b0000001e", 0x31, 0x1400}], 0x0, &(0x7f0000014900)) 05:51:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:21 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:51:21 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept(r0, 0x0, 0x0) [ 492.043354][T12295] loop2: detected capacity change from 0 to 20 05:51:21 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) [ 492.084709][T12295] loop2: unable to read partition table [ 492.109939][T12295] loop2: partition table beyond EOD, truncated [ 492.126331][T12295] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 492.137922][T12295] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 492.147584][T12295] F2FS-fs (loop2): Invalid segment/section count (30, 11 x 31) [ 492.156539][T12295] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 05:51:21 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:21 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept(r0, 0x0, 0x0) 05:51:21 executing program 4: semget$private(0x0, 0x1, 0x500) 05:51:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:21 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:21 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 05:51:21 executing program 2: semget$private(0x0, 0x2, 0x20) 05:51:21 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) accept$unix(r0, 0x0, 0x0) 05:51:21 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$KDSETLED(r0, 0x4b32, 0x0) 05:51:21 executing program 1: r0 = semget$private(0x0, 0x3, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000004280)={{0x2}}) 05:51:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:21 executing program 2: semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000040)=""/4096) 05:51:22 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:22 executing program 4: semget$private(0x0, 0x2, 0x210) 05:51:22 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/223) 05:51:22 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$FUSE_OPEN(r0, 0x0, 0x0) 05:51:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:22 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x161101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 05:51:22 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/dmi', 0x0, 0x5) 05:51:22 executing program 1: semget$private(0x0, 0x1, 0x80) 05:51:22 executing program 4: semget$private(0x0, 0x3, 0x2d7) 05:51:22 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x80) 05:51:22 executing program 2: semget$private(0x0, 0x4, 0x10a) 05:51:22 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:22 executing program 4: creat(&(0x7f0000000040)='./file0\x00', 0x2c) 05:51:22 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x80) 05:51:22 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:23 executing program 2: socket$inet(0x2, 0x1, 0x7) 05:51:23 executing program 4: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002100), 0x2, 0x0) 05:51:23 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x80) 05:51:23 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:23 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:23 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x80) 05:51:23 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 05:51:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) 05:51:23 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 05:51:23 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x68f45220da9a324f, 0x0) 05:51:23 executing program 4: r0 = semget(0x1, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000000)=""/212) 05:51:23 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x143, 0x0) 05:51:23 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 05:51:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:23 executing program 2: semget(0x1, 0x2, 0x44) 05:51:23 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:23 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x10000000) io_uring_enter(r3, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:23 executing program 2: semget(0x1, 0x3, 0x2c0) 05:51:23 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @broadcast}, 0x0) msgget(0x3, 0x624) 05:51:23 executing program 2: munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) 05:51:23 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights], 0x10}, 0x0) 05:51:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) 05:51:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) sendmsg(r0, &(0x7f00000004c0)={&(0x7f0000000280)=@un=@abs, 0x8, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) 05:51:24 executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 05:51:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 05:51:24 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)) 05:51:24 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) io_uring_enter(r2, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:24 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 05:51:24 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:24 executing program 2: open(&(0x7f0000000340)='./file0\x00', 0x200, 0x0) 05:51:24 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x0) 05:51:24 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$unix(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001800)=[{0x0}], 0x1}, 0x0) 05:51:24 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 05:51:24 executing program 2: open$dir(&(0x7f0000000000)='.\x00', 0x2, 0x0) 05:51:24 executing program 4: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/57) 05:51:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:25 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="4cc6f8968e339844b68611fedc1010039fbb15998448104c1f046b4c91ca0d8c38eab216b853016f1a23978643047301bdee93690639f1d1225650280d7e2a34beefd5fab38d15088bf2e4e5912c5e4513049443598db99fe706771bc720492c1a838bb554bac3ddd848e3f9254c70146f57cfee646b86a54811c57ca48ea5e548d3cad2f804d592df469ea5f306f17569df6027eb95f5a17ef7837bcb8c04977d8595805e80d7cdf671f65d335873e13b97f50b607342ae40aab1a0bff01309", 0xc0}, {&(0x7f0000000100)="7e80a7120482d6231ceebc73a17c977a782eb339319a792c5b850a", 0x1b}, {&(0x7f0000000140)="e2428e4742061abd9e3e85ae63c56f73b0cbdaa66c39fd8b7a13d9e592dd8eeb6a6e0210f6223b951bc6d666a40858e779ebab86d8a17dd9a2b606d81bb23e4fdeb0601798104629eb162c54c5dd2f5526a4c10f818cbb595ba43c448b7b8bad9e4023e0dde3dc17", 0x68}], 0x3) 05:51:25 executing program 4: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @val, {@ipv6}}, 0x0) 05:51:25 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) io_uring_enter(r2, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:25 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x400c0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000000000)=0x5e30, 0x4) 05:51:25 executing program 2: socket(0x0, 0x0, 0xfb) 05:51:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000000000)=0x5e30, 0x4) 05:51:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000000000)=0x5e30, 0x4) 05:51:25 executing program 1: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 05:51:25 executing program 2: socket(0x0, 0x0, 0xfb) 05:51:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@un=@abs={0x0, 0x0, 0x2}, 0x8) 05:51:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:26 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) io_uring_enter(r2, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000000000)=0x5e30, 0x4) 05:51:26 executing program 1: r0 = socket$inet6(0x18, 0x3, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x9, 0x0, 0xfffffffffffffe1e}, 0x0) 05:51:26 executing program 2: socket(0x0, 0x0, 0xfb) 05:51:26 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000040), 0x4) 05:51:26 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fcntl$setown(r0, 0x6, 0xffffffffffffffff) 05:51:26 executing program 1: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/57) shmget$private(0x0, 0x2000, 0x91, &(0x7f0000ffc000/0x2000)=nil) 05:51:26 executing program 2: socket(0x0, 0x0, 0xfb) 05:51:26 executing program 4: fchownat(0xffffffffffffffff, &(0x7f0000001780)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) 05:51:26 executing program 1: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/57) shmget$private(0x0, 0x2000, 0x91, &(0x7f0000ffc000/0x2000)=nil) 05:51:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a, 0x0, 0x0, 0x0, 0xee411cd7) 05:51:27 executing program 4: syz_emit_ethernet(0x4f, &(0x7f0000000100)={@broadcast, @local, @val, {@ipv6}}, 0x0) 05:51:27 executing program 1: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/57) shmget$private(0x0, 0x2000, 0x91, &(0x7f0000ffc000/0x2000)=nil) 05:51:27 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 05:51:27 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) io_uring_enter(r2, 0xf63, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31f1, &(0x7f0000000140)={0x0, 0x1ad, 0x10, 0x2, 0x232, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000000780)=""/204, 0xcc}], 0x7}, 0x2020) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:51:27 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nf_conntrack\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/50) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0x19) sendfile(r4, r5, &(0x7f00000001c0), 0xff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x100000000, 0x7fffffffffffffff}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 05:51:27 executing program 1: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/57) shmget$private(0x0, 0x2000, 0x91, &(0x7f0000ffc000/0x2000)=nil) 05:51:27 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0)